Back to Help Center

DNS Lookup Tool Guide

Advanced DNS Lookup Capabilities

Our DNS lookup tool provides comprehensive DNS query functionality including forward lookups, reverse DNS lookups, DNS trace visualization, and DNSSEC validation.

Features Overview

Forward DNS Lookup

Query domain names to resolve IP addresses and other DNS records

Reverse DNS Lookup

Look up IP addresses to find associated domain names

DNS Trace

Visualize the complete DNS resolution path from root servers

DNSSEC Validation

Verify DNS responses with DNSSEC authentication

Using Forward DNS Lookup

  1. Select Forward DNS mode (default)
  2. Enter a domain name in the input field (e.g., example.com)
  3. Choose a record type:
    • A - IPv4 address
    • AAAA - IPv6 address
    • MX - Mail exchange servers
    • TXT - Text records (SPF, DMARC, etc.)
    • NS - Name servers
    • CNAME - Canonical name (alias)
    • SOA - Start of Authority
    • And many more...
  4. Select a DNS server or use system default
  5. Click "Perform DNS Lookup"

Using Reverse DNS Lookup

IP Address Required

Reverse DNS lookup requires a valid IPv4 or IPv6 address. Domain names cannot be used for reverse lookups.

  1. Click the "Reverse DNS" button to switch modes
  2. Enter an IP address:
    • IPv4 example: 8.8.8.8
    • IPv6 example: 2001:4860:4860::8888
  3. Click "Perform DNS Lookup"
  4. The tool will automatically:
    • Convert the IP to reverse DNS format
    • Query for PTR records
    • Display the associated domain name(s)

Using DNS Trace

DNS trace shows the complete resolution path from root servers to the final answer. This is useful for:

  • Debugging DNS resolution issues
  • Understanding DNS hierarchy
  • Identifying slow or failing name servers
  • Learning how DNS works

Professional Visualization

Our DNS trace provides a visual timeline showing each step, response times, server information, and returned records at each hop.

To enable DNS trace:

  1. Check the "Enable DNS trace" checkbox before performing the lookup
  2. Perform the DNS lookup as normal
  3. View the trace visualization that appears with the results
  4. The trace shows:
    • Each DNS server queried
    • Response times for each hop
    • Records returned at each step
    • Total resolution time
    • Success or failure status

Advanced Options

EDNS Client Subnet

Simulate DNS queries from a specific network location. This is useful for testing geo-located DNS responses or CDN behavior.

Example: 192.0.2.0/24

Protocol Selection

Choose between UDP (default) and TCP protocols. TCP is useful for:

  • Large DNS responses that exceed 512 bytes
  • Firewall environments that block UDP
  • Testing DNS-over-TCP support

Custom DNS Port

Change from the default port 53 if your DNS server uses a non-standard port.

Query Class

Select the DNS query class:

  • IN - Internet (default)
  • CH - Chaos (used for DNS server information)
  • HS - Hesiod (historical)

DNSSEC Validation

Enable DNSSEC validation to verify the authenticity of DNS responses. The tool will show whether responses are properly signed and validated.

Understanding Results

Query Summary

Shows the query details, server used, response time, and status code.

DNS Records

Displays all returned records organized by section (Answer, Authority, Additional).

Response Flags

Important DNS flags and their meanings:

  • AA - Authoritative Answer
  • TC - Truncated Response
  • RD - Recursion Desired
  • RA - Recursion Available
  • AD - Authenticated Data (DNSSEC)

Tips and Best Practices

Pro Tips

  • Use different DNS servers to compare results and check propagation
  • Enable trace for educational purposes or troubleshooting
  • Check both A and AAAA records for complete IPv4/IPv6 information
  • Use reverse DNS to verify mail server configurations
  • Save important results using the copy button for documentation

Common Use Cases

Domain Verification

Verify DNS records are properly configured for email, websites, and services

Troubleshooting

Diagnose DNS resolution issues and propagation problems

Security Audits

Check DNSSEC implementation and verify DNS security

Email Configuration

Verify MX, SPF, DKIM, and DMARC records for email deliverability

Need more help? Check out our other guides on Understanding DNS Records or Multi-CDN and EDNS Client Subnet.