DNS Finder.Every record. One lookup.
A full DNS lookup and audit in one pass: every record a domain publishes, the authoritative provider actually answering for it, propagation state across regions, and the misconfigurations, TTL extremes, chained CNAMEs, lame delegations, that quietly slow resolution down.
Try: github.comnytimes.comcdnworld.comshopify.com
—
—
Nameservers (NS)
Addresses (A / AAAA)
Mail (MX)
SOA
Want this analyzed by a human, alongside your CDN and security posture? Get a free infrastructure assessment →
DNS Finder in four questions.
NS patterns identify the authoritative provider, the answer behind “who do we call when resolution breaks?”
A, AAAA, CNAME, MX, TXT, NS, CAA and friends, everything the domain publishes, in one inventory.
Whether a recent change has actually reached resolvers across regions, or is still fighting an old TTL.
Chained CNAMEs, extreme TTLs, missing AAAA records and lame delegations, flagged with the fix.
How it works.
The same signals our analysts use in paid assessments, automated.
Queries the authoritative servers directly rather than trusting a cache, so the report shows what the domain actually publishes.
CoreThe same lookups from multiple vantage points reveal propagation lag and region-dependent answers.
CoreNameserver patterns map to the managed-DNS provider, the operator behind the records.
CoreRecords are graded against a ruleset built from the DNS issues we meet in real assessments.
SupportingWhat you’ll get.
Every published record, grouped and annotated.
IncludedWho answers authoritatively, and whether DNSSEC is present and valid.
IncludedWhere the milliseconds go between the first query and a usable answer.
IncludedMisconfigurations ordered by user-visible impact, not alphabetically.
IncludedWho it’s for.
Audit before and after a DNS or CDN move, and catch the record someone forgot.
Steering strategies live or die on DNS hygiene; this is the pre-flight check.
When TTFB is fine but first visits feel slow, resolution is the usual suspect.
Sweep a portfolio of domains for expired experiments and dangling records.
Free at launch. In build now.
The toolkit automates the detection and benchmark data behind the assessments we already run, the tools are how we prove the data is good.
Every tool ships free with shareable reports; the business model is the advisory behind it, not your email address.
First releases are in build. Dates are windows, not promises, we ship when the detection is trustworthy.
Want the answer before the tool exists? A free assessment runs the same analysis, human-graded, usually within 24 hours, and puts you on the early-access list for DNS Finder.
DNS Finder in context.
The research this tool automates.
More free CDN World tools
All part of the same toolkit — passive, non-intrusive, no signup.
DNS Finder questions,
answered straight.
When does DNS Finder launch?
It’s in the first wave of the toolkit, available now (beta) with a 2026 launch window. The tools page has the early-access list.
Will it be free?
Yes, free with no signup, like the rest of the toolkit.
How is it different from dig or an online lookup?
A raw lookup shows you records; DNS Finder shows you what they mean: the provider behind them, the propagation state, and a graded list of what to fix, built from the ruleset we apply in paid assessments.
Does it check DNSSEC?
Yes, presence and validity are part of the standard report.
Can it audit many domains at once?
Batch auditing is on the roadmap after launch; the first release is single-domain with shareable reports.
I need a DNS answer today.
Ask for a free assessment, DNS review is part of every one we run.
All product names, logos and brands referenced in tool reports are the property of their respective owners and are used for identification purposes only. CDN World tools perform passive, non-intrusive analysis. Tool capabilities and launch timing described on this page are plans, not commitments, and may change.