# DNS tools

Inspect DNS answers and diagnose resolution problems.

Canonical: https://tamperbox.dev/categories/dns

Updated: 2026-10-29

Reviewed: 2026-10-26

Inspect DNS answers and diagnose resolution problems.

## Choose a check

Read record types, compare resolver answers, inspect delegation and DNSSEC, or follow reverse naming. DNS results are observations from the queried resolvers, not a guarantee that every cache agrees. Registration and availability checks live in the Domains, registration & hosting collection.

## Tools in this collection

- [DNS Lookup](https://tamperbox.dev/dns-lookup): **Check where a domain points before blaming the app.**

  Ask Cloudflare, Google, Quad9 or the authoritative server for any record.
- [DNS Propagation Checker](https://tamperbox.dev/dns-propagation): **Changed DNS, but some people still see the old site? Compare the answers.**

  Has the change reached everyone? Twelve public resolvers against the authoritative answer.
- [TXT Record Lookup](https://tamperbox.dev/txt-lookup): **A service won't verify your domain? Check the records it can see.**

  Read every TXT record of a name and what it is for, with length and string checks.
- [CNAME Lookup](https://tamperbox.dev/cname-lookup): **Moved or deleted a hosted service? Look for aliases left pointing at it.**

  Follow an alias to its end and catch dangling CNAMEs that risk subdomain takeover.
- [NS Lookup](https://tamperbox.dev/ns-lookup): **Changing DNS providers? Check which nameservers your domain delegates to.**

  List the nameservers a zone delegates to and the provider behind each.
- [SOA Lookup](https://tamperbox.dev/soa-lookup): **Investigate DNS updates and cache timing at the zone level.**

  Read a zone’s SOA field by field: serial, contact and timers checked against RFC 1912.
- [AAAA Lookup](https://tamperbox.dev/aaaa-lookup): **Check where IPv6 visitors are being sent.**

  List a name’s IPv6 addresses and the network behind each one.
- [SRV Lookup](https://tamperbox.dev/srv-lookup): **Find the servers an app is told to use, and which it should try first.**

  See which server a client tries first and the share each gets by weight.
- [CAA Lookup](https://tamperbox.dev/caa-lookup): **Trouble issuing a certificate? Check which issuers your domain allows.**

  See which certificate authorities may issue for a name, and which already did.
- [DNSSEC Checker](https://tamperbox.dev/dnssec-checker): **DNS stopped resolving after a change? Check for broken signatures or delegation.**

  Follow the chain of trust from the root to a name and find the link that breaks it.
- [Reverse DNS Lookup](https://tamperbox.dev/reverse-dns): **Find the name attached to an IP address and whether the two agree.**

  Find the name behind an IP address and check that it points back.

## Continue exploring

[API & HTTP tools](https://tamperbox.dev/categories/api) · [Email authentication tools](https://tamperbox.dev/categories/email) · [Domains, registration & hosting tools](https://tamperbox.dev/categories/domains) · [Network & IP tools](https://tamperbox.dev/categories/network) · [Crawl, SEO & site checks](https://tamperbox.dev/categories/web) · [Web security & TLS tools](https://tamperbox.dev/categories/security) · [Data format tools](https://tamperbox.dev/categories/data) · [Text & test data tools](https://tamperbox.dev/categories/text-testdata) · [Localization tools](https://tamperbox.dev/categories/localization) · [UI testing tools](https://tamperbox.dev/categories/ui-testing)