Domain & DNS

DNS Lookup

Resolve A, AAAA, CAA, CNAME, MX, NS, SOA and TXT records.

Enter a bare domain such as example.com (no https://). One name and one record type are sent to the FKINFAST server for the DNS query; results are not stored.

Results appear here. Enter a domain, choose a record type, then select Look up.

Domain Health Report

This page checks one thing. The report checks thirteen — and tells you what to fix first.

A one-off €14.90 report, delivered by email in minutes. Every finding comes with a concrete fix, prioritized.

  • DNS records (A/AAAA)
  • Nameservers (NS)
  • Mail servers (MX)
  • SPF record and policy
  • DMARC record and policy
  • DKIM record (common selectors)
  • HTTPS availability
  • HTTP to HTTPS redirect
  • TLS certificate (issuer, validity, expiry)
  • Security headers (HSTS, CSP…)
  • CAA records
  • robots.txt availability
  • sitemap.xml availability
Get the Domain Report€14.90 · One-time payment. No subscription.

How the DNS lookup works

  1. Enter a bare domain name, such as example.com, and choose one record type.
  2. FKINFAST sends the domain and record type to its server and resolves the record through a public DNS resolver. Each request carries one name and one type.
  3. The result shows the records and, when the resolver provides them, their TTLs, plus a PASS, WARNING, FAIL or UNKNOWN status.

Unlike the browser-local utilities, a DNS lookup cannot run in the page: the domain and record type you enter are sent to the FKINFAST server for the query. The endpoint does not log request bodies or resolver internals and does not store results; a short-lived in-memory cache may hold public DNS answers to reduce resolver load. Standard edge and server request metadata, such as time and source IP, may be retained by Cloudflare and the hosting provider as part of normal operation.

Result states

PASS
At least one record of the requested type was returned.
WARNING
The query completed, but no records of that type were returned.
FAIL
The DNS query completed and the name, or the record type for that name, does not exist. This is a DNS answer, not an HTTP or service failure.
UNKNOWN
The query timed out or the resolver failed. It says nothing definite about the domain; retry the lookup.

Page-level errors are separate from these DNS results. A validation error, rate limit, busy response, unavailable service or network failure is shown as an error, not as a FAIL result.

Record types

A
IPv4 address of the host.
AAAA
IPv6 address of the host.
CAA
Which certificate authorities may issue certificates.
CNAME
Canonical alias pointing to another name.
MX
Mail exchangers, with their priority values.
NS
Authoritative name servers for the zone.
SOA
Start of authority: primary server and zone timers.
TXT
Free-text records such as SPF, DMARC and site verification.

DNS lookup FAQ

Is the lookup private?

No. The domain and record type are sent to the FKINFAST server so it can run the query, then the answer comes back to this page. FKINFAST does not store the lookup, and the resolver answer itself is public DNS data.

Why does a valid record type return WARNING?

WARNING means the query completed but the domain publishes no records of that type. That is common: many domains have no CAA or TXT records, and absence is a legitimate configuration, not an error.

What should I do when the result is UNKNOWN?

UNKNOWN means the query timed out or the resolver returned an error, so the answer is inconclusive. Wait a moment and run the lookup again; it is not a statement that the domain or record is missing.

Why is a TTL missing on some records?

TTLs are shown when the resolver returns them. For several record types the resolver provides the value without a TTL, and the table then shows only the record data.

Can this tool query PTR, ANY or AXFR records?

No. Only A, AAAA, CAA, CNAME, MX, NS, SOA and TXT are supported. Reverse lookups (PTR), zone transfers (AXFR) and ANY queries are deliberately not available.

Related tools