Technology intelligence from a DNS lookup
Enter a company domain and DNSai returns what it runs: the email gateway behind its MX records, the vendors it publishes through SPF, TXT, DMARC and NS, the DKIM services that sign its mail, and the platform its website answers with. Underneath all of it is a full DNS lookup covering A, AAAA, MX, NS, TXT, SOA and the authentication records, each one labeled in plain English.
Run it on your own domain to document a configuration before you touch production, or on a customer, partner or competitor to see who they buy from. WHOIS, blacklist checks and email header analysis sit alongside. Every tool here is also reachable through the API and the MCP connectors, so Claude can run the same lookups you do.
Comprehensive DNS Lookup
Query any domain for A, AAAA, CNAME, NS, SOA, TXT & MX records across Google, Cloudflare or NextDNS resolvers, with every record labeled in plain English.
Advanced DNS Lookup
Check MX routing, count SPF lookups against the limit of 10, discover DKIM selectors, and confirm the mail servers actually answer.
SPF / DKIM / DMARC Check
Find syntax errors, alignment gaps, and policies that stop short of enforcement, on your own domain or on anyone else's.
DNS Record Export & Backup
Export the full record set for documentation, audits and disaster recovery, or to join against a list you already keep.
Advanced DNS Analysis
One report on one domain: records, mail routing, authentication posture, the vendors it publishes, and the platform its website runs on.
Bulk Scan for Security & Business Intelligence
See which vendors a company runs by reading what its DNS already publishes: 1,131 vendors matched from 1,563 published patterns. Useful for account research, partner due diligence and competitive work, a list at a time.
Intelligent DNS Lookup
One search pulls A, AAAA, CNAME, TXT, SOA, SRV, MX, and the email authentication records, then groups them so the picture reads at a glance: who runs the mail, who signs it, and what the policy does when a message fails. Copy a shareable link, hand it to a colleague, or export the result for an audit. One domain per lookup here; for a list, use Bulk Lookup, DNS Explorer or the API.
One domain, five findings
Every line below comes from records a company publishes itself or from a live fetch of its own website. Nothing installed, nothing asked of the company.
Email gateway
nvidia.com routes its mail through Microsoft 365, read straight off the MX records. 279 gateway vendors are recognised by name.
Vendors in DNS
openai.com publishes 49 vendors across its SPF, TXT, DMARC and NS records. 1,131 vendors are matched from 1,563 published patterns.
Website platform
The site itself gets fetched and its meta tags, scripts, headers and cookies read: WordPress, Shopify, Adobe Experience Manager, Sitecore, Next.js and 127 more signatures across 15 categories.
DKIM vendor
The selector a signature is published under names the service signing the mail. 400 vendor selector families are identified, from Google and Microsoft down to a single marketing tool.
Company context
10,750 company profiles carry the non-technical half of the picture: industry on 10,138 of them, employee counts on 8,545.
Counts are verified DNS signals on the primary domain. A record proves a relationship, not seat count or spend.
How the intelligence is built
DNSai reads DNS records the way a person would. The raw output of A, MX, TXT, SPF, DKIM, and DMARC lookups gets labeled in plain English: who hosts the mail, which security vendor sits in front of it, who signs the DKIM, and what the DMARC policy actually does when a message fails authentication. The website gets fetched too, so the platform behind the page is named alongside the records: WordPress, Shopify, Adobe Experience Manager, Next.js and 128 other signatures. Every check on this page, and a dozen more, is part of our collection of free DNS tools.
Curious about the AI industry's infrastructure? The AI domain search
shows the DNS behind any .ai name and how the big AI companies run theirs.
SPF, DKIM, and DMARC are the three records that decide whether your email gets delivered or treated as fraud. SPF lists the servers allowed to send for your domain. DKIM cryptographically signs each message. DMARC tells the receiver what to do when one of those fails. Get them right and real mail lands in the inbox; get them wrong and impersonating your brand to your customers gets easier. Those same three records are also the clearest public statement a company makes about the vendors it sends mail through.
Whether you are checking one domain before a launch, onboarding a customer, or sitting on a portfolio of thousands across acquired brands, DNSai gives you one place to look. Revenue teams use the same records to find which companies run Claude, ChatGPT, Salesforce, Cloudflare or any of the 1,131 vendors DNSai matches from 1,563 published DNS patterns, then export the result or pull it through the API to join against the account list they already keep.
