FAQ
DNS Benchmark Pro FAQ: DNS Speed, Safety and Privacy
By Nattapong Sukkasem · Published · Updated .
Using all six DNS and network tools: what to check, how to read results, and where the limits are.
Which tools are available?
DNS Benchmark Pro has six free tools: DNS Benchmark, DNS Lookup & DNSSEC Check, WHOIS Lookup (RDAP), DNS Propagation Checker, Email DNS Checker, and What’s My IP. Choose a tool from the homepage or tools directory.
Do I need to install anything or create an account?
No. All six tools are free to use in your browser, with no account or installation required.
How does the DNS benchmark work?
Click Run the benchmark to send repeated DNS-over-HTTPS queries from your browser to participating public resolvers. Only readable, valid responses matching the test question count. Results are ranked by median latency, with spread, sample counts and verification rates shown. There is no location-detection step or combined score out of 100. See the benchmark methodology.
Does the fastest benchmark result mean faster internet?
The result measures browser-to-DoH response time on your current network. It does not measure download bandwidth or prove that a resolver’s classic DNS service will be faster for your whole device. Network conditions and caching can change the ranking. Treat a result as a candidate to investigate, not a guarantee.
What does DNS Lookup check?
Enter a domain and choose a record type and resolver to inspect DNS records such as A, AAAA, MX, TXT and CNAME. The tool also checks DNSSEC-related information through a validating resolver. Enter an IP address for a reverse DNS lookup. A missing PTR record does not by itself mean the address is broken.
Does a DNSSEC warning mean my website is unsafe?
Not necessarily. An unsigned domain differs from a signed domain whose validation fails. DNSSEC concerns the authenticity of DNS data; it does not certify a website’s content or replace HTTPS. Read the reported status and record details before drawing a conclusion.
Why does WHOIS use RDAP, and why are some details missing?
This tool retrieves structured registration data over HTTPS using RDAP. Enter a domain, IP address or AS number to look up the relevant registry record. Registries may redact contact details, omit fields, limit requests or lack browser-accessible RDAP support. A failed request does not prove a domain is available to register.
Does the propagation checker test every location worldwide?
No. It compares answers from independent public resolvers contacted by your browser. Different answers can reveal cache differences, but agreement among those resolvers does not prove that every cache worldwide has updated. TTL values, record changes and resolver policies can affect the answers.
What does the Email DNS Checker test?
It inspects MX, SPF, DMARC and DKIM records, plus MTA-STS, TLS-RPT and BIMI-related DNS records. It reports configuration findings and SPF lookup counts. It does not send a test email, inspect your inbox or guarantee delivery.
Why can’t the email checker find my DKIM key?
DKIM records use a selector chosen by your email provider. With no selector entered, the checker tries common selectors. A missing result does not prove DKIM is disabled. Find the s= value in a sent message’s DKIM-Signature header and enter that selector to check the matching record.
What does What’s My IP show?
It asks Cloudflare for the public address seen on your connection, attempts IPv4 and IPv6 checks, and looks up reverse DNS. Network ownership is retrieved when you request it. A VPN or proxy can change the public address shown. An unavailable IPv6 result may reflect connectivity or browser restrictions; the tool does not report your precise location.
Who receives the information I enter?
Your browser contacts third-party services directly. DNS tools send queried names to public resolvers; WHOIS uses IANA bootstrap data and registry RDAP services, with an rdap.org fallback; the IP tool contacts Cloudflare. Those services can see your connecting IP address and requests and may log them under their own policies. Tool pages describe their data flows. See our privacy policy.
Why might a tool time out or show a browser error?
The destination may be unavailable, rate-limiting requests, or not allowing cross-origin access (CORS). Your network or browser may also block the request. A request failure is not automatically evidence of a DNS or domain configuration problem. Review the error and try again later or use another supported resolver where available.
Do these tools change my DNS settings?
No. These tools inspect public data and measure responses; they do not change your device, domain, email or router settings. If you choose to change DNS manually, record your original settings first. Corporate networks, VPNs and captive portals can depend on the existing resolver. See the Windows, macOS, Android, iPhone and iPad, and router guides for setup and rollback instructions.