DNS Lookup
Every DNS record for a domain, in one readable report.
Free, no signup — the answer appears right here.Try:
What you get
One lookup pulls the records that matter — A and AAAA (where the domain points), MX (who receives its mail), NS (which servers answer for it), TXT (SPF, verifications, and everything else stuffed in there), CNAME chains, SOA, and CAA (which certificate authorities may issue for it).
Instead of raw dig output, the report explains what each record means and cross-references it: mail records feed the email-authentication analysis, nameservers feed the infrastructure view, and the whole set feeds a security grade.
When to reach for it
Debugging why a site resolves differently for different people, verifying a DNS migration actually propagated, auditing what a vendor asked you to add, or just seeing how a domain you're researching is wired. If you need per-resolver propagation status across the world, the dedicated propagation checker complements this one-shot view.
Methodology & data sources
Queries run live and in parallel for each record type against major public resolvers (Google 8.8.8.8, Cloudflare 1.1.1.1, Quad9 9.9.9.9), so answers reflect what real-world resolution returns right now — subject only to each record's own TTL, exactly as any resolver would see it. When A records exist, we also do the reverse (PTR) lookups on those IPs.
Every result is stamped with when it ran. If you changed a record seconds ago and still see the old value, that's the published TTL doing its job — the propagation checker shows the rollout resolver by resolver.
Frequently asked questions
What's the difference between A, AAAA and CNAME?
A maps a name to an IPv4 address, AAAA to IPv6. CNAME aliases one name to another name — the lookup then continues at the target. A name with a CNAME can't have most other record types, which is why apex domains typically use A/ALIAS instead.
Why do TXT records matter?
TXT is DNS's junk drawer with crown jewels inside: SPF lives there, DKIM keys live under _domainkey, DMARC under _dmarc, plus site-verification tokens for every service you've connected. Auditing TXT records is auditing who you've authorized.
What is a CAA record?
Certification Authority Authorization — it whitelists which certificate authorities may issue TLS certificates for your domain. No CAA record means any CA can issue. Adding one (e.g. letting only Let's Encrypt issue) cheaply narrows your attack surface.
How fresh are these results?
Lookups resolve live, subject to each record's TTL caching. If you just changed a record and still see the old value, the old TTL hasn't expired yet — check the propagation tool to watch it roll out across public resolvers.