DNS lookup.
Query A, AAAA, CNAME, MX, NS, SOA, TXT, and CAA in one shot. Use the shareable result to verify a client migration or hand the published records to whoever owns the fix.
Eight record types, one query.
Instead of running eight separate dig commands, the lookup queries every common record type in parallel and lays the answers out side by side.
a records
The IPv4 addresses the domain resolves to — where web traffic actually lands. Multiple A records usually mean load balancing or round-robin DNS.
aaaa records
The IPv6 equivalent of A records. Missing AAAA records means IPv6-only clients reach you through translation layers, or not at all.
cname records
Aliases that point one name at another, common for subdomains hosted by SaaS providers. A CNAME at the zone apex is a frequent misconfiguration.
mx records
The mail servers that accept email for the domain, in priority order. No MX records means most senders can't deliver mail to you.
ns records
The authoritative nameservers for the zone — who actually answers DNS queries for the domain. Stale NS records after a provider move cause hard-to-debug outages.
soa record
The zone's start of authority: primary nameserver, admin contact, serial number, and the timers that control how the zone replicates and caches.
txt records
Free-form text records, home to SPF policies, domain-verification tokens, and DKIM/DMARC-adjacent configuration. Most email deliverability problems start here.
caa records
Which certificate authorities may issue TLS certificates for the domain. No CAA records means any CA can issue — fine for most, a gap for some.
DNS questions, answered.
A DNS lookup asks the domain name system for the records published under a domain name — the IP addresses it resolves to, the mail servers that accept its email, the nameservers that answer for it, and more. This tool runs those queries against live DNS and shows you exactly what resolvers around the world see.
One lookup queries eight common record types in parallel: A (IPv4), AAAA (IPv6), CNAME (aliases), MX (mail servers), NS (nameservers), SOA (zone authority), TXT (text records such as SPF), and CAA (certificate authority authorization).
Most domains only publish a few record types. No AAAA records simply means the domain has no IPv6 addresses; no CAA records means no certificate-issuance restrictions are published. An empty answer is a valid DNS response, not an error.
DNS answers are cached by resolvers for the record's TTL, so a change can take minutes to hours to propagate. If the lookup still shows old values well past the TTL, check that you edited the zone your NS records actually point at — changes made at an old DNS provider go nowhere.
An A record maps a name directly to an IPv4 address, while a CNAME says “this name is an alias for that other name” and delegates all record types to the target. CNAMEs are convenient for provider-hosted subdomains but can't coexist with other records on the same name, which is why they're disallowed at the zone apex.
Yes — enter the full name, like app.example.com, and the lookup queries records for exactly that name. Note that subdomains often have different records than the parent domain: a CNAME to a hosting provider is common, and MX or TXT records may be absent entirely.
Records are the raw material. Posture is the verdict.
This lookup shows what is published. The free scan checks email auth & DMARC, SSL & domain expiry, look-alikes, and blacklists together from public records — no signup.
Keep checking the same failure point.
Use the related tools one at a time, or run all four posture checks together.
SPF record checker →
Follow every include, count the 10-lookup limit, and flag syntax errors or unsafe policies.
DMARC record checker →
Parse every DMARC tag, grade the policy, and flag weak enforcement or missing reporting.
DKIM record checker →
Probe common selectors, validate each public key, and flag weak, revoked, or broken records.