DNS Records and DNSSEC Lookup

Enter a domain or website URL to analyse.

Every domain rests on a handful of DNS records: they point the name at a server, route incoming mail, and hold the text strings that verification and anti-spoofing systems depend on. This lookup queries the public DNS for a single domain and returns all the common record types in one table, together with the DNSSEC status of the zone.

What the lookup returns

A and AAAA records: the IPv4 and IPv6 addresses the domain resolves to
MX records with their priorities, showing which servers accept mail
NS records for the authoritative name servers, plus any CNAME aliases
TXT records, including SPF, DMARC and service ownership strings
SOA data and a DNSSEC check resolved over DNS-over-HTTPS via the DNSKEY record and the AD flag

How to use it

Enter a domain or any URL: the host name is extracted automatically. Record types that do not exist are simply left out of the table, and that absence is informative too. No MX means the domain cannot receive mail; no SPF string in TXT means senders can be spoofed. DNSSEC shown as not detected is not an error, only an unsigned zone. Because resolvers cache answers, a record you changed minutes ago may still return its previous value.

Frequently asked questions

What does the DNS Records Checker show?

It queries the public DNS for a domain and returns all common record types in one table: A, AAAA, MX, NS, TXT, SOA and CNAME. Alongside the records it reports whether the zone is signed with DNSSEC.

What is the DNSSEC check for?

DNSSEC cryptographically signs a DNS zone so resolvers can verify that answers were not tampered with. The checker tells you whether your zone is signed, which protects visitors against DNS spoofing and cache-poisoning attacks.

Is the DNS lookup free and do I need to register?

Yes, the lookup is completely free and requires no account. Enter any domain and repeat the query as often as you like, for example while migrating hosting or troubleshooting mail delivery.

How up to date are the results?

The tool queries the public DNS live at the moment you run it. Keep in mind that recent changes can still be propagating: caching resolvers hold old values until the record's TTL expires, so a fresh edit may take time to appear everywhere.

What the lookup returns

A and AAAA records: the IPv4 and IPv6 addresses the domain resolves to
MX records with their priorities, showing which servers accept mail
NS records for the authoritative name servers, plus any CNAME aliases
TXT records, including SPF, DMARC and service ownership strings
SOA data and a DNSSEC check resolved over DNS-over-HTTPS via the DNSKEY record and the AD flag