DNS lookup
Enter a domain to see its main DNS records, compare answers from 5 public resolvers (spot stale or tampered DNS) and check DNSSEC and CAA.
What the records mean
- A / AAAA: the site's IPv4 / IPv6 address.
- CNAME: alias to another name.
- MX: mail servers.
- NS: the domain's DNS servers.
- TXT: text data, used for SPF, DMARC and verifications.
- SOA: zone admin info.
- PTR: reverse name of the server IP.
Why compare resolvers?
After a DNS change, public resolvers update at different times. Different answers can also come from a CDN (normal) or DNS tampering (worrying). The tool asks Cloudflare, Google, NextDNS, AdGuard and OpenDNS at once.
Check your whole site, not just one thing
The free scan checks SSL, email spoofing, security headers, exposed sensitive files, outdated CMS and signs of hacking in one go, with plain-language fixes.
Free once you verify your domain: weekly re-scans and email alerts for new issues. PRO ($8/month): deep scan with 5,000+ known-vulnerability checks, deep re-scans up to 10 times a day and 5-minute uptime monitoring.
FAQ
How long do DNS changes take?
It depends on the record's TTL: from minutes to 24–48 hours. Comparing resolvers shows how far the change has spread.
Should I enable DNSSEC?
Yes if your DNS provider supports it (one click on Cloudflare); then add the DS record at your registrar.