DNS Lookup — All Record Types
The dnsverifier.com DNS Lookup tool is a free online
dig / nslookup replacement that queries every standard DNS record type — A, AAAA, CNAME, MX, NS, SRV, SOA, TXT, CAA, DS, and DNSKEY — across multiple public resolvers in parallel. Results stream live with TTL countdowns, authoritative-vs-recursive comparison, DNSSEC trust-chain validation, glue audit, subdomain enumeration, and wildcard detection.Frequently asked questions
- What DNS record types can I query?
- Eleven record types: A (IPv4 address), AAAA (IPv6 address), CNAME (canonical name), MX (mail exchanger), NS (name server), SRV (service locator), SOA (start of authority), TXT (text record), CAA (CA authorization), DS (delegation signer for DNSSEC), and DNSKEY (DNSSEC public key).
- Why do different resolvers return different answers?
- Recursive resolvers cache records based on their TTL. When you update a record, resolvers that already cached the old value continue to serve it until the cache expires. The mismatch matrix highlights which resolvers are stale; the authoritative comparison shows the canonical value direct from your nameservers.
- What is DNSSEC and how do I check it?
- DNSSEC is a cryptographic signature chain that lets resolvers verify a DNS answer was not tampered with in transit. Run a lookup with DNSSEC enabled and the tool will fetch DS records from the parent zone, the DNSKEY set from the child, and verify the signature chain — surfacing any broken-link errors.
- How is this different from dig or nslookup?
- It runs in your browser without a terminal, queries multiple resolvers at once instead of one at a time, compares answers automatically, validates DNSSEC for you, expands SPF include trees, and exports to zone-file / CSV / JSON. dig and nslookup remain better for scripting and edge cases.
- Can I look up multiple domains at once?
- Yes. Use bulk mode (toggle in the UI) to paste up to 50 domains; results stream as each domain completes. Export the combined report as CSV or JSON when finished.