DNS Lookup

Enter any domain to check all its DNS records at once — A, AAAA, MX, TXT, NS, SOA, and CNAME — plus SPF detection. Free, instant, no registration.

Related Security Tools

Web Scanner

Check websites for vulnerabilities and other security issues, providing real-time results and detailed analysis.

Virus Checker

Scan files for malware, viruses, trojans, and other threats using multi-engine technology.

Link Checker

Verify URLs for safety, detect phishing attempts, and check if links lead to malicious websites.

SSL Checker

Analyze SSL certificates, check expiration dates, and verify proper encryption implementation.

Hash Checker

Free online file hash checker supporting 13 algorithms including MD5, SHA-256, and BLAKE3. All client-side, no upload required.

Whois

Get detailed domain registration information including owner details, registration dates, and expiration.

IP Lookup

Identify geographic location, ISP information, and other details about any IP address.

Email Header Analyzer

Free email header analyzer. Paste a raw email header to check SPF, DKIM and DMARC authentication, trace the sender IP, and detect spoofed or phishing emails. 100% private.

One Time Secret

Send a one-time secret message...it will be burned to digital ash once read. Can be used for private information, shared passwords, credentials, configurations, pre-shared keys, certificates, and any other secrets.

How to Check DNS Records

Enter the domain

Type any domain name such as example.com into the input box above. Do not include http:// or a path — the tool queries the domain's DNS directly.

Review the records

The tool resolves all seven record types in parallel and displays each one in its own section. MX records show mail server priority, SOA shows zone parameters, and TXT shows text values including SPF.

Diagnose or verify

Compare the results against your expected configuration: verify mail routing (MX), domain ownership tokens (TXT), nameserver delegation (NS), or SPF policy for email authentication.

DNS Record Types Explained

A Record

The A record maps a domain to an IPv4 address. It is the most fundamental DNS record — this is what makes example.com resolve to a server your browser can reach.

AAAA Record

The AAAA record maps a domain to an IPv6 address. As IPv6 adoption grows, more domains maintain both A and AAAA records for dual-stack reachability.

MX Record

MX records specify which mail servers accept email for the domain, with a priority value (lower = preferred). Email deliverability depends on correct MX configuration.

TXT Record

TXT records hold arbitrary text data, most commonly used for SPF policies, domain verification tokens (Google Workspace, Microsoft 365), and DKIM public keys.

NS Record

NS records list the authoritative nameservers for the domain. Changing hosting or DNS providers means updating NS records at your registrar.

SOA Record

The SOA (Start of Authority) record holds zone administration parameters: primary nameserver, serial number for zone changes, and refresh/retry/expire timers.

CNAME Record

CNAME records alias one domain to another (e.g. www.example.com → example.com). Apex domains cannot carry CNAME records — that is why this section is often empty.

How to Diagnose Common DNS Problems

Website won't load — check A, AAAA and CNAME records

If a domain fails to open in the browser, look at the A record (IPv4) and AAAA record (IPv6) to confirm they point to the correct server IP. If the www subdomain loads but the apex domain does not, check the CNAME record — a misdirected CNAME is a frequent cause of mixed behavior. Compare the values shown here with the IP your hosting provider assigned.

Email bouncing or landing in spam — check MX and TXT (SPF)

Mail deliverability depends on the MX record pointing at your mail provider's server with the right priority. If messages bounce or land in spam, verify the MX hostname matches what your email provider published, then confirm the SPF record in TXT authorizes the servers that actually send your mail. An SPF record ending in ~all or -all is expected — its absence lets anyone send mail from your domain.

Domain moved or nameserver changed — check NS and SOA

After transferring a domain or switching DNS providers, confirm the NS records still point to the new authoritative nameservers. The SOA serial number tells you the zone version: if it matches the new zone file, propagation has started. If you still see stale NS records, update them at your registrar and wait for propagation to complete.

Frequently Asked Questions

What is a DNS lookup?

A: A DNS lookup queries a domain's DNS records to retrieve its configuration — where it points (A/AAAA), where its email goes (MX), and what text values it publishes (TXT). ScyScan's DNS lookup resolves all major record types in a single query.

How do I check MX records for a domain?

A: Enter the domain above and look at the MX Records section. Each entry shows the mail server hostname and its priority — lower numbers are preferred. If the section is empty, the domain cannot receive email.

How do I list all DNS records of a domain?

A: This tool resolves A, AAAA, MX, TXT, NS, SOA, and CNAME records in parallel — equivalent to running dig commands for each type separately. The results appear grouped by record type.

What is an SPF record and how do I check it?

A: SPF (Sender Policy Framework) is a TXT record starting with v=spf1 that lists which servers may send email for your domain. If we detect one in your TXT records, it appears in a dedicated SPF section above.

SPF vs DKIM vs DMARC — what is the difference?

A: SPF lists authorized sending servers, DKIM adds a cryptographic signature to each message, and DMARC tells receivers what to do when SPF or DKIM fail. All three work together for email authentication; SPF lives in your TXT records.

Why are no CNAME records shown for my domain?

A: Apex domains (example.com itself) cannot have CNAME records per DNS standards — CNAME only exists on subdomains like www. An empty CNAME section on an apex domain is normal.

What does the SOA serial number mean?

A: The SOA serial number identifies the zone file version. DNS administrators increment it on every change; many use the format YYYYMMDDnn (date + change counter) so you can tell when the zone was last modified.

Is this DNS lookup tool free and private?

A: Yes — completely free, no registration, no query limits beyond basic rate limiting. Queries are cached briefly to keep the tool fast; we never store your lookups long-term or share them.

How long does DNS propagation take?

A: Most DNS changes propagate within minutes to a few hours because popular recursive resolvers honor the record's TTL. In rare cases, full propagation can take up to 24–48 hours. This tool queries live authoritative data, so it shows the current state — re-run the lookup after a TTL period to confirm a change has taken effect.

How do I check DNS records with nslookup or dig?

A: Open a terminal and run dig for one type at a time, for example dig example.com MX or dig example.com TXT. nslookup works too: nslookup -type=MX example.com. This tool is faster for a full overview because it resolves all seven record types in a single query instead of one command per type.

Why do different DNS lookup tools show different results?

A: DNS answers are cached by each recursive resolver for the record's TTL, so a recently changed record can appear old on one resolver and new on another. Anycast networks and geo-distributed servers can also briefly return different answers. If tools disagree, wait one TTL cycle and re-check.

What DNS records do I need to send and receive email?

A: To receive email you need an MX record pointing to your mail server. To send mail that is not marked as spam you also need an SPF record in TXT — and ideally DKIM plus DMARC, which are also TXT records. You can check all of these at once with this DNS lookup, then use the email header analyzer to verify authentication on messages you send.