DNS Lookup

Enter any domain to check all its DNS records at once — A, AAAA, MX, TXT, NS, SOA, and CNAME — plus SPF detection. Free, instant, no registration.

Related Security Tools

Web Scanner

Check websites for vulnerabilities and other security issues, providing real-time results and detailed analysis.

Virus Scanner

Scan files for malware, viruses, trojans, and other threats using multi-engine technology.

Link Checker

Verify URLs for safety, detect phishing attempts, and check if links lead to malicious websites.

SSL Checker

Analyze SSL certificates, check expiration dates, and verify proper encryption implementation.

Hash Checker

Free online file hash checker supporting 13 algorithms including MD5, SHA-256, and BLAKE3. All client-side, no upload required.

Whois

Get detailed domain registration information including owner details, registration dates, and expiration.

IP Lookup

Identify geographic location, ISP information, and other details about any IP address.

One Time Secret

Send a one-time secret message...it will be burned to digital ash once read. Can be used for private information, shared passwords, credentials, configurations, pre-shared keys, certificates, and any other secrets.

How to Check DNS Records

Enter the domain

Type any domain name such as example.com into the input box above. Do not include http:// or a path — the tool queries the domain's DNS directly.

Review the records

The tool resolves all seven record types in parallel and displays each one in its own section. MX records show mail server priority, SOA shows zone parameters, and TXT shows text values including SPF.

Diagnose or verify

Compare the results against your expected configuration: verify mail routing (MX), domain ownership tokens (TXT), nameserver delegation (NS), or SPF policy for email authentication.

DNS Record Types Explained

A Record

The A record maps a domain to an IPv4 address. It is the most fundamental DNS record — this is what makes example.com resolve to a server your browser can reach.

AAAA Record

The AAAA record maps a domain to an IPv6 address. As IPv6 adoption grows, more domains maintain both A and AAAA records for dual-stack reachability.

MX Record

MX records specify which mail servers accept email for the domain, with a priority value (lower = preferred). Email deliverability depends on correct MX configuration.

TXT Record

TXT records hold arbitrary text data, most commonly used for SPF policies, domain verification tokens (Google Workspace, Microsoft 365), and DKIM public keys.

NS Record

NS records list the authoritative nameservers for the domain. Changing hosting or DNS providers means updating NS records at your registrar.

SOA Record

The SOA (Start of Authority) record holds zone administration parameters: primary nameserver, serial number for zone changes, and refresh/retry/expire timers.

CNAME Record

CNAME records alias one domain to another (e.g. www.example.com → example.com). Apex domains cannot carry CNAME records — that is why this section is often empty.

Frequently Asked Questions

What is a DNS lookup?

A: A DNS lookup queries a domain's DNS records to retrieve its configuration — where it points (A/AAAA), where its email goes (MX), and what text values it publishes (TXT). ScyScan's DNS lookup resolves all major record types in a single query.

How do I check MX records for a domain?

A: Enter the domain above and look at the MX Records section. Each entry shows the mail server hostname and its priority — lower numbers are preferred. If the section is empty, the domain cannot receive email.

How do I list all DNS records of a domain?

A: This tool resolves A, AAAA, MX, TXT, NS, SOA, and CNAME records in parallel — equivalent to running dig commands for each type separately. The results appear grouped by record type.

What is an SPF record and how do I check it?

A: SPF (Sender Policy Framework) is a TXT record starting with v=spf1 that lists which servers may send email for your domain. If we detect one in your TXT records, it appears in a dedicated SPF section above.

SPF vs DKIM vs DMARC — what is the difference?

A: SPF lists authorized sending servers, DKIM adds a cryptographic signature to each message, and DMARC tells receivers what to do when SPF or DKIM fail. All three work together for email authentication; SPF lives in your TXT records.

Why are no CNAME records shown for my domain?

A: Apex domains (example.com itself) cannot have CNAME records per DNS standards — CNAME only exists on subdomains like www. An empty CNAME section on an apex domain is normal.

What does the SOA serial number mean?

A: The SOA serial number identifies the zone file version. DNS administrators increment it on every change; many use the format YYYYMMDDnn (date + change counter) so you can tell when the zone was last modified.

Is this DNS lookup tool free and private?

A: Yes — completely free, no registration, no query limits beyond basic rate limiting. Queries are cached briefly to keep the tool fast; we never store your lookups long-term or share them.