Complete DNS record lookup. SPF, DKIM, and DMARC in TXT records are auto-labeled.
Queries A, AAAA, MX, TXT, NS, CAA, SOA, and CNAME via Google Public DNS over HTTPS.
Performs live DNS lookups for A, AAAA, MX, NS, TXT, CNAME, SOA, and CAA record types against any domain using Google Public DNS. Returns the actual records your domain is serving right now, not cached or registry data.
TXT records often contain SPF policies, DMARC policies, domain verification tokens for third-party services, and DKIM public keys. MX records reveal your email provider. NS records identify your DNS host. CAA records restrict certificate issuance.
DNS records are a map of your infrastructure. Exposed MX records identify your email provider for targeted phishing. Unexpected CNAME entries can indicate subdomain takeover risk. TXT records sometimes leak service configurations or forgotten verification tokens.
Checking DNS records is one of the first steps in any external reconnaissance. Understanding what your domain is advertising gives you the same view an attacker gets before they start probing your environment.