What is DNS?
DNS (Domain Name System) translates human-readable domain names into the machine data browsers and mail servers actually need — most commonly an IP address, but also mail routing, ownership proofs, and security policies. A domain publishes many separate record types, each answering a different question; this tool lets you query any one of them directly.
What can you query here?
This tool queries a single DNS record type directly, the way dig would — useful when
the full site health check is more than you need. Beyond the basics (A, MX, TXT, NS), it also
covers DNSSEC records (DS, DNSKEY), CAA (which certificate authorities may issue for the domain),
and the three record types email security depends on:
- SPF — which mail servers are authorized to send for the domain.
- DKIM — a cryptographic signature record, published under a selector you specify.
- DMARC — the policy telling receiving mail servers what to do when SPF/DKIM fail.
Queries happen live against a public resolver and aren't stored. See our privacy page for details.