v2digga

DNS records

Free DNS Lookup

Run a DNS lookup for any domain. See A, AAAA, MX, NS, TXT, CAA, SOA, SRV, and DNSSEC records resolved live through Cloudflare, Google, or Alibaba DNS over HTTPS.

Apex, subdomain, or URL. We figure it out.

Trygoogle.comwikipedia.orggithub.comvercel.comcloudflare.comopenai.com

What you get

Everything in one report.

  • 01

    Every record type

    A, AAAA, CNAME, MX, NS, TXT, SOA, SRV, PTR, NAPTR, CAA, DNSKEY, and DS. The full set, grouped by type so you can scan it fast.

  • 02

    Live resolver switch

    Query Cloudflare 1.1.1.1, Google 8.8.8.8, or Alibaba DNS and compare answers without reloading. Responses go straight from the resolver to your browser.

  • 03

    Exact TTL values

    Hover any record to read its time to live in seconds, so you know how long a change takes before resolvers refresh it.

  • 04

    DNSSEC signals

    DNSKEY and DS records surface automatically when the zone is signed, so you can confirm the chain of trust at a glance.

What is a DNS lookup?

A DNS lookup asks the Domain Name System which servers and addresses a domain points to. Every time you open a website, send an email, or connect an app, a resolver walks the DNS hierarchy and translates the human readable name into the records that route the traffic. digga runs that query on demand and shows you the raw answer for every record type, so you can debug a deploy, verify a migration, or simply understand how a domain is wired.

Which DNS records can I check?

A and AAAA records map the domain to IPv4 and IPv6 addresses. CNAME points one name at another. MX lists the mail servers. NS names the authoritative nameservers. TXT carries verification strings and policies like SPF and DMARC. SOA holds the zone metadata, SRV advertises services, and CAA controls which certificate authorities may issue a certificate. DNSKEY and DS expose the DNSSEC chain. digga returns all of them in one pass.

Choosing a resolver

digga ships three public DNS over HTTPS resolvers: Cloudflare, Google, and Alibaba. Switching between them live is the quickest way to spot a stale cache, a split horizon answer, or a record that has not finished propagating. Because the lookup runs over DoH from your browser, the answer you see is the answer that resolver is actually serving right now.

DNS and DNSSEC

DNSSEC signs DNS answers so a resolver can prove they were not tampered with on the way. When a zone is signed, the parent publishes a DS record and the zone publishes DNSKEY records. digga surfaces both when the resolver returns them, and the overview page reports whether the parent delegation is signed, so you can confirm a domain is protected against spoofed responses.

Keep digging

Related tools.

WHOIS LookupEmail Security CheckSSL and TLS Certificate Checker

FAQ

Questions, answered.

Is this DNS lookup free?
Yes, completely free with no signup. digga is open source under AGPL 3.0.
Which DNS record types are supported?
A, AAAA, CNAME, MX, NS, TXT, SOA, SRV, PTR, NAPTR, CAA, DNSKEY, and DS. Records are grouped by type so the report is easy to read.
Can I choose which DNS resolver answers?
Yes. You can switch live between Cloudflare 1.1.1.1, Google 8.8.8.8, and Alibaba DNS over HTTPS, which makes it easy to compare answers and catch propagation gaps.
How do I check whether a domain uses DNSSEC?
Look for DNSKEY and DS records in the report. When the zone is signed they appear automatically, and the overview confirms whether the parent delegation is signed.
Why are my DNS changes not showing up yet?
Resolvers cache records for the length of their TTL. Hover a record to see its TTL in seconds, then switch resolvers to see which ones have already refreshed.
Can I look up DNS records for a subdomain?
Yes. Enter any subdomain such as mail.example.com directly and digga resolves its records the same way it does for an apex domain.

Ready to dig?

Enter a domain to run the dns lookup now.

Apex, subdomain, or URL. We figure it out.