Dig: Online DNS Lookup
Query any DNS record type the way the dig command does, from Google Public DNS or Cloudflare, with TTLs, the response status and DNSSEC validation.
Free, no account needed.
What you get
- Every record type: A, AAAA, ANY, CAA, CNAME, DNSKEY, DS, HTTPS, MX, NAPTR, NS, PTR, SOA, SRV, SVCB, TLSA and TXT.
- Output in the familiar dig format, with question, answer and authority sections, TTLs and flags.
- The response status (NOERROR, NXDOMAIN, SERVFAIL) and whether the answer was DNSSEC-validated.
- A choice of resolver, so you can compare what Google and Cloudflare currently see during a DNS change.
- Enter an IP address to get its reverse DNS (PTR) automatically.
Command shortcuts
In the tool, type a name followed by a record type and an optional resolver, just like the command line: example.com MX, example.com TXT @cloudflare, or an IP address such as 8.8.8.8.
Why answers can differ between resolvers
Resolvers cache records for their TTL. Right after a change, one resolver may still hold the old value while another has the new one. Seeing the new value on both is a good sign the change has spread. SERVFAIL from one resolver but not the other often points to a DNSSEC problem.
Frequently asked questions
Is this the same as Google Admin Toolbox Dig?
It works the same way: it queries public resolvers over DNS-over-HTTPS and shows the answers. You can also choose Cloudflare, and the results sit alongside dmarcful's email checks.
Can I query a specific nameserver?
This tool queries Google or Cloudflare. To compare a domain's records against a specific nameserver, Enterprise accounts have DNS Records & Compare.
Related tools
- TXT Record LookupLook up the text records published for a name.
- NS Record LookupLook up the nameservers responsible for a domain.
- Reverse DNS (PTR) LookupFind the hostname an IP address points back to. Mail servers check this before accepting email.
- DNS Health CheckCheck that a domain's nameservers all answer, agree with each other and follow best practices.