Home › Tools › DNS Lookup

DNS Lookup Tool

Query A, AAAA, MX, NS, TXT, and CNAME records for any domain. Check DNSSEC status and detect misconfigurations.

--

DNS Score

Frequently Asked Questions

What is a DNS lookup? ▼
A DNS lookup queries the Domain Name System to find the records associated with a domain name. These records map domain names to IP addresses (A/AAAA records), mail servers (MX records), text data like SPF policies (TXT records), nameservers (NS records), and aliases (CNAME records).
What is DNSSEC and why does it matter? ▼
DNSSEC (DNS Security Extensions) adds cryptographic signatures to DNS records, allowing resolvers to verify that responses haven't been tampered with. Without DNSSEC, attackers can spoof DNS responses to redirect users to malicious sites — a technique known as DNS cache poisoning. Learn more in our DNSSEC guide.
What is a dangling CNAME? ▼
A dangling CNAME occurs when a CNAME record points to a hostname that no longer exists (e.g., a deleted cloud service). Attackers can register the expired target and serve malicious content on your subdomain — known as subdomain takeover. This tool detects dangling CNAMEs automatically.
What DNS records should every domain have? ▼
At minimum, every domain should have A records (pointing to your server's IP), NS records (nameservers), and MX records (if you send or receive email). TXT records for SPF and DMARC are strongly recommended for email security.

Monitor your DNS continuously

This tool gives you a snapshot. Scanward monitors your DNS records 24/7 and alerts you when something changes — dangling CNAMEs, missing DNSSEC, unauthorized record changes, and more.

Monitor Your DNS Free →