This free online DNS lookup tool performs recursive DNS resolution directly from the root nameservers,
giving you an accurate view of how DNS queries are resolved across the internet. Unlike traditional DNS
lookup tools that rely on cached results from public resolvers like Google DNS or Cloudflare, this tool
traverses the entire DNS delegation chain from the root servers down to the authoritative nameservers —
exactly how a recursive resolver would query your domain.
How It Works
When you enter a domain name, the tool starts at one of the 13 root nameservers and follows the delegation
chain through the TLD nameservers (like .com, .org, or .net) down to your domain's authoritative nameservers.
Each step is logged in real-time, showing you the complete resolution path. This approach ensures you always
see the actual DNS records as they exist on the authoritative servers, without any caching or intermediate
resolver interference.
DNSSEC Validation
The tool automatically validates DNSSEC (DNS Security Extensions) signatures when available.
DNSSEC protects against DNS spoofing and cache poisoning attacks by cryptographically signing DNS records.
For each record returned, you'll see whether it was successfully validated against the chain of trust from
the root zone. This helps you verify that your domain's DNSSEC configuration is working correctly.
Features
- Multi-type queries – Lookup multiple DNS record types (A, AAAA, MX, TXT, etc.) in a single request
- Real-time streaming – Watch the resolution process as it happens, seeing each nameserver query
- DNSSEC validation – Automatic cryptographic verification of DNSSEC signatures and chain of trust
- No caching – Fresh results directly from authoritative nameservers, bypassing resolver caches
- Detailed logging – See the complete delegation path from root servers to authoritative nameservers
- ASN information – View the network and organization hosting each IP address
Supported Record Types
This tool supports querying 27 different DNS record types, organized into the following categories:
Common
- A – IPv4 address
- AAAA – IPv6 address
- CNAME – Canonical name alias
- MX – Mail exchange server
- TXT – Text data
- NS – Nameserver
Infrastructure
- SOA – Start of authority
- PTR – Pointer for reverse DNS
- SRV – Service locator
- CAA – Certificate authority authorization
DNSSEC
- DS – Delegation signer
- DNSKEY – DNS public key
- CDS – Child delegation signer
- CDNSKEY – Child DNS public key
- CSYNC – Child-to-parent sync
Service Binding
- HTTPS – HTTPS service binding
- SVCB – Service binding
- DNAME – Delegation name alias
Security
- TLSA – TLS certificate association
- SSHFP – SSH key fingerprint
- SMIMEA – S/MIME certificate association
- OPENPGPKEY – OpenPGP public key
- CERT – Certificate record
Other
- NAPTR – Naming authority pointer
- URI – Uniform resource identifier
- LOC – Geographic location
- SPF – Sender policy framework (legacy)
Learn more about DNS record types on Wikipedia →