Free DNS Records Lookup
Look up the DNS footprint of any domain — A, AAAA, MX, NS, TXT, CAA and SOA records — and surface misconfigurations such as a missing CAA policy or absent nameservers.
By scanning, you confirm you own or have permission to test this domain. Not a substitute for manual penetration testing.
What this dns lookup checks
How it works
Read-only· DNS only — no traffic to your servers- 1We query public DNS for your domain: A, AAAA, MX, NS, TXT, CAA and SOA records.
- 2We check DNSSEC signing (via DNS-over-HTTPS) and look for missing CAA, single-nameserver setups and dangling-CNAME / takeover hints.
- 3Everything is resolved through DNS — we never connect to your web server, so this is completely passive.
Why it matters
DNS is the foundation of your domain's identity, email and certificate issuance. Missing or misconfigured records cause mail-delivery failures and certificate gaps, and can open the door to subdomain- and domain-takeover attacks.
Frequently asked questions
Is the DNS lookup free?
Yes — DNS records are checked as part of the free ONEROXE recon scan. No sign-up needed.
What is a CAA record and do I need one?
A CAA record specifies which certificate authorities may issue certificates for your domain. It is a low-effort control that limits mis-issuance, and we flag when it is missing.
Do you check DNSSEC?
This quick lookup focuses on A/AAAA/MX/NS/TXT/CAA/SOA records. For DNSSEC signing, AXFR zone-transfer exposure and deeper DNS checks, run the full recon scan at /scanner.