AcuityScan

DNS Lookup

Look up any DNS record for any domain — A, AAAA, MX, TXT, NS, CNAME, SOA, CAA, and more. See all records at once, check propagation across 20+ global resolvers, and detect your email provider automatically.

12 record types20+ global resolversEmail provider detectionDNSSEC validation

DNS Propagation Checker

Check if a DNS record has propagated across 20+ global resolvers. Enter an expected value to verify a specific change.

What you get

Example

Here's a sample of what a DNS lookup returns for a typical domain.

AIPv4 addresses — where the domain points
172.67.182.31
104.21.56.78
MXMail servers — where email gets delivered
10 mail.example.com
20 mail2.example.com
TXTText records — SPF, DKIM, verification
v=spf1 include:_spf.google.com ~all
NSNameservers — who controls DNS
ns1.cloudflare.com
ns2.cloudflare.com
SOAStart of Authority — zone metadata
ns1.cloudflare.com admin.example.com 2024010101
CAACertificate Authority Authorization — who can issue SSL
0 issue "letsencrypt.org"

What this tool checks

12 Record Types

A, AAAA, MX, TXT, NS, CNAME, SOA, CAA, DS, PTR, SRV, and DNSKEY. Look up any single type or fetch all at once.

Global Propagation

Check if your DNS changes have reached 20+ resolvers worldwide — Google, Cloudflare, Quad9, OpenDNS, AdGuard, and regional resolvers across US, Europe, Asia, and more.

Email Provider Detection

Automatically identifies your email provider (Google Workspace, Microsoft 365, Zoho, ProtonMail) from your MX records.

DNSSEC Validation

Checks whether your domain uses DNSSEC to cryptographically sign DNS records, protecting against cache poisoning attacks.

TTL Analysis

Shows Time To Live values for every record in human-readable format — flags unusually high TTLs that slow down DNS changes.

Record Change Verification

Enter an expected value and verify it's propagated globally. Perfect for confirming DNS migrations and record updates.

Better than the alternatives

FeatureAcuityScanWhatsMyDNSMXToolbox
Record types12 types + ALL at once11 types (one at a time)Individual lookups only
Global resolvers20+ DoH resolvers21 serversSingle lookup
Propagation check✓ Built in✓ Core feature✗ Separate tool
Change verification✓ Expected value matching✗✗
Email detection✓ Auto-detected from MX✗✓
DNSSEC check✓✗✗
DMARC included✓ Auto-fetched with ALL✗Separate tool
Full site audit✓ Part of 350+ check ✗ DNS onlyEmail/DNS only
All lookupsFree, unlimitedFreeFree
Site monitoring (full scan)From $29/moN/AFrom $129/mo

Common questions

What DNS record types can I look up?
A (IPv4), AAAA (IPv6), MX (mail), TXT (text/SPF/DKIM), NS (nameservers), CNAME (aliases), SOA (zone authority), CAA (certificate authority), DS (DNSSEC), PTR (reverse DNS), and SRV (service records). Use 'All Records' to fetch everything at once.
How does propagation checking work?
We query your domain from 20+ DNS-over-HTTPS resolvers around the world — including Google, Cloudflare, Quad9, OpenDNS, and regional resolvers in the US, Europe, and Asia. Each resolver checks independently, so you can see exactly where your DNS has and hasn't updated.
I just changed a DNS record — how long until it propagates?
It depends on the TTL (Time To Live) of your previous record. Most records propagate within 1-4 hours. If your old TTL was 86400 (24 hours), it could take a full day. Use the propagation checker with an 'expected value' to track progress.
Do I need an account?
No account required. For unlimited scans, monitoring, white-label reports, and the full Site+ Scan, see our Pro and Agency plans starting at $29/month.

Related tools

WHOIS LookupEmail Health CheckThreat CheckSubdomain Finder

Want the full picture?

The checks DNS plus 7 other categories — email, SSL, performance, SEO, accessibility, privacy, and mobile.

Run