DNS Lookup - Query Any DNS Record Type

A DNS lookup resolves a domain's DNS records — A, AAAA, CNAME, MX, NS, HTTPS/SVCB, and more — showing TTLs, DNSSEC status, and the full delegation chain. Use robtex.com to query any domain with recursive resolution from root servers.

Fully Recursive DNS Resolution

DNS Ninja performs real recursive resolution from root servers - not cached lookups from public resolvers. Every query walks the full delegation chain: root servers → TLD nameservers → authoritative nameservers. You see exactly what's configured, with no caching artifacts or resolver interference.

Every query returns:

  • Record values - IP addresses, hostnames, or text content
  • TTL (Time to Live) - How long resolvers should cache the record
  • DNSSEC status - Whether the domain has verified chain-of-trust from root
  • Delegation trace - The complete path from root to authoritative response
  • Observation history - Timeline showing when each record was first and last seen, with observation counts going back to 2009 (coverage varies by domain)
  • Historic reverse lookups - "Previously NS for", "Previously MX for", and "Previously A record for" sections show past infrastructure relationships

Query Any Record Type

A records - IPv4 addresses where the domain resolves

AAAA records - IPv6 addresses for the domain

CNAME records - Canonical name aliases pointing to other hostnames

MX records - Mail servers with priority values

NS records - Authoritative nameservers with flags showing zone vs delegated NS

SOA records - Zone authority and serial number information

HTTPS/SVCB records - Modern TLS service binding configuration (ECH, ALPN, port hints)

CAA records - Certificate Authority Authorization policies

DNSSEC Validation

DNS Ninja validates DNSSEC signatures from the root zone down. Results show:

  • Secure - Domain has valid DNSSEC with verified chain of trust
  • Insecure - Domain has no DNSSEC (unsigned parent delegation)
  • Bogus - DNSSEC signatures exist but fail validation

This reveals whether a domain's DNS responses can be cryptographically verified or are vulnerable to spoofing.

Practical DNS Debugging

DNS problems cause mysterious failures. Sites become unreachable, email bounces, SSL certificates fail validation. DNS lookup reveals the actual records resolvers see.

Propagation checking - Since we query from root, you see authoritative data immediately. Compare against cached resolvers to verify propagation status.

Record verification - Confirm MX records point to correct mail servers and A records match your hosting.

CNAME chain tracing - Follow CNAME aliases to their final destination. Deep chains add latency and create failure points.

HTTPS record inspection - Modern browsers use HTTPS/SVCB records for connection optimization. Verify ECH keys, ALPN protocols, and port hints are correctly configured.

→ Look up DNS records on robtex.com

FAQ

How is this different from nslookup or dig?
DNS Ninja performs full recursive resolution from root servers and validates DNSSEC. You see the actual delegation chain, not just cached resolver data.
Why do I get different results from different resolvers?
Caching. Resolvers cache records according to TTL. DNS Ninja queries authoritatively, so you always see current data.
What's an authoritative vs recursive response?
Authoritative responses come from the nameserver responsible for the zone. We query authoritatively by walking the delegation chain from root.
What are HTTPS/SVCB records?
Modern DNS record types (Type 65) that tell browsers about TLS configuration, supported protocols, and encrypted client hello (ECH) keys before connecting.
Can I query internal/private DNS?
No. DNS lookup queries public DNS infrastructure only. Internal zones require access to your private resolvers. --- Last modified: 2026-02-14