Online DIG — Query DNS records
Check DNS, SPF, DKIM, DMARC and DNSSEC records for any domain. Free, no signup, queries from the public resolvers of Google and Cloudflare.
Start a DNS lookup
Enter a domain name and select the record types you want to query. The tool performs direct DNS queries via the public resolvers of Google and Cloudflare.
Resolver
Right-click a record type to select only that one.
DNS queries are performed via public DNS-over-HTTPS resolvers (Google, Cloudflare). Results reflect currently propagated public DNS records. For DKIM, the most common selectors are checked.
Guide to DNS record types
Every domain uses different types of DNS records to function correctly. Understanding the meaning of each record is essential for diagnosing issues and verifying your domain's configuration.
A / AAAA
Map a domain to an IP address. A records point to IPv4 addresses, AAAA to IPv6.
MX
Specify the mail servers that receive email for the domain, with a numeric priority.
CNAME
Creates an alias from one domain name to another. Commonly used for subdomains like www.
TXT
Contains free-form text. Used for SPF, DKIM, DMARC, and domain ownership verification.
NS
Specify the authoritative nameservers for the domain — the servers managing the DNS zone.
SOA
Start of Authority: contains DNS zone information including serial number and refresh timings.
CAA
Specifies which Certificate Authorities are authorised to issue SSL certificates for the domain.
SRV
Defines the location of specific services (host, port, priority) such as SIP, XMPP, or LDAP.
PTR
Reverse DNS: maps an IP address back to a domain name. Used by mail servers to verify the sender.
DMARC
Email authentication policy built on SPF/DKIM. Found as a TXT record on _dmarc.yourdomain.com.
For professional DNS management with continuous monitoring, DNSSEC, and email authentication, see our DNS Management and Secure DNS page. Or browse the other free AtWorkStudio tools for IT and cybersecurity.
Frequently asked questions about DNS DIG
Answers to common questions about using the DIG tool and DNS records.
DIG (Domain Information Groper) is a DNS diagnostic tool that queries DNS servers to obtain information about a domain’s records. It is used by system administrators and IT professionals to verify DNS configuration, diagnose resolution issues, and check record propagation.
This tool supports the main DNS record types: A (IPv4 address), AAAA (IPv6 address), CNAME (alias), MX (mail server), NS (nameserver), TXT (text, including SPF and DKIM), SOA (Start of Authority), CAA (Certification Authority Authorization), SRV (services), and PTR (reverse DNS).
Yes, queries are performed via Google’s public resolver (dns.google), one of the most reliable in the world. Results reflect currently propagated public DNS records. Note that DNS changes can take up to 48 hours for full propagation.
Enter your domain and select TXT record type. SPF records start with "v=spf1" and define which servers are authorised to send email for your domain. For DKIM, look for the TXT record on the specific selector (e.g. selector._domainkey.yourdomain.com). AtWorkStudio configures SPF, DKIM, and DMARC for all managed domains.
The most common reasons are: the domain is not registered (NXDOMAIN), nameservers are not configured correctly, the specific records have not been created, or DNS changes are still propagating. If the problem persists, contact us for a DNS configuration analysis of your domain.
Tool provided by AtWorkStudio · ISO/IEC 27001 · 27017 · 27018 · ISO 9001 · ACN-qualified
Professional DNS management for your business
From DNS configuration to DNSSEC, SPF, DKIM, and DMARC protection: we support your team in configuration and monitoring. Contact us for a consultation.