PulseTrace
Start free
All free tools
Free tool

DNS lookup — A, AAAA, CNAME, MX, NS, TXT, SOA, CAA plus SPF and DMARC

Enter a name and pick a resolver. PulseTrace queries A, AAAA, CNAME, MX, NS, TXT, SOA and CAA, shows the answer time, and parses the SPF and DMARC records so you can see whether mail from the domain is protected against spoofing.

Monitor this continuously

Assert the values you expect and get a change event — with before and after, from every region — when any record changes.

Start free DNS monitor

How to read the result

  1. 1Querying the authoritative nameservers shows what the zone says right now; a public resolver shows what most of the internet still has cached. When they differ, propagation is in progress.
  2. 2MX records are listed by priority; the lowest number is tried first. A domain with mail but no MX falls back to its A record, which is rarely intended.
  3. 3CAA records restrict which certificate authorities may issue for the domain. None is allowed but means any CA can issue.
  4. 4SPF should end in ~all or -all and stay under 10 DNS-lookup terms; DMARC should have p=quarantine or p=reject and an rua= address to receive reports.

Questions

What does 'no data' mean?
The name exists but has no record of that type — normal for most types. 'Not found' (NXDOMAIN) means the name itself does not exist at that resolver.
Why does the authoritative answer differ from Cloudflare's?
Caching. Recursive resolvers keep an answer for its TTL. After a change, the authoritative servers answer immediately while resolvers serve the old value until it expires.
Does it check DNSSEC?
Not here. The Domain Security monitor validates DNSSEC, watches the registry record via RDAP and grades SPF/DKIM/DMARC continuously.

Other free tools

SSL certificate checkerSecurity headers graderIs it down?SLA & uptime calculatorCron expression builderDNS monitoring →