How to Look Up DNS Records for a Domain
https://vulnify.app/blog/how-to-look-up-dns-records

Look up A, AAAA, MX, NS, TXT, SOA, and CAA records with Vulnify, including nameserver redundancy. Then open the mail or CAA tool if you need a verdict.

Before you argue about SPF or CAA, you need to see what the domain actually publishes. The DNS Record Lookup asks for A, AAAA, MX, NS, TXT, SOA, and CAA, then lists findings. It is not a spreadsheet, and it does not grade whether your mail policy is strict. That verdict belongs to other tools, after you know the records exist. Enter a domain Use the domain, such as example.com , not a full page URL. Quick runs without an account. Both modes look up the same seven types. You get a letter grade, counts for Critical, High, Medium, and Low, and a findings list. There is no column layout to export from this page. How the findings are titled Address records are “No A or AAAA address records found” or “A records found,” with the count. IPv6 is separate: “AAAA records found” or “No IPv6 (AAAA) records.” Nameservers are “No NS records at this hostname,” “No NS records resolvable,” “Only one name server configured,” or “Name servers found.” SOA is “SOA record present” or “SOA record not resolvable.” Mail exchange is “MX records found” or “No MX records.” SPF is read from TXT at the apex: “SPF record present,” “Multiple SPF records found,” or “No SPF record detected.” CAA is “CAA records found” or “No CAA records.” Multiple SPF records are a real problem. Receivers are not required to pick one. “Only one name server configured” is the redundancy finding. Two or more is what you want before you call the delegation healthy. What Comprehensive adds Comprehensive is sign-in required. It also looks up www and _dmarc . The titles are “www host resolves” or “www host does not resolve,” and “DMARC record present” or “No DMARC record detected.” Quick does not report DMARC or www. A CNAME, when one appears, is only for www in Comprehensive. DKIM is not part of this lookup. WHOIS and DNSSEC belong to the WHOIS tool and to domain hijacking protection , not to this page. The API can carry a record inventory inside the payload. This tool’s page does not render that inventory as a table. Read the findings. Do not look for a grid that is not on the screen. One nameserver, two SPF records, no mail host “Only one name server configured” is the finding to take to the registrar. A single NS is a single point of failure. Add a second nameserver at a different provider if you can, wait for delegation, and run the lookup again until the title is “Name servers found” with a count of at least two. “No NS records resolvable” is worse: the names are missing or do not answer. Do not debug MX until NS answers. “Multiple SPF records found” means two or more TXT records at the apex start with the SPF version tag. Merge them into one TXT record, then look up again. “No SPF record detected” on a domain that sends mail is the cue for the Email Security Checker, not a cue to invent a record in this tool. This page does not draft SPF. “No MX records” on a domain that is not supposed to receive mail can be fine. On a domain that is supposed to receive mail, it is the outage. “No A or AAAA address records found” means the hostname you typed does not point at an address. Check for a typo before you change the zone. “No IPv6 (AAAA) records” is information. Many sites are IPv4 only. It is not, by itself, a mail failure. CAA works the same way. “No CAA records” means any certificate authority may issue. “CAA records found” means some policy exists. Neither sentence tells you whether the policy names the authority you use. That is the CAA checker. Sign in for Comprehensive when you care about www or DMARC. A marketing site whose apex resolves and whose www does not is a broken bookmark, and Quick will not say so. A mail domain with SPF and no DMARC looks partly done on Quick and unfinished on Comprehensive, which is the accurate picture. When you need a verdict, open the next tool A present SPF record is not a passing mail policy. Multiple records, a missing DMARC record, or a policy you do not understand should go to the Email Security Checker , with the background in SPF, DKIM, and DMARC mistakes . CAA presence is not a CAA policy review. Use the CAA Record Checker and CAA records explained for that. Drafting new SPF or DMARC text, without publishing it, is how to draft SPF and DMARC records . Frequently asked questions Does this grade SPF? It reports whether an SPF record is present, missing, or duplicated. It does not score the policy. Use the Email Security Checker for that. Does this show WHOIS? No. This lookup is A, AAAA, MX, NS, TXT, SOA, and CAA, plus www and DMARC on Comprehensive. WHOIS is a different tool. Do I enter a URL or a domain? Enter the domain. A page path is not a DNS name.