NEWLive propagation map & DNSSEC chain visualizer

DNS lookups that actually tell you what's going on.

Query every record type from every major resolver, watch propagation across 16 cities, and trace the DNSSEC chain — in one place, in under a second.

TryKto focus
All systems operational
Queries today14,287,194
Median latency38ms
Probe locations16
Public resolvers9
Built for diagnostics

Six tools. One window. No dark patterns.

Built by SREs who got tired of switching tabs to debug a single misconfigured MX record.

Every record type, all at once

A, AAAA, CNAME, MX, TXT, NS, SOA, CAA, PTR, SRV, DS, DNSKEY — fetched in parallel, displayed by section.

11 RR types · 1 request

Side-by-side resolver compare

See exactly what Cloudflare, Google, Quad9, OpenDNS and your authoritative servers each return — diffs highlighted.

9 public resolvers

Live global propagation

Watch DNS rollout from 16 probe cities on six continents. Tap any node for raw response + RTT.

16 cities · <500ms refresh

DNSSEC chain visualizer

Walks the trust chain from root to leaf. Highlights broken signatures, missing DS records and KSK rollovers.

RFC 4033 / 4034 / 4035

Mail deliverability check

Validates SPF, DKIM, DMARC, BIMI, MTA-STS and reverse DNS in one pass. Plain-English fix instructions.

6 protocols audited

Free public API

JSON, JSONP, and DoH endpoints. No auth, no rate-limit pages, no tracking. Use it in your monitor.

curl /v1/lookup/<domain>
A taste

What you'll see for github.com

Agithub.com
1 record · TTL 60s
140.82.114.4🇺🇸 Ashburn, US · AS36459
MXgithub.com
5 records · Google Workspace
1aspmx.l.google.com.
5alt1.aspmx.l.google.com.
5alt2.aspmx.l.google.com.

Resolver agreement

5/5 match
Cloudflare1.1.1.1
Google8.8.8.8
Quad99.9.9.9
OpenDNS208.67.222.222
Authoritativedns1.p08.nsone.net
All resolvers returned identical answers in 38ms median.
Learn DNS

Plain-English guides to every record type.

Search-indexed, regularly updated, written by humans who run nameservers.

Browse all guides
A

Address (IPv4)

Points a hostname to an IPv4 address. The most common record on the internet.

AAAA

Address (IPv6)

The IPv6 equivalent of an A record. 128-bit addresses.

CNAME

Canonical Name

Alias one hostname to another. Cannot coexist with most other records.

MX

Mail Exchange

Directs email delivery to mail servers, ordered by priority.

TXT

Text

Arbitrary text. Used for SPF, DKIM, DMARC and domain verification.

NS

Name Server

Delegates a zone to the authoritative DNS servers for it.

SOA

Start of Authority

Administrative info about the zone — primary NS, contact, serial, timers.

CAA

Certificate Authority

Restricts which CAs can issue SSL certificates for the domain.

Build with us

Same engine, available over HTTPS and DoH.

Drop our API into your uptime monitor, deploy pipeline, or staging healthcheck. 100 requests/sec free; no card needed.

$ curl example200 OK · 38ms
# Lookup every record type
$ curl "https://api.dnsfish.com/v1/lookup/github.com"
# →
{
"domain": "github.com",
"resolver": "1.1.1.1",
"answers": {
"A": ["140.82.114.4"],
"MX": [5, "aspmx.l..."]
}
}