DNS Inspector
Look up a domain's records, with the TTLs that decide how long an answer lingers and whether the resolver validated the signatures.
Network request required This tool has to ask a DNS resolver, so the domain name you type is sent to it. Nothing else is: no cookies, no identifier, and nothing about you. Your browser makes the request directly — Toolsfully has no server involved and never sees the query. The resolver is yours to choose below, and each publishes its own privacy policy.
Reading the answers
TTL is how long a resolver may keep the answer. It is the number that decides how long a change takes to be seen everywhere — and the clock starts when each resolver cached its copy, not when you made the change. Lower it a day before a migration and raise it afterwards.
NXDOMAIN and an empty answer are different. NXDOMAIN means the name does not exist at all. An empty NOERROR means the name exists but has no record of that type, which is what you see asking for AAAA on a domain with only IPv4.
DNSSEC validated means the resolver checked the signature chain and it held. Its absence usually means the domain is not signed rather than that anything failed — most domains still are not.
CAA says which certificate authorities may issue for the domain. It is checked at issuance, so it constrains future certificates rather than existing ones.
What this shows and what it does not
One resolver's view, right now. A different resolver may hold an older cached answer, which is exactly what makes propagation confusing. Nothing here queries the authoritative servers directly, so what you see is what that resolver would tell anyone asking.
Related tools
Email DNS Analyzer for SPF, DKIM and DMARC in detail. Subnet Calculator for the addresses it returns.