Short answer. For checking DNS propagation benchmark worldwide, DNSChecker and WhatsMyDNS are the best (dozens of servers across countries). For inspecting all of a domain's records, use the enterno.io DNS checker or Google Dig. For technical diagnostics from a terminal, use dig and nslookup, and for continuous change tracking, a service with DNS monitoring. Your choice depends on the task: propagation, record audit, or deep diagnostics.
What a DNS lookup shows
A DNS Lookup reveals how a domain resolves to IP addresses and where its email is routed. The main record types are A and AAAA (addresses), MX (mail), NS (name servers), TXT (SPF, DKIM, verifications), CNAME запись (aliases) and SOA (zone). A detailed breakdown of each type is in our DNS records guide. When you change records, the changes don't apply instantly: resolvers worldwide cache old values until the TTL expires — we covered this in our article on DNS propagation.
Tip: lower a record's TTL to 300 seconds a day before a planned domain migration. Then, after you change the value, resolvers refresh their cache in minutes rather than hours — propagation completes noticeably faster.
The fastest way to inspect a single record from a terminal is dig with the +short flag, which strips everything but the final values:
dig example.com A +shortSwap A for MX, TXT or NS to check mail, text records or name servers.
DNS tool comparison
| Tool | Record lookup | Global propagation | Monitoring | Type |
|---|---|---|---|---|
| DNSChecker | Yes | Yes (many countries) | No | Web, free |
| WhatsMyDNS | Yes | Yes (many servers) | No | Web, free |
| enterno.io | Yes (all types) | Partial | Yes | Tool + monitoring |
| Google Dig (toolbox) | Yes | No | No | Web, free |
| dig / nslookup | Yes | Depends on resolver | No | CLI |
| MXToolbox | Yes (mail focus) | Partial | Paid | Web |
Tool overview
- DNSChecker — the gold standard for DNS propagation checks. It queries resolvers in dozens of countries and shows where a new record is already visible and where it isn't yet. Indispensable after a domain migration or an NS-server change.
- WhatsMyDNS — a DNSChecker counterpart with a large number of global checkpoints and a handy propagation status map. Great for confirming that changes have reached the regions you care about.
- enterno.io — a DNS checker that returns all record types (A, AAAA, MX, NS, TXT, CNAME, SOA) in a single report. Its key edge is monitoring: put a domain under watch and get alerts on record changes via Telegram, Slack, email or webhook. The free tier offers 10 monitors, plus a public REST API документацию and an MCP server.
- Google Dig (Admin Toolbox) — a fast web front end to dig from Google, convenient for querying a single record type without installing any tools.
- dig / nslookup — the classic command-line utilities. dig gives the most detailed technical output with ANSWER and AUTHORITY sections, while nslookup is simpler for basic queries and ships on Windows by default.
- MXToolbox — strong at mail-record diagnostics (MX, SPF, DKIM, DMARC) and blacklist checks. Useful when the problem is specifically email deliverability.
How to choose
After changing NS servers or migrating hosting, you need a propagation tool — DNSChecker or WhatsMyDNS. For a full record audit and ongoing control, choose a service with monitoring, such as enterno.io (10 free monitors, multi-channel alerts, a REST API and an MCP server for Claude/Cursor). For terminal debugging, dig. If you're still learning DNS infrastructure, start with an overview of DNS server types, and to protect your records from spoofing, study DNSSEC.
Important: if different checkpoints return different answers, that's not a tool error but the normal picture of in-progress propagation. Wait for the TTL to expire before hunting for a config problem.
FAQ
How do I check DNS propagation?
Use DNSChecker or WhatsMyDNS: enter the domain and record type, and the service shows values from servers in different countries. Differences mean propagation is still in progress. A round-up of such tools is in our article on DNS propagation checking tools.
Why is dig better than nslookup?
dig gives more detailed, structured output (ANSWER, AUTHORITY sections, flags), which is better for diagnostics. nslookup is simpler and ships out of the box on Windows, so it suits quick one-off queries.
Can I track DNS changes automatically?
Yes. Monitoring services poll records periodically and alert you on changes — useful for catching an unauthorized edit or a delegation failure before users are affected.
Why do different servers return different answers?
Because of TTL and caching: until the old record's lifetime expires, some resolvers still serve the previous value. More in our article on DNS propagation.