SignNexa is in Early Access - no credit card needed. Join Free

SignNexa

DNS Explorer

Complete DNS record exploration and validation - every record type, DNSSEC, CAA, and nameservers, on top of a full health check.

Scan a domainLive check
  • Secure
  • Fast
  • Anonymous
  • No signup required

What this scan checks

Real-time verification

DNS records

A, AAAA, MX, TXT, NS, and CAA records.

DNSSEC

Signed-zone validation.

Completely freeNo registration requiredNo scan data stored

Why use SignNexa?

Secure by design

Every check is read-only and runs from our servers. We don't store your scan or domain data.

Instant results

Domain, DNS, SSL, and email are checked together and scored in a few seconds.

Actionable fixes

Each issue comes with a plain-language explanation and a copy-ready fix.

About DNS Explorer

What this checks

DNS Explorer resolves and lists every record type for a domain: A and AAAA (the addresses a name points to), CNAME (aliases), MX (mail servers), TXT (which holds SPF, DKIM, DMARC, and verification records), NS (nameservers), SOA, and CAA. It also reports DNSSEC status. DNS is the address book of the internet, and almost every outage that is not a server being down turns out to be a DNS record.

How to read the result

Compare what you see against what you expect: the A record should point at your host, the MX records at your mail provider, and the TXT records should contain the email-authentication entries you set. A missing or wrong record is usually the whole problem. CAA records, if present, restrict which authorities may issue certificates for the domain - useful to know before a certificate renewal fails unexpectedly.

What to do next

Edit records at whichever provider runs your nameservers (the NS records name them). Changes can take up to a day to propagate globally, which is what DNS Propagation checks. If your DNS is business-critical, monitoring it means you find out the moment a record changes rather than when customers report the site is down.