dig.

Nameserver modes: Resolver queries one public resolver; All runs the lookup against every public resolver and shows them side by side; Authoritative finds the domain's own nameservers (walking up the tree if needed) and asks each directly; Specify your own takes a list (one per line). Enter several hosts to compare too.

Supported now: A, AAAA, NS, CNAME, SOA, PTR, MX, TXT, SPF, SRV, NAPTR, CAA, HINFO, DS, DNSKEY, SSHFP, TLSA, RRSIG, SVCB/HTTPS, ANY.