dig queries the domain name system directly, which is what you need the moment a domain, website or mail service behaves oddly. When everything works, DNS is invisible; when it does not, you have to look at what the name servers are actually answering rather than at what you believe is configured.