← All Tools

DNS Record Lookup

Look up A, AAAA, MX, TXT, NS, CNAME, SOA, CAA and SRV records for any domain — or enter an IP for a reverse (PTR) lookup. The query runs on this server's resolver, so your local DNS cache does not affect the answer.

A pasted URL is trimmed to its hostname. Type an IP address (IPv4 or IPv6) to reverse-resolve its PTR record.

DNS Record Types Reference
Address Records
A IPv4 address mapping AAAA IPv6 address mapping CNAME Alias to another domain
Mail & Name
MX Mail server (with priority) NS Authoritative nameservers TXT SPF, DKIM, verification
SOA Record
Primary nameserver Admin email (rname) Serial, refresh, retry, expire Minimum TTL for neg. caching
Policy & Service
CAA Allowed cert authorities (RFC 8659) SRV Service host, port & priority (RFC 2782) PTR Reverse DNS for an IP (enter an IP)
Common TXT Uses
SPF (email authentication) DKIM public keys DMARC policies Domain verification tokens

How to use the DNS lookup

  1. Enter a domain or subdomain, for example example.com or mail.example.com. A pasted URL is trimmed to its hostname, and a leading www. is removed. To do a reverse lookup, enter an IP address instead (for example 8.8.8.8) and the tool resolves its PTR record.
  2. Untick the record types you do not need. A, AAAA, MX, TXT, NS, CNAME, SOA and CAA are queried by default; tick SRV and use a service name such as _sip._tls.example.com when you need it.
  3. Press Lookup. The query runs on this server through its recursive resolver, not your computer, so a stale answer in your local DNS cache does not affect the result.
  4. Each record type shows an explicit status — records found, no records of this type, or lookup error — so a type that could not be checked is never shown as if it were empty.
  5. Use Copy zone for a BIND-style zone snippet, or the export bar for JSON / CSV / TSV / Markdown, for example before migrating a zone to a new DNS provider.

Reading the results

Each row shows the record type, the name, the value and the TTL: how long resolvers may cache the answer.

  • A / AAAA: the IPv4 and IPv6 addresses of the name, for example 203.0.113.10. Several A records mean load balancing or a CDN.
  • MX: mail servers, lowest priority number first. 10 mx1.example.com is tried before 20 mx2.example.com.
  • TXT: free text, mostly SPF (v=spf1 include:_spf.google.com -all) and site verification tokens. More than one v=spf1 record is an error.
  • NS: the authoritative nameservers. They must match the nameservers set at the registrar, or your edits have no effect.
  • SOA: the primary nameserver, the admin mailbox, and the serial number that changes with every zone update, plus refresh, retry, expire and negative-caching values.
  • CAA: shown as flags tag "value" (RFC 8659). 0 issue "pki.goog" means only that CA may issue certificates for the name; issuewild covers wildcards and iodef gives a reporting address.
  • SRV: shown as priority weight port target (RFC 2782). Lower priority wins; weight shares load within a priority.
  • PTR: the reverse name of an IP, resolved through in-addr.arpa (IPv4) or ip6.arpa (IPv6).

No records of a type means the resolver answered but that type has no data. This lookup reads the resolver's answer only, so it cannot tell a type with no records apart from a domain that does not exist (NXDOMAIN) — check registration with the WHOIS Lookup. To map a domain's wider footprint, try the DNS Mapper.

Frequently asked questions

How do I check the DNS records of a domain?

Enter the domain above, keep the record types you need ticked and press Lookup. On the command line, dig example.com MX +short or nslookup -type=TXT example.com return the same data one type at a time.

Why do my DNS changes not show up yet?

Resolvers cache each record for its TTL. If the old record had a TTL of 3600, some resolvers keep serving it for up to an hour after the change. Lower the TTL a day before planned changes, and check that the NS records point to the provider where you edited the zone.

Why is there no CNAME record for my domain?

A CNAME cannot coexist with other records on the same name, so the root of a domain (example.com) normally has none. Look up a subdomain such as shop.example.com instead. Dangling CNAMEs that point to deleted cloud resources can be tested with the Subdomain Takeover Checker.

Can I look up CAA, SRV or reverse (PTR) records?

Yes. Tick CAA to see which certificate authorities may issue for the domain (RFC 8659), or SRV and enter a service name such as _sip._tls.example.com (RFC 2782). To do a reverse lookup, type an IP address like 8.8.8.8 or 2001:4860:4860::8888 instead of a domain and the tool queries its PTR record automatically.

Can I look up DMARC or DKIM records here?

A DMARC record lives at _dmarc.example.com and DKIM keys at a selector such as selector._domainkey.example.com. You can read those as TXT with the SRV option ticked (underscore names are then accepted), but the SPF, DKIM & DMARC Checker reads and grades them for you. The SPF record itself appears here among the TXT records.

Who owns a domain and when does it expire?

DNS does not hold that information. Use the WHOIS Lookup for the registrar, registration and expiry dates.