DNS Lookup

Copied!

DNS Lookup

Check A, AAAA, MX, NS, TXT, CNAME, SOA, CAA and PTR records instantly

Lookups run from your browser over encrypted DNS-over-HTTPS to Google Public DNS or Cloudflare. They are not sent to or stored by this website.

DNS Records Guide

What each DNS record type does and how to troubleshoot with lookups

How to use the DNS lookup tool

  1. Type a domain (example.com), a host name (mail.example.com) or an IP address. Pasted URLs are cleaned up automatically.
  2. Pick a record type, or leave All common records to fetch A, AAAA, CNAME, MX, NS, TXT, SOA and CAA at once.
  3. Press Look up. Results show each record's name, type, TTL and value, plus the response status and whether the answer was DNSSEC-validated.
  4. Share the page URL to send someone the same lookup, or copy the records in zone-file format.

DNS record types explained

TypeWhat it doesExample value
AMaps a name to an IPv4 address93.184.215.14
AAAAMaps a name to an IPv6 address2606:2800:21f:cb07::1
CNAMEMakes one name an alias of anotherwww → example.com.
MXMail servers for the domain, lowest priority first10 mail.example.com.
NSAuthoritative name servers for the zonens1.example.net.
TXTFree text: SPF, DKIM, DMARC, site verificationv=spf1 include:_spf.google.com ~all
SOAPrimary server, admin contact, serial and timersns1. admin. 2026101801 7200 ...
CAAWhich certificate authorities may issue TLS certificates0 issue "letsencrypt.org"
PTRReverse DNS: maps an IP address back to a namedns.google.
SRVHost and port for a service such as SIP or LDAP0 5 5060 sip.example.com.

Troubleshooting with DNS lookups

Email not delivered

Check that MX records exist and point to the right provider, that the SPF TXT record includes every sending service, and that _dmarc has a valid DMARC policy.

Website not loading

Confirm the A/AAAA records point at the current server and look for an unexpected CNAME. A SERVFAIL often means broken DNSSEC or unreachable name servers.

Propagation checks

After changing a record, compare Google and Cloudflare. If one still shows the old value, it is cached until the TTL expires.

Reverse DNS for mail servers

Mail servers should have a PTR record matching their host name. Many receivers reject or spam-flag mail from IPs without proper reverse DNS.

Frequently asked questions

What does a DNS lookup do?

A DNS lookup asks the Domain Name System for the records published for a name: A and AAAA records map it to IPv4 and IPv6 addresses, MX records name the mail servers, NS records the authoritative name servers, TXT records hold verification and email-security data such as SPF and DMARC, and CNAME records point one name at another.

Which DNS server does this tool use?

Queries go from your browser directly to Google Public DNS (dns.google) or Cloudflare (1.1.1.1) over encrypted DNS-over-HTTPS, so you see what a large public recursive resolver returns. If the selected resolver is unreachable the tool automatically retries with the other one. Nothing is sent to or logged by it-weblog.com.

Why do my new DNS records not show up yet?

Resolvers cache answers for the record's TTL (time to live). Until the old TTL expires, a resolver may keep returning the previous value. Check the TTL column, wait for it to run out, or compare Google and Cloudflare results. A negative answer (NXDOMAIN) is also cached, for the period set in the zone's SOA record.

What does NXDOMAIN mean?

NXDOMAIN (status 3) means the domain name does not exist in DNS. Check the spelling, make sure the domain is registered and delegated to working name servers, and confirm the record name in your DNS zone. NOERROR with no records means the name exists but has no record of the requested type.

How do I check SPF and DMARC records?

SPF is published as a TXT record on the domain itself, so look up TXT for example.com and find the value starting with v=spf1. DMARC lives at the _dmarc subdomain: look up TXT for _dmarc.example.com and find the value starting with v=DMARC1.

How do I do a reverse DNS (PTR) lookup?

Enter an IPv4 or IPv6 address. The tool converts it to the in-addr.arpa or ip6.arpa name automatically and queries the PTR record, which returns the host name the address owner has configured.

More Networking & IP Tools

Free browser-based utilities for network engineers and system administrators

All IT tools
Comments