Skip to content
Devtoolry

DNS Lookup

Look up the DNS records of any domain: A, AAAA, CNAME, MX, TXT, NS, SOA, CAA and SRV, or the reverse DNS of an IP, from Cloudflare, Google or Quad9.

Something not working, or missing a feature? Send feedback

About the DNS Lookup

The DNS Lookup tool shows the DNS records of any domain: A and AAAA addresses, CNAME aliases, MX mail servers, TXT records such as SPF and DMARC, NS, SOA and CAA, with their TTLs. Enter an IP address for its reverse DNS (PTR). Queries go to Cloudflare, Google or Quad9, so you see what the public internet sees.

Our server sends the DNS queries to the public resolver you pick (Cloudflare, Google or Quad9), so your own address is not shared with it. Names and results are not stored.

How to use the DNS Lookup

  1. Enter a domain such as example.com, a subdomain such as _dmarc.example.com, or an IP address.
  2. Choose the record types and the public resolver.
  3. Click Look up and read the records and their TTLs.
  4. Compare resolvers after a DNS change to see whether it has spread, then copy the results.

Common mistakes

  • Several SPF records. A domain must have exactly one TXT record starting with v=spf1. Two make SPF fail; merge them into one.
  • Forgetting www. example.com and www.example.com are separate names. Check both after moving a site.

Works well with the DNS Lookup

Frequently asked questions

How long does a DNS change take?

Resolvers cache a record for its TTL (in seconds). After a change, some resolvers return the old value until their copy expires, so lower the TTL a day before planned changes. Compare Cloudflare, Google and Quad9 to see whether the new value has reached them.

How do I check SPF and DMARC?

SPF is a TXT record on the domain that starts with v=spf1. DMARC is a TXT record on _dmarc.yourdomain, starting with v=DMARC1. Look up TXT for both names.

What does NXDOMAIN mean?

The name does not exist: it is not registered, has expired, or is misspelled. A name that exists but has no record of the type you asked for shows "No records" instead.

What is a CAA record?

It lists the certificate authorities allowed to issue SSL certificates for the domain. Without one, any CA may; with one, a CA that is not listed must refuse.

Why can a CNAME not be used on the root domain?

A CNAME cannot sit next to other records, and the root (example.com) always has SOA and NS records. Use A/AAAA records there, or your DNS provider's ALIAS or flattening feature.