Skip to content

DNS lookup

Look up A, AAAA, CNAME, MX, TXT, NS, SOA and CAA records, or the reverse DNS of a public IP, for any domain; our server queries DNS and stores nothing.

DNS lookup

A public IP address gets a reverse (PTR) lookup.

Processed on our server · your IP is shown to you and not storedHow it works

How to use DNS lookup

  1. 1

    Enter a name

    Type a domain such as example.com, paste a full URL, or enter a public IP address for a reverse lookup.

  2. 2

    Pick record types

    Leave All types to query A, AAAA, CNAME, MX, TXT, NS, SOA and CAA together, or choose a single type.

  3. 3

    Read the answers

    Each type lists its records with TTLs, mail priorities or zone timers, or says clearly why there is no answer.

Limits and Pro

Free: 20 lookups a minute, up to 8 record types per lookup, a 3-second timeout with 2 tries per query and 8 seconds overall.

About DNS lookup

This DNS lookup has our server ask public resolvers, Cloudflare's 1.1.1.1 and Google's 8.8.8.8, for the records published for a domain, and shows them grouped by type. It answers the everyday questions behind a launch or a migration: does the name point to the new server (A and AAAA), is www an alias of something else (CNAME), which servers accept its mail and in what order (MX), are SPF, DKIM, DMARC and verification strings in place (TXT), which name servers are authoritative (NS, SOA), and which certificate authorities may issue certificates (CAA).

Internationalised names are converted to their punycode form, so bücher.example works, and a pasted URL is reduced to its host. A public IPv4 or IPv6 address returns its reverse DNS (PTR) name, which mail servers often check. Errors are spelled out: a domain that doesn't exist (NXDOMAIN) is distinguished from one that simply has no records of the type you asked for, a server failure or a timeout.

Results reflect what those public resolvers see right now and may come from their caches for up to each record's TTL. The lookup doesn't query each authoritative server separately, trace delegation or check DNSSEC, and names that only exist on private networks, such as .local or .internal, are refused.

Privacy

The name you enter is sent to our server, which asks public DNS resolvers (1.1.1.1 and 8.8.8.8) for its records and returns the answer to your browser; neither the name nor the result is stored or logged.

DNS lookup: frequently asked questions

How do I check that my domain points to the new server?
Look up the A record for an IPv4 address and the AAAA record for IPv6, for both the bare domain and www. If www shows a CNAME instead, follow it to the name it points to. When the address is still the old one, the previous record is probably cached; the TTL next to each address shows the maximum number of seconds it may take to update.
Where do I see SPF, DKIM and DMARC records?
They are all TXT records. SPF sits on the domain itself and starts with v=spf1. DMARC lives at _dmarc.yourdomain.com and starts with v=DMARC1. DKIM keys are published at selector._domainkey.yourdomain.com, where the selector comes from your mail provider's settings. Enter each full name and choose TXT to see the exact strings receivers will read.
What does NXDOMAIN mean compared with no records?
NXDOMAIN means the name doesn't exist at all in DNS: check the spelling, or whether the domain has expired or isn't delegated yet. No records of this type means the name exists but has nothing of the kind you asked for, which is normal, for example a domain without AAAA records or a subdomain without MX records.
What is a CAA record for?
A CAA record lists the certificate authorities allowed to issue TLS certificates for your domain, such as letsencrypt.org, with issue for normal certificates and issuewild for wildcards. Authorities must check it before issuing. If your domain has CAA records that don't include your provider, certificate renewals fail, which is a common cause of surprise HTTPS errors.
Is anything stored when I run a lookup?
No. The domain name goes from your browser to our server, which passes it to a DNS resolver and sends the records back to you. We don't keep the name, the answer or your IP address afterwards. DNS queries are themselves visible to the resolver, as with any lookup your own computer performs when you open a website.

Other tasks with this tool

All developer tools