DNS Lookup

Query 11 record types for any domain — A, AAAA, MX, NS, TXT, CNAME, SOA, CAA, DS, DNSKEY, SRV — via your choice of resolver.

Enter a domain above and click Lookup
🌐

Look up DNS records

11 record types queried in parallel — including DS, DNSKEY and SRV — with multi-resolver support and a Basic Health Check.

What each record does
📍
A / AAAA — IP addresses
A maps a domain to IPv4; AAAA to IPv6. Multiple A records enable load balancing.
📬
MX — Mail servers
MX records define mail servers with priority — lower value = higher priority.
🗒️
TXT — Text / authentication
Stores SPF, DKIM, DMARC, and domain ownership verification tokens.
🔐
DS / DNSKEY — DNSSEC
DS (Delegation Signer) in parent zone and DNSKEY in child zone together enable DNSSEC chain of trust.
🔒
CAA — CA authorization
Limits which certificate authorities can issue TLS certs for this domain.
FAQ
Why are some record types empty?+

Not all domains configure every type. CNAME, CAA, DS, DNSKEY and SRV are optional. SOA is always present but may be cached differently per resolver.

What is TTL?+

Time To Live — how many seconds resolvers cache a record before re-querying. Common values: 300 (5 min), 3600 (1 hr), 86400 (1 day).

Which resolver should I use?+

They all return authoritative data. Use Cloudflare or Google for fastest response. Switch resolvers if you suspect a propagation delay or caching difference.

How do I verify SPF / DMARC?+

SPF is in a TXT record starting with "v=spf1". DMARC is in a TXT record at "_dmarc.yourdomain.com". The Basic Health Check below shows both automatically.

What is DNSSEC?+

DNSSEC adds cryptographic signatures to DNS records. Presence of DS + DNSKEY records means DNSSEC is configured. The health check flags if it's missing.