DNS Lookup

Look up A, AAAA, MX, TXT and NS records for a domain.

A DNS lookup asks the internet's address book what a domain name points to. Every time you load a website, send an email or connect an app to an API, your device runs the same query in the background — this tool just shows you the answer directly, for any domain, without waiting for a cache to expire.

Enter a domain above to see its A, AAAA, MX, TXT and NS records side by side. The sections below explain what each record type does and how to use them to diagnose a problem.

What each DNS record type means

A domain's DNS zone holds several kinds of record, each answering a different question. These are the five this tool queries, and what they are normally used for:

  • A record — maps the domain to an IPv4 address. This is the record that decides which server your browser actually connects to. A domain can have several A records, which is a simple way to spread traffic across multiple servers.
  • AAAA record — the same idea for IPv6 addresses. A domain with no AAAA record is unreachable over IPv6-only networks, which increasingly matters on mobile carriers.
  • MX record — says which mail servers accept email for the domain, and in what order. The number in front is a priority: lower numbers are tried first, so priority 10 is preferred over priority 20.
  • TXT record — free-form text, now used mostly for verification and email authentication. This is where SPF, DKIM and DMARC policies live, along with the "prove you own this domain" strings that services ask you to add.
  • NS record — names the authoritative name servers for the domain. These are the servers that hold the real zone file; everything else on the internet is working from a cached copy of what they said.

How to read the results

If a record type comes back empty, that is usually normal rather than broken. Plenty of domains have no AAAA record because the owner hasn't enabled IPv6, and a domain that doesn't receive email has no reason to publish MX records.

Two results are worth paying attention to. NXDOMAIN means the domain itself does not exist in DNS at all — check for a typo, or an expired registration. SERVFAIL means a name server was reached but could not give a valid answer, which often points at a broken DNSSEC signature or a misconfigured zone rather than anything wrong on your side.

Remember that you are seeing the answer from our resolver's point of view. DNS is cached at every layer between a domain's authoritative servers and your laptop, so a change made minutes ago may be visible here and not yet at home, or the other way round.

Why your DNS change hasn't taken effect yet

Every DNS record carries a TTL — time to live — which tells resolvers how many seconds they may keep using a cached copy before asking again. If a record had a TTL of 3600 when you changed it, resolvers that had already cached the old value can legitimately keep serving it for another hour.

The practical trick is to lower the TTL before a planned migration, not after. Drop it to 300 seconds a day ahead of the change, make the change, confirm it, then raise the TTL back up. Lowering the TTL after you have already made the change does nothing for anyone holding the old cached answer.

Frequently asked questions