DNS Record Lookup
Query live A, AAAA, MX, TXT, NS, CNAME, and SOA records for any hostname or domain.
What is the Domain Name System (DNS)?
The Domain Name System (DNS) is a fundamental piece of internet infrastructure that functions as an automated directory. While humans easily remember readable names like example.com, digital hardware and network protocols communicate exclusively via numeric IP addresses (such as IPv4 192.0.2.1 or IPv6 2001:db8::1).
Whenever you enter a web address into a browser, send an email, or connect to a remote server, your device initiates a DNS query. This request travels through recursive resolvers, root servers, top-level domain (TLD) servers, and finally to the domain's authoritative name server to fetch the precise destination directives stored inside your zone file.
Complete Guide to Essential DNS Record Types
Domain management relies on distinct record formats to handle different internet services. Below is an exhaustive breakdown of the standard record types verified by network administrators and online security tools:
A (Address) Record
Maps a domain name directly to a 32-bit IPv4 address. It tells web browsers which physical web server hosts the site's files.
AAAA (IPv6 Address) Record
Functions like an A record but points hostnames to modern 128-bit IPv6 addresses, expanding internet connectivity limits.
MX (Mail Exchange) Record
Specifies the mail servers responsible for receiving incoming email messages sent to your domain, alongside priority values.
TXT (Text) Record
Stores human or machine-readable text. Crucial for domain ownership verification, anti-spam rules (SPF), and cryptographic signing (DKIM).
NS (Name Server) Record
Identifies the authoritative DNS servers configured to hold and publish the official DNS records for a given zone.
CNAME (Canonical Name) Record
Alias one domain or subdomain to another target domain name instead of mapping directly to an IP address.
SOA (Start of Authority) Record
Contains core administrative data about a DNS zone, including administrative email address, zone refresh intervals, and serial numbers.
CAA (Certification Authority Authorization)
Specifies which Certificate Authorities (CAs) are authorized to issue SSL/TLS certificates for the domain, preventing unauthorized certificate creation.
DNS Records for Email Security & Deliverability
Properly configuring DNS records is vital for keeping outgoing emails out of recipient spam folders. Three core TXT record standards work together to secure email delivery:
- Sender Policy Framework (SPF): Defines an authorized list of IP addresses and servers allowed to send outbound emails on behalf of your domain.
- DomainKeys Identified Mail (DKIM): Attaches a cryptographic signature to outgoing messages, allowing receiving mail servers to verify that the message content was not tampered with in transit.
- Domain-based Message Authentication, Reporting & Conformance (DMARC): Tells receiving mail servers how to handle emails that fail SPF or DKIM checks (e.g., monitor, quarantine, or reject).
Frequently Asked Questions
What is DNS propagation and how long does it take? ▼
DNS propagation is the timeframe required for changes made to your DNS records to update across recursive servers worldwide. Depending on your TTL settings and host caching policies, complete propagation usually takes between 1 and 48 hours.
Why are some of my domain's DNS records missing from lookup results? ▼
This online tool inspects standard public authoritative DNS servers. If records were recently added or edited, ongoing propagation or local DNS caching on recursive DNS nodes may delay records from appearing in public lookup queries immediately.
What does TTL mean in DNS lookup tables? ▼
TTL stands for "Time To Live." Measured in seconds, this parameter instructs internet routers, ISPs, and web browsers how long they should cache a DNS record before sending a new query to authoritative name servers for fresh data.
What is the difference between an A Record and a CNAME Record? ▼
An A record maps a hostname directly to a static numerical IPv4 address. In contrast, a CNAME record points a subdomain to another domain name alias, requiring the client to run a secondary lookup to resolve the final IP address.
Why do MX records have numeric priority numbers? ▼
Priority numbers dictate the order in which sending email servers attempt delivery. Lower numbers represent higher priority (e.g., priority 10 is attempted before priority 20). If the primary mail server is down, traffic falls back to the next available server.
What is an NXDOMAIN response? ▼
NXDOMAIN stands for "Non-Existent Domain." It is an error code returned by a DNS server indicating that the requested domain name does not exist within the global domain name system or has expired.
What is DNSSEC and why is it essential? ▼
DNS Security Extensions (DNSSEC) add cryptographic signatures to DNS records. This technology authenticates the origin of DNS lookup data, protecting internet users against DNS spoofing, cache poisoning, and man-in-the-middle attacks.