Look up DNS records
"All common types" queries A, AAAA, CNAME, MX, NS, TXT, SOA and CAA in parallel. For SRV or TLSA, enter the full name, for example _sip._tcp.example.com or _25._tcp.mail.example.com.
Enter a name or an IP, pick a record type and click "Look up".
Nothing is queried until you do.
What each record is for
- A
- The IPv4 address of a host.
- AAAA
- The IPv6 address of a host.
- CNAME
- An alias: this name is another name. Cannot coexist with other records at the same name.
- MX
- Mail servers that accept email for the domain, with a priority (lowest is tried first).
- NS
- The authoritative name servers of the zone.
- TXT
- Free-form text: SPF, DKIM keys, DMARC policy, domain verification tokens.
- SOA
- Start of authority: primary server, admin mailbox, serial number and refresh, retry, expire and negative-cache timers.
- SRV
- Where a service runs: priority, weight, port and target host (name form
_service._proto.name). - CAA
- Which certificate authorities may issue certificates for the domain.
- HTTPS
- Service binding for web origins: ALPN protocols, address hints, alias to another name.
- SVCB
- General service binding, the base of HTTPS records, for other services.
- DS
- Delegation signer: a hash of the child zone's key, published in the parent to chain DNSSEC trust.
- DNSKEY
- The public keys a signed zone uses (KSK and ZSK) to verify its DNSSEC signatures.
- PTR
- Reverse DNS: the hostname for an IP address, stored under
in-addr.arpaorip6.arpa. - TLSA
- DANE: pins the TLS certificate or key of a service (name form
_port._tcp.host).
Status codes: NOERROR (worked), NXDOMAIN (name does not exist), SERVFAIL (resolver could not get an answer, often a broken delegation or DNSSEC failure), REFUSED (server declined). AD means Google Public DNS validated the answer with DNSSEC.