DNS Record Checker

Check DNS records for any domain

DNS is the address book of the internet. When someone types your domain, a resolver looks up its records to find the server for the website (A and AAAA), the servers that accept your email (MX), the nameservers in charge of the zone (NS) and many text records used for verification and email security (TXT). This checker asks a public resolver over encrypted DNS over HTTPS and shows every record with its time to live (TTL), so you see what the rest of the world sees.

What each record type does

• A / AAAA: the IPv4 and IPv6 addresses of the host.
• CNAME: an alias that points one name at another, common for www and CDN set-ups.
• MX: mail servers, tried in order of priority (lowest number first).
• NS and SOA: who is authoritative for the zone and its serial number and timers.
• TXT: SPF, domain verification for Google, Microsoft and others, and DKIM keys.
• CAA: which certificate authorities may issue SSL certificates for the domain.
• DS / DNSKEY: DNSSEC signing keys that protect answers from tampering.

Email security at a glance

Below the records you get a short email check: whether the domain has MX records, a single valid SPF record and a DMARC policy. Missing SPF or DMARC makes it easier for others to send email that pretends to come from you and hurts your own deliverability. A DMARC policy of quarantine or reject gives the strongest protection.

Troubleshooting tips

If a record you just changed does not show up, compare both resolvers and look at the TTL: caches keep the old value until it runs out. If you get NXDOMAIN, check that the domain is registered and that the nameservers at your registrar match the ones your DNS host gave you. Use the copy or export buttons to share the full result with your hosting support team.