My IP address

My IP My IPv4 My IPv6 My WAN / External IP What Is My ISP

Lookup tools

IP Lookup Speed Test IP Location Lookup IPv6 Lookup What Is My ISP My WAN / External IP DNS Lookup

Learn

FAQ What Is an IP Address? IPv4 vs IPv6 Static vs Dynamic IP How to Hide Your IP

Site

About Contact Privacy Policy Cookie Policy Terms of Use
Domain tools

DNS Record Lookup

Query any domain's live DNS records over encrypted DNS, straight from your browser. See the values, the record types and the remaining TTL.

Advertisement

No query yet

Enter a domain above to see its live DNS records.

Advertisement

What each record type does

TypePurposeLooks like
APoints a name at an IPv4 address93.184.216.34
AAAAPoints a name at an IPv6 address2606:2800:220:1::
CNAMEMakes one name an alias of anotherwww → example.com
MXSays which servers accept mail10 mail.example.com
TXTFree text: SPF, DKIM, domain verificationv=spf1 include:_spf…
NSNames the authoritative servers for the zonens1.example.net
SOAZone metadata, serial number and refresh timersns1… hostmaster… 2024…
CAARestricts which authorities may issue certificates0 issue "letsencrypt.org"

Understanding TTL

Every record carries a time to live, measured in seconds. It tells resolvers how long they may keep serving a cached copy before asking again. A TTL of 300 means five minutes; 86400 means a full day.

This is why DNS changes are not instant. If you update a record that had a 24 hour TTL, some resolvers around the world will keep handing out the old value for another 24 hours. The standard trick before a planned migration is to lower the TTL to a few minutes a day in advance, make the change, then raise it again once traffic has settled.

Why answers differ between tools

DNS is a distributed cache, not a single database. This page queries a public encrypted resolver. Your laptop probably uses whatever resolver your router advertised, which may be your ISP's. Each one holds its own cached copies with their own expiry, and some networks deliberately rewrite answers for filtering or captive portals. Seeing two different results is normal during a change, and is itself useful information.

Reading a mail setup

To check whether a domain can receive mail, look at its MX records: the lowest preference number is tried first. To check whether it can legitimately send mail, read the TXT records for an entry beginning v=spf1, which lists the servers allowed to send on its behalf. A domain with no SPF record will see much of its mail land in spam.

Advertisement