DNS Lookup: every record for a domain, from the sourceA DNS lookup returns the records a domain publishes — addresses, mail servers, text records and more.
Enter a domain to see all of its DNS records at once — addresses, mail servers, text records, nameservers, aliases and more — read directly from the domain’s own authoritative nameservers rather than a resolver cache.
This tool queries the domain’s authoritative nameservers for every common record type — A, AAAA, MX, TXT, NS, CNAME, CAA and SOA — and lists what it finds. Because it reads from the source, you see the records the domain actually publishes, not a possibly-stale cached copy. When the nameservers can’t be reached it falls back to a public resolver and says so.
What this shows
A DNS lookup returns the records a domain publishes. This tool fetches all eight common types together: A (IPv4 address), AAAA (IPv6 address), MX (mail servers), TXT (free-form text, used for SPF, DKIM and domain verification), NS (the domain’s nameservers), CNAME (an alias to another name), CAA (which certificate authorities may issue certificates) and SOA (the zone’s start-of-authority: primary nameserver, serial number and timers).
Where these records come from
By default the lookup reads from the domain’s authoritative nameservers — the servers that hold the zone and answer for it directly, with no cache in between. That is the source of truth. If those nameservers can’t be reached, the tool falls back to a public resolver (Cloudflare) and labels the result as a cached view, because a resolver can hold an older copy until its time-to-live (TTL) expires.
How to read the results
Each record type shows a small badge. Records means the source returned one or more. None means it returned an empty answer — the domain simply has no record of that type, which is normal; most domains have no CNAME at the apex, for instance. Error means the query itself failed, such as a timeout or SERVFAIL. So a missing record is not a failure; only an Error badge is.
The same lookup on the command line
Prefer a terminal? Ask for one record type at a time — a single ANY query is discouraged and many servers no longer answer it usefully (RFC 8482):
# Any record type — swap A for AAAA, MX, TXT, NS, CNAME, CAA or SOA
dig example.com A +short
# The full zone start-of-authority
dig example.com SOA +noall +answer
# Cross-platform (Windows included)
nslookup -type=MX example.com
# Straight from the authoritative nameserver, like this tool
dig example.com A @ns1.example.com +short
dig and nslookup hand back the raw records; this page reads all eight types from the authoritative nameservers in one pass and labels which ones the domain actually publishes.
What this does not prove
Seeing a record here means the domain publishes it right now, from the source. It does not prove the record is correct for your goal — a valid-looking SPF or MX record can still point at the wrong host. It also does not show what every resolver worldwide has cached; to check whether a recent change has spread, use the DNS propagation checker.
DNS lookup FAQ
What is a DNS lookup?
A DNS lookup asks the Domain Name System what records a domain publishes — its addresses, mail servers, text records and more. This tool performs the lookup for all common record types at once and reads them from the domain’s authoritative nameservers.
Which record types does it check?
Eight: A and AAAA (IPv4 and IPv6 addresses), MX (mail routing), TXT (SPF, DKIM and verification strings), NS (nameservers), CNAME (aliases), CAA (certificate-authority authorisation) and SOA (the zone’s start-of-authority record).
Why does a record type show “None”?
Because the domain has no record of that type. That is normal and not an error — for example, most domains have no CNAME at the apex, and many have no CAA record. An Error badge, by contrast, means the query itself failed to complete.
Is this the same as what my computer sees?
Not exactly. Your computer usually asks a caching resolver, which can hold an older copy of a record until its TTL expires. This tool reads from the authoritative nameservers — the source — so it shows what the domain currently publishes. To see whether a change has spread to caches worldwide, use the DNS propagation checker.
What is the SOA record?
The Start of Authority record names the zone’s primary nameserver and the responsible party, and carries a serial number plus the refresh, retry, expire and minimum timers that govern how secondary nameservers and resolvers keep the zone in sync.