DNS Checker
Enter a domain name to fetch every DNS record it publishes — addresses (A, AAAA), aliases (CNAME), mail routing (MX), name servers (NS), verification texts (TXT) and security policies (CAA, SOA).
What each DNS record type means
The Domain Name System stores much more than a domain's address. This checker queries live DNS over encrypted DNS-over-HTTPS and reports every record type the domain publishes:
- A / AAAA — the IPv4 / IPv6 addresses the domain points to. Without at least one of these, a domain cannot host a website.
- CNAME — an alias pointing one name at another. Not allowed on the zone apex, so example.com will normally show none.
- MX — the mail servers that receive email for the domain, each with a priority. No MX usually means no email.
- NS — the authoritative name servers that answer for the zone.
- TXT — free-form text: SPF anti-spoofing policies, DKIM signing (on subdomains), domain-ownership verification tokens.
- CAA — which certificate authorities are allowed to issue TLS certificates for the domain.
- SOA — the zone's administrative metadata: primary nameserver, contact and caching timers.
Why check DNS records?
- After a migration or DNS edit — confirm the new records are live on public resolvers, not just on your own computer's cache.
- Email deliverability — verify SPF/MX entries are correct before messages start bouncing.
- Security reviews — spot unexpected TXT/NS changes, and make sure CAA lists only the CAs you use.
Tip: DNS edits don't appear instantly everywhere — each record's TTL tells resolvers how long to cache the old answer. Lower the TTL before a planned change, then raise it again afterwards.
Found the addresses? See Domain to IP for the full hosting profile of an address, run a blacklist check on it, or read its reverse DNS.
DNS checker questions
What is a DNS checker?
A DNS checker queries the Domain Name System for every record type of a domain — the addresses it points to (A, AAAA), its mail servers (MX), name servers (NS), verification strings (TXT) and security policies (CAA) — and reports exactly what is published.
Why can't I see a CNAME record for my domain's root?
DNS does not allow a CNAME on the zone apex (example.com itself) — the root must use A/AAAA records. CNAME records only appear on subdomains like www.example.com.
How long do DNS changes take to show up?
Each record carries a TTL (time to live) that tells resolvers how long to cache it — from seconds to days. After editing a record, public resolvers keep serving the old answer until its TTL expires, so propagation can take as long as the previous TTL.