Tool 2.4

DNS lookup: check A, AAAA, MX, TXT, NS & CAA records

Look up any domain's DNS records (A, AAAA, CNAME, MX, TXT, NS, SOA, CAA, SRV) or the reverse DNS of an IP, with TTLs and DNSSEC validation.

Online checkPublic DNS lookups for the domain go from your browser to Cloudflare (cloudflare-dns.com). We store nothing.

How to use it

Type a domain (or an IP address for reverse DNS).
Pick a record type, or leave 'All common types'.
Press Look up. Your browser asks Cloudflare's public resolver (1.1.1.1) and shows each record with its TTL and whether DNSSEC validated.

MX, TXT, CNAME: what each record is for

You look up DNS records when you set up email with a new provider (MX records, plus TXT records for SPF and verification codes), point your domain to new hosting (A, AAAA or CNAME), prove to Google or Microsoft that you own a domain (a TXT code), or want to know which company runs a domain's DNS (NS).

A quick glossary: A is an IPv4 address and AAAA an IPv6 one. CNAME makes one name an alias of another. MX lists the mail servers, each with a priority number; the lowest is tried first. TXT holds free text, like SPF rules and verification codes. NS names the nameservers, SOA holds the zone's admin data, and CAA says which certificate authorities may issue certificates for the domain. The TTL is how many seconds a resolver may keep the answer.

Is my verification TXT record live?

You added google-site-verification=abc123 as a TXT record for tienda-ejemplo.co. Choose TXT and press Look up. If it's published, you'll see a row with type TXT, name tienda-ejemplo.co, a TTL such as 300, and the value in quotes. If you get “No records of this type.”, the record isn't live yet or went to the wrong name.

The wrong-name mistake is very common: many DNS panels add your domain to whatever you type in the host field, so typing tienda-ejemplo.co there creates tienda-ejemplo.co.tienda-ejemplo.co. Look up that doubled name to confirm, then type @ or leave the host empty. Also note the difference between two results: NXDOMAIN means the name doesn't exist at all, while “No records of this type” means the name exists but has nothing of that type.

Stale copies and hidden subdomains

The answers come from Cloudflare's public resolver, which keeps each record for its TTL. Your internet provider's resolver, your router or your computer may still hold an older copy, so right after a change you and this page can see different values.

DNS has no way to list every name under a domain: you can only ask about names you already know, so there's no list of subdomains here. All common types asks for eight types (A, AAAA, CNAME, MX, TXT, NS, SOA and CAA); SRV and PTR have their own options. A “not validated” DNSSEC line is normal for domains that simply aren't signed.

FAQ

Where do the results come from?

From Cloudflare's public resolver 1.1.1.1 over DNS-over-HTTPS, queried directly by your browser. You see the answer that big public resolver has, not your computer's or your network's cache. Other resolvers may still hold an older copy; the DNS propagation checker compares ten of them.

Why don't I see my new DNS change?

Resolvers cache each record for its TTL (time to live), in seconds. After you change a record, the old value can keep showing up until the previous TTL runs out.

How do I look up SRV records?

Choose SRV and type the full service name, for example _sip._tcp.example.com or _imaps._tcp.example.com.

What's the difference between an A record and a CNAME?

An A record points a name straight to an IP address. A CNAME points a name to another name, which has its own address, so if the provider changes its IPs you don't have to update anything. The bare domain (without www) usually can't be a CNAME, because it already has NS and SOA records and a CNAME can't share its name with other records; some DNS providers offer an alias or flattening option for that.

How do I check the reverse DNS (PTR) of an IP?

Type the IP address, such as `203.0.113.7` or an IPv6 address, and the tool builds the special reverse name and asks for its PTR record. Reverse DNS is set by whoever owns the IP, usually your hosting or internet provider, not in your domain's DNS panel. Mail servers without a matching PTR name often see their messages end up in spam.

Guides for this tool

G3How to set up DMARC in one day: SPF, DKIM and DMARCA one-day plan to set up SPF, DKIM and DMARC for your business domain, check them with free tools, and reach p=reject in the weeks after.
G14Why are my emails going to spam? A fix for small businessesWhy a small business's email lands in spam: SPF, DKIM and DMARC, the Gmail and Yahoo sender rules, common setup mistakes, and how to check yours.
G25How to read your first DMARC report, line by lineWhat each part of a DMARC aggregate report means, why your own services may fail, how to tell a forwarder from a spoofer, and the road to p=reject.

2.1What's my IP?See your public IP address, whether it's IPv4 or IPv6, your country, TLS and HTTP version, and what every website can learn from your connection.
2.2Email securityCheck a domain's SPF, DKIM, DMARC, MTA-STS, BIMI and DNSSEC, and get copy-ready DNS records for what's missing or wrong.
2.3SPF record builderBuild one SPF record for your domain from your mail services, servers and IP ranges.
2.5Email header analyzerPaste an email's raw headers to see the servers it passed through, the SPF, DKIM and DMARC results your provider recorded, and signs of a forged sender.
2.6DNS propagation checkerAsk 10 public resolvers (Google, Cloudflare, Quad9, OpenDNS…) for a name's A, AAAA, CNAME, MX, NS or TXT records and see if your DNS change reached them.
2.7DMARC report readerOpen a DMARC aggregate report (.xml, .xml.gz or .zip) and see, for each sending IP, how many messages passed or failed SPF and DKIM.
2.8Is it down?Check whether a website answers, with its HTTP status, response time, redirects and HTTPS, measured once from our server in Colombia.
2.9DMARC record generatorBuild a DMARC TXT record: policy, test mode, report addresses and alignment.
2.10Link preview checkerSee how your link will look when shared on WhatsApp, X, LinkedIn or Facebook: check the title, description, og:image and Twitter card tags, with fixes.
2.11Subnet calculatorType an IP address with its prefix to get the network, mask, broadcast, usable host range and count, and split it into equal subnets.

╌╌ END ╌╌