Back to Tools
DNS Lookup
Query DNS records for any domain. Check A, AAAA, MX, TXT, CNAME, NS, SOA, and CAA records.
Understanding DNS Records
Record Types
AIPv4 Address
AAAAIPv6 Address
CNAMECanonical Name (Alias)
MXMail Exchange
TXTText Record
NSName Server
SOAStart of Authority
PTRPointer (Reverse DNS)
SRVService
CAACertification Authority Authorization
How DNS Works
- Query: Your browser asks a DNS resolver for the IP address of a domain
- Recursive Lookup: The resolver queries root servers, TLD servers, and authoritative servers
- Response: The IP address is returned and cached based on TTL
- Connection: Your browser connects to the server using the IP address
Email Security (SPF/DKIM/DMARC)
- SPF: Specifies which servers can send email for your domain
- DKIM: Cryptographic signature to verify email authenticity
- DMARC: Policy for handling emails that fail SPF/DKIM checks
All three are important for preventing email spoofing and improving deliverability.
TTL (Time To Live)
TTL indicates how long a DNS record should be cached. Common values:
300(5 minutes) - For frequently changing records3600(1 hour) - Standard for most records86400(1 day) - For stable records
Lower TTL = faster propagation but more DNS queries. Higher TTL = better performance but slower changes.
DNSSEC: DNS Security Extensions add cryptographic signatures to DNS records, preventing DNS spoofing and cache poisoning attacks. Look for the DNSSEC indicator in your results to verify if a domain has DNSSEC enabled.