Enter a domain above to check its DNS records.
Supports A, AAAA, CNAME, MX, NS, TXT, SOA, CAA, DS, DNSKEY, PTR, SRV
About the DNS Checker
Look up DNS records for any domain, covering the twelve record types that matter in practice. Queries run over DNS over HTTPS against a public resolver, returning the current published values with their TTLs. Use it to confirm a migration has propagated, verify mail authentication records, or check which nameservers are actually authoritative.
How to use the DNS Checker
-
Enter a domain name
Type the domain without a protocol — example.com rather than https://example.com.
-
Select the record types
Query A and AAAA for addresses, MX for mail routing, TXT for SPF and DKIM, NS and SOA for delegation, or CAA, DS and DNSKEY for certificate and DNSSEC configuration.
-
Read the records and TTLs
Each answer shows its value and time to live. The TTL tells you how long resolvers may cache the record, which sets the pace of propagation after a change.
When to use it
Verifying a DNS change
Confirm that a new A record or nameserver delegation is live rather than waiting and guessing.
Troubleshooting email delivery
Check MX routing and the TXT records carrying SPF and DKIM when messages are being rejected.
Auditing domain configuration
Review CAA records that restrict which certificate authorities may issue for a domain, and confirm DNSSEC records are present.
Frequently asked questions
How long does a DNS change take to propagate?
Up to the TTL of the previous record, since resolvers may serve the cached value until it expires. Lowering the TTL before a planned change shortens the window.
Why do I see a different result than my computer does?
This query goes to a public resolver, while your machine may use an ISP resolver, a corporate DNS server or a local cache holding older data.
What is the difference between A and CNAME?
An A record maps a name to an IP address. A CNAME maps a name to another name, which is then resolved. A CNAME cannot coexist with other records at the same name, which is why it is not valid at a zone apex.
What is a CAA record for?
It lists which certificate authorities are permitted to issue certificates for the domain. Compliant CAs must check it, so it limits the damage from a mis-issuance.
Does this query the authoritative nameserver directly?
No. It queries a public recursive resolver over DNS over HTTPS, so answers may come from that resolver cache rather than a fresh authoritative lookup.
Related tools
Browse all free online tools on Tooly — every one runs in your browser, with no account required.