DNS lookup
Query any DNS record type from two resolvers at once, so a change still spreading is easy to spot.
Nine DNS record types explained in plain words, each with a worked example — and, add a domain, the chosen type looked up live through two resolvers.
Fill in the form and press Explain and look up. The verdict and the detail appear here.
Whatever brought you here — what is a txt record, an SOA record, or any of the other seven — this page answers all nine with a short definition, a worked example, where it gets used and the mistake people actually make with it, then looks the chosen type up live against a domain you type in, through two resolvers at once.
DNS has only nine record types in everyday use, out of the much longer list IANA’s own parameters registry tracks, and together they cover almost everything a person managing a domain ever has to read or publish: an address, an alias, a mail route, a delegation, a free-text slot, a zone’s own authority record, a certificate policy, and a protocol’s chosen host and port.
Picking a type from the list above swaps the whole explanation underneath it — the definition, the worked example and the mistake all belong to that one type alone, because none of the nine share a shape or a purpose with each other.
For the handful of types that come up whenever a domain is actually set up for mail or a website — TXT, MX, CNAME, CAA, NS and SOA — the guide "The DNS records a domain needs, and what each one actually does" on our blog walks through why each one exists and what breaks when it is missing, with the live checker for each type linked alongside it.
The explanation at the top is always there, for whichever type is selected, whether or not a domain has been typed in — that half needs no network and nothing can break it. Type a domain in and a second part appears beneath it: the very same type, looked up live through two public resolvers, with a table showing what each one actually returned.
A domain that does not exist at all is reported as a problem with the name itself, not with the record type; an existing domain with nothing published for the chosen type is reported as perfectly ordinary, since very few domains publish all nine at once.
Resell the domains these records point at, at your own price, under your own brand.
Get startedWhat people ask about this tool.
It is a slot for free-form text that DNS itself does not interpret — what it means is entirely up to whatever program goes looking for it, most commonly a mail receiver checking SPF or a provider confirming you control the domain by matching a token it asked you to publish.
It is the record marking a zone’s own apex, carrying a serial number and four timers that a secondary nameserver reads to decide when to recheck for changes. Even on a managed DNS host, this record exists and those timers still govern how fast edits spread.
It names which certificate authorities are allowed to issue a certificate for a domain at all, and every public CA checks for one before issuing anything — a domain with none published has effectively told the world any CA may issue for it.
Because a real CNAME cannot sit at a zone’s own root alongside the NS and SOA records every zone needs there, providers built their own feature that behaves like one from outside while technically publishing an A or AAAA record underneath it.
Every fixed value this page gives you comes from the provider’s own documentation. These pages change, so each one says the day it was last read here.
Query any DNS record type from two resolvers at once, so a change still spreading is easy to spot.
Read which certificate authorities a domain allows, and see whether the one you actually use is among them.
Read a zone’s SOA record as seven plain-English timers, and catch a serial or a refresh that will cause real trouble.
Company names and logos are trademarks of their owners, shown only to identify each service.