DNS Lookup

What Each Record Type Is For

A and AAAA map a name to an IPv4 or IPv6 address. CNAME is an alias pointing one name at another. MX tells senders where to deliver mail for a domain (with priority). TXT holds arbitrary text — SPF, DKIM, domain verification, and many other use cases all live in TXT records. NS lists the authoritative name servers for a zone. SOA is the zone's start-of-authority record — serial number, refresh timers, and the zone's primary name server. CAA restricts which certificate authorities may issue certs for the domain. SRV points service clients (XMPP, SIP, LDAP, Minecraft, etc.) at a host and port. PTR provides the reverse — IP to hostname — via the in-addr.arpa and ip6.arpa trees.

Why DoH and Why Client-Side

DNS-over-HTTPS (DoH) tunnels DNS queries through ordinary HTTPS to a public resolver, bypassing ISP-level caching and filtering. This tool uses Cloudflare's resolver, which is one of the fastest and most privacy-preserving DoH endpoints. Because the query runs in your browser, you get whatever your ISP or corporate filter doesn't see — useful for verifying the actual published record rather than what your local cache believes. For multi-resolver comparison, use the DNS Propagation Check tool.

Understanding the Status Codes

The badge above the results shows the DNS response status. NOERROR means the query was answered successfully — even an empty answer with NOERROR means "no records of this type, but the domain exists." NXDOMAIN means the name doesn't exist in DNS at all. SERVFAIL indicates an upstream resolver problem, often a DNSSEC validation failure. REFUSED usually means you're querying a resolver for a zone it doesn't serve.

Need Help With DNS?

I handle DNS architecture, nameserver migrations, zone cutovers, DNSSEC rollouts, and mail deliverability audits. If you're planning a cutover and want to de-risk it, or you're chasing down an intermittent resolution issue, get in touch. See also integration services.