DNS Lookup

What is DNS Lookup?

DNS (Domain Name System) lookup is the process of querying DNS servers to retrieve the records associated with a domain name. The DNS acts as the internet's phone book, translating human-readable domain names like example.com into machine-readable IP addresses that computers use to connect to each other. Every time you visit a website, your device performs DNS lookups behind the scenes to resolve the domain to an IP address.

Our DNS lookup tool queries authoritative DNS servers to retrieve all available record types for a domain, A, AAAA, MX, TXT, NS, CNAME, SOA, CAA, PTR, and SRV. This comprehensive view helps network administrators troubleshoot DNS issues, email administrators verify mail server configuration, and security researchers analyze domain infrastructure. The tool returns real-time data directly from the DNS hierarchy.

How to Use the DNS Lookup Tool

Step-by-Step Guide

1. Enter Domain Name: Type the domain name you want to query in the input field (e.g., example.com). Do not include http:// or www unless specifically needed.
2. Complete reCAPTCHA: Verify you're human by completing the reCAPTCHA challenge below the input field.
3. Submit Query: Click the Submit button to initiate the DNS lookup. The tool queries DNS servers for all record types simultaneously.
4. Review All Records: Results appear in the right panel, organized by record type (A, AAAA, MX, TXT, etc.). Each record type is labeled with its value or "No info" if the record doesn't exist.
5. Analyze TXT Records: Special attention is given to TXT records, which often contain SPF, DKIM, and DMARC email authentication data. The tool also displays an SPF status field.

DNS Record Types Explained in Detail

A Record (IPv4 Address)

Maps a domain name to an IPv4 address (e.g., 93.184.216.34). When you visit example.com, an A record lookup returns the IP address where the website is hosted. A domain can have multiple A records for load balancing or redundancy.

AAAA Record (IPv6 Address)

Maps a domain to an IPv6 address (e.g., 2606:2800:220:1:248:1893:25c8:1946). As the internet transitions from IPv4 to IPv6, AAAA records allow domains to serve content over the newer protocol. Devices with IPv6 connectivity prefer AAAA records over A records.

MX Record (Mail Exchange)

Specifies the mail servers responsible for receiving email for the domain. Each MX record includes a priority number, lower numbers indicate higher priority. Email systems use MX records to determine where to deliver messages sent to addresses @yourdomain.com.

TXT Record (Text)

Stores arbitrary text data for a domain. TXT records are commonly used for:

• SPF (Sender Policy Framework): Lists IP addresses authorized to send email on behalf of the domain
• DKIM (DomainKeys Identified Mail): Public keys for verifying email signatures
• DMARC (Domain-based Message Authentication): Policies for handling emails that fail SPF/DKIM
• Domain verification: Proving domain ownership to third-party services

NS Record (Name Server)

Identifies authoritative name servers for the domain. These servers hold the actual DNS records and respond to queries. When you change DNS hosting providers, you update NS records at your domain registrar to point to the new provider's name servers.

CNAME Record (Canonical Name)

Creates an alias that points one domain name to another. For example, www.example.com might be a CNAME pointing to example.com. The browser then resolves the canonical name to get the actual IP address. CNAMEs simplify DNS management when multiple domains share the same IP.

SOA Record (Start of Authority)

Contains administrative information about the DNS zone, including the primary name server, responsible email address, serial number (for zone updates), and timing values for zone transfers and caching. SOA records are essential for DNS zone management.

CAA Record (Certification Authority Authorization)

Specifies which certificate authorities (CAs) are allowed to issue SSL/TLS certificates for the domain. This helps prevent unauthorized certificate issuance, reducing the risk of man-in-the-middle attacks.

PTR Record (Pointer)

Used for reverse DNS lookups, mapping an IP address back to a domain name. Email servers often check PTR records to verify that the sending server's IP matches its claimed domain, helping filter spam.

SRV Record (Service)

Defines the location (hostname and port) of servers for specific services. Commonly used for VoIP, instant messaging, and other applications that need to discover service endpoints automatically.

Common Use Cases for DNS Lookup

✓ Email Troubleshooting: Verify MX records and TXT records (SPF, DKIM, DMARC) to diagnose email delivery issues.
✓ Domain Verification: Confirm TXT records added for third-party service verification (Google Workspace, Microsoft 365).
✓ Security Audits: Check CAA records to ensure only authorized CAs can issue certificates, and review NS records to detect unauthorized DNS changes.
✓ Website Migration: Verify A and CNAME records after moving a website to new hosting infrastructure.
✓ Threat Research: Analyze DNS records of suspicious domains to identify hosting providers and infrastructure connections.

Understanding SPF, DKIM, and DMARC in TXT Records

Email authentication protocols are implemented via TXT records in DNS. These protocols help prevent email spoofing and phishing:

SPF (Sender Policy Framework): A TXT record listing IP addresses and domains authorized to send email on behalf of your domain. Example: v=spf1 ip4:192.168.1.1 include:_spf.google.com ~all

DKIM (DomainKeys Identified Mail): A public key published in DNS that email receivers use to verify the signature attached to emails. This proves the email wasn't modified in transit.

DMARC (Domain-based Message Authentication): A policy instructing receivers how to handle emails that fail SPF or DKIM checks. Example: v=DMARC1; p=quarantine; rua=mailto:reports@example.com

DNS & Domain Tools