Address record (IPv4)
Maps a name to one or more IPv4 addresses, e.g. example.com → 203.0.113.10. Browsers use it to reach a website, and mail servers use it as a fallback when a domain has no MX record.
See the DNS records the rest of the internet sees for any domain — A, AAAA, MX, TXT, NS, CNAME, SOA and CAA — or the reverse DNS (PTR) of an IP address. Queried live on public resolvers, with each record type explained in plain words.
The resolvers answered NXDOMAIN: no record of any type exists for this name. Check the spelling, or whether the domain has expired or was never registered.
Perfect records do not stop bounces. Sending to invalid, disposable or abandoned addresses hurts your sender reputation and can get your IP blacklisted. Validate your list before the next campaign.
Type a domain, a subdomain or an IP address. Pasted URLs and e-mail addresses are cleaned up for you.
We query Cloudflare (1.1.1.1) and Google (8.8.8.8) in real time, so you see what other servers on the internet see — not what your own network caches.
Each record type comes with its status and a short explanation. SPF, DMARC and DKIM records are highlighted, with a link to check them in depth.
A domain is more than a website: its DNS zone also decides where its e-mail goes, who may send on its behalf and which certificates are valid.
Maps a name to one or more IPv4 addresses, e.g. example.com → 203.0.113.10. Browsers use it to reach a website, and mail servers use it as a fallback when a domain has no MX record.
The IPv6 equivalent of the A record. A name can have both; clients that support IPv6 usually prefer it.
Lists the servers that accept e-mail for the domain, each with a priority — the lowest number is tried first. Without a working MX record, a domain cannot reliably receive replies or bounces.
Holds free text. It carries SPF policies (v=spf1 …), ownership proofs for Google, Microsoft and others, and — at special names such as _dmarc and selector._domainkey — DMARC and DKIM.
Names the servers that are authoritative for the zone, i.e. where its records are actually managed. Changing NS records moves your whole DNS to another provider.
Makes one name an alias of another, e.g. www.example.com → example.netlify.app. A name with a CNAME cannot hold other records, which is why the root of a domain normally uses A records instead.
One per zone: the primary name server, the administrator’s mailbox (written with a dot instead of @), the serial number and the timers that control how secondaries and caches refresh.
Says which certificate authorities may issue TLS certificates for the domain, e.g. 0 issue "letsencrypt.org". With no CAA record, any public CA may issue.
Maps an IP address back to a host name. Mail servers check it: an IP that sends e-mail should have a PTR whose name resolves back to the same IP (forward-confirmed reverse DNS).
DNS answers are cached for the time set in each record’s TTL (time to live). After you change a record, resolvers that cached the old value keep returning it until the TTL expires — from a few minutes to 48 hours for long TTLs. This is what people call “DNS propagation”.
This tool asks public resolvers directly, so it reflects what most of the internet sees. Our own results are cached for 5 minutes; if you just made a change, wait a little and look again.
Yes. You can run 100 lookups a day without an account (shared with the MX lookup). The tool only reads public DNS records.
Public resolvers from Cloudflare (1.1.1.1) and Google (8.8.8.8). That shows what the rest of the internet sees, independently of the DNS cache of your own computer or network.
The name does not exist in DNS at all — no record of any type. Usually it is a typo, an expired domain or a subdomain that was never created. “No record” is different: the name exists but has no record of that particular type.
Look at the TXT records: the SPF policy is the one that starts with v=spf1, and a domain must have only one. We highlight it in the results. To check it against the 10-lookup limit and see whether DKIM and DMARC are in place, use the free SPF, DKIM and DMARC checker.
They live at special names, not at the domain itself: DMARC at _dmarc.example.com and DKIM at selector._domainkey.example.com. Look up those names directly (as TXT), or use our DKIM checker, which tries the common selectors for you.
Up to the record’s previous TTL. Many providers use 5 minutes to 1 hour; some records have TTLs of 24 hours or more. Our results are cached for 5 minutes.
Yes. For an IPv4 or IPv6 address the tool returns its reverse DNS (PTR) record — the host name the owner of the IP has assigned to it. Mail servers expect sending IPs to have one.
They are two different names in DNS. The www name is often a CNAME pointing to a hosting or CDN provider, while the root holds the MX, SPF and verification records.
A free account gives you 200 credits (10 for free-provider e-mails) to validate lists in bulk, through the REST API or in real time on your forms.
Create free account — 200 creditsNo credit card. Credits never expire.