⚡deftools.io Domain & Network

DNS Lookup

Look up DNS records for a domain — A, AAAA, MX, NS, TXT, CNAME, SOA, CAA, SRV

About this tool

Enter a domain name and the tool queries live DNS records through a public resolver — no command line or dig needed. Pick a record type (A, AAAA, MX, NS, TXT, CNAME, SOA, CAA, SRV) and the table shows the resolved name, TTL, type, and value for each answer. It strips http://, https://, paths, and www. so you can paste a full URL.

Example: look up cloudflare.com with type A and you get a few IPv4 addresses like 104.16.132.229; switch to MX and you see mail servers ranked by priority. TXT records reveal SPF / DKIM / verification tokens; CAA records show which certificate authorities are allowed to issue certs.

Each value has a copy button, and the domain + record type are saved in the URL (?domain=…&type=MX) so you can bookmark or share a specific query. Empty results usually mean the domain has no record of that type — not that the lookup failed. Non-zero DNS status codes (NXDOMAIN, SERVFAIL, REFUSED) are surfaced in a banner above the table.

FAQ

Why do I get "No records found" for a domain that clearly exists? ›

The most common cause is picking a record type the domain does not have. A bare domain like example.com usually has A/AAAA and MX, but may have no SRV or CNAME records. Also check the DNS Status banner — NXDOMAIN (3) means the domain itself does not exist, SERVFAIL (2) means the resolver hit an error.

What does the TTL number mean? ›

TTL (Time To Live) is the number of seconds a resolving cache is allowed to keep this record before re-checking with the authoritative server. A TTL of 3600 means "cache for one hour." Short TTLs (60–300) are used during migrations; long ones (86400+) reduce load and propagation speed.

Why does the tool return different IPs than what I see locally? ›

The query goes through Google Public DNS. Large sites use anycast and geo-routing, so the A/AAAA records returned depend on which resolver and region is asking. Your local resolver (often your ISP or a CDN edge) may return a different set of addresses for the same hostname.

Can I look up TXT records to check SPF, DKIM, or domain verification? ›

Yes. Set the type to TXT and query the bare domain for SPF, or the specific selector hostname (e.g. google._domainkey.example.com) for a DKIM public key. TXT records are also how services like Google Search Console and Microsoft 365 confirm domain ownership.

Related domain & network tools

Copied!