deftools.io Domain & Network

DNS Lookup

Look up DNS records for a domain — A, AAAA, MX, NS, TXT, CNAME, SOA, CAA, SRV

About this tool

Enter a domain name and the tool queries live DNS records through a public resolver — no command line or dig needed. Pick a record type (A, AAAA, MX, NS, TXT, CNAME, SOA, CAA, SRV) and the table shows the resolved name, TTL, type, and value for each answer. It strips http://, https://, paths, and www. so you can paste a full URL.

Example: look up cloudflare.com with type A and you get a few IPv4 addresses like 104.16.132.229; switch to MX and you see mail servers ranked by priority. TXT records reveal SPF / DKIM / verification tokens; CAA records show which certificate authorities are allowed to issue certs.

Each value has a copy button, and the domain + record type are saved in the URL (?domain=…&type=MX) so you can bookmark or share a specific query. Empty results usually mean the domain has no record of that type — not that the lookup failed. Non-zero DNS status codes (NXDOMAIN, SERVFAIL, REFUSED) are surfaced in a banner above the table.

FAQ

Why do I get "No records found" for a domain that clearly exists?

The most common cause is picking a record type the domain does not have. A bare domain like example.com usually has A/AAAA and MX, but may have no SRV or CNAME records. Also check the DNS Status banner — NXDOMAIN (3) means the domain itself does not exist, SERVFAIL (2) means the resolver hit an error.

What does the TTL number mean?

TTL (Time To Live) is the number of seconds a resolving cache is allowed to keep this record before re-checking with the authoritative server. A TTL of 3600 means "cache for one hour." Short TTLs (60–300) are used during migrations; long ones (86400+) reduce load and propagation speed.

Why does the tool return different IPs than what I see locally?

The query goes through Google Public DNS. Large sites use anycast and geo-routing, so the A/AAAA records returned depend on which resolver and region is asking. Your local resolver (often your ISP or a CDN edge) may return a different set of addresses for the same hostname.

Can I look up TXT records to check SPF, DKIM, or domain verification?

Yes. Set the type to TXT and query the bare domain for SPF, or the specific selector hostname (e.g. google._domainkey.example.com) for a DKIM public key. TXT records are also how services like Google Search Console and Microsoft 365 confirm domain ownership.

Related domain & network tools

Copied!