What this tool can and cannot do
Queries are sent through public DNS-over-HTTPS resolvers (Cloudflare, with Google as fallback). Results reflect what those resolvers currently have cached, which can differ briefly from the authoritative server after a recent change.
Data sources: Cloudflare & Google DNS-over-HTTPS
Understanding the results
A / AAAA: the IPv4 / IPv6 addresses of the name. CNAME: an alias pointing to another name. MX: mail servers (lower number = higher priority). NS: the authoritative name servers. TXT: free-text records used for SPF, domain verification and more. SOA: zone administration details. CAA: which certificate authorities may issue SSL certificates.
TTL (time to live) is how many seconds resolvers may cache the answer.
NXDOMAIN means the domain does not exist. NOERROR with no records means the domain exists but has no records of that type.
Troubleshooting
- Recently changed a record? Wait for the old TTL to expire, then check with the DNS Propagation tool.
Frequently asked questions
What does the "DNSSEC validated" flag mean?
It means the resolver verified the answer using DNSSEC cryptographic signatures. Most domains do not use DNSSEC yet, so its absence is common.