DNS Lookup Tool

What is DNS?

The Domain Name System (DNS) is the phonebook of the internet. When you type a domain name like example.com into your browser, your device performs a DNS lookup to find the IP address associated with that domain. DNS translates human-readable domain names into machine-readable IP addresses that computers use to identify each other on the network. Without DNS, you would need to memorize numerical IP addresses for every website you want to visit. DNS is a hierarchical, distributed database that spans thousands of servers worldwide, ensuring that domain name resolution is fast, reliable, and fault-tolerant.

Different DNS record types serve different purposes. A records map a domain to an IPv4 address, while AAAA records map to IPv6 addresses. MX records specify mail exchange servers that handle email delivery for a domain. NS records identify the authoritative name servers for a domain. CNAME records create aliases that point one domain to another. TXT records store arbitrary text data, commonly used for domain verification and SPF/DKIM email authentication. SOA records contain administrative information about a DNS zone, including the primary name server and zone serial number. SRV records specify the location of specific services, such as SIP or LDAP, within a domain.

Understanding DNS is essential for network troubleshooting, server administration, and cybersecurity. Common use cases include verifying that DNS changes have propagated after migrating a website to a new hosting provider, checking that mail records are correctly configured to prevent email delivery issues, auditing DNS security settings such as SPF and DKIM TXT records, and troubleshooting connectivity problems by verifying that a domain resolves to the expected IP address. Our DNS lookup tool performs real-time queries against public DNS servers and returns the raw records exactly as they are published, giving you accurate and up-to-date information for any domain on the internet.

How DNS Resolution Works

When you query a domain, the resolution follows a chain: your recursive resolver contacts a root server, which directs it to the appropriate TLD server (e.g., .com), which in turn directs it to the authoritative name server for the domain. Each step caches the result based on the record’s Time-To-Live (TTL) value. Lower TTLs (300 seconds) are used during migrations so changes propagate quickly, while higher TTLs (86,400 seconds, 24 hours) reduce query load for stable records. The digcommand shows TTL as a numeric column in its output — a value of 300 means the record will be cached for 5 minutes.

DNSSEC (DNS Security Extensions) adds cryptographic signatures to DNS records, allowing resolvers to verify that responses haven’t been tampered with — an important protection against DNS spoofing and cache poisoning attacks. When DNSSEC is enabled, each response includes an RRSIG record containing a digital signature that the resolver validates against the zone’s public key published in the DNSKEY record. Our lookup tool returns the raw records so you can inspect DNSSEC-related records like RRSIG, DNSKEY, and DS directly.