DNS lookup.
Query a domain's A, AAAA, MX, TXT, NS, SOA, CNAME, CAA and DS records
in parallel. Like dig,
but in your browser, in one click.
What this checks
A / AAAA — IPv4 / IPv6 addresses the domain resolves to. The actual hosts that answer when someone visits the site.
MX — mail exchanger records. Which mail servers receive email for this domain, and in what priority order.
TXT — free-form text records. This is where SPF, DMARC verification keys, domain ownership proofs and dozens of vendor-specific tags live. Often the noisiest record type and a goldmine for understanding how a domain is set up.
NS / SOA — authoritative nameservers and the primary zone metadata (serial, TTLs, refresh). Tells you who runs DNS for the domain and when the zone was last updated.
CNAME — canonical-name
aliases. Common on subdomains like
www
pointing to a CDN or load balancer.
CAA — Certification Authority Authorization. Restricts which CAs can issue TLS certs for the domain. A missing CAA record means any CA may issue — which is fine for most, but high-security setups should pin to specific CAs.
DS — DNSSEC delegation signer. If you see DS records, DNSSEC is enabled at the parent zone and the chain of trust is at least partially configured.
Privacy
Lookups happen in your browser via Cloudflare's public DNS-over-HTTPS endpoint. Edos Solutions doesn't log the domains you check, doesn't run any analytics on this page, and doesn't capture your IP.
Frequently asked questions
- What is a DNS lookup?
- A DNS lookup queries the Domain Name System to retrieve records associated with a domain — IP addresses, mail servers, authoritative nameservers, cryptographic keys, and other configuration. This tool queries nine record types simultaneously, the same way a mail server or browser would, and shows you the raw results with TTLs.
- What record types does this tool check?
- A (IPv4 address), AAAA (IPv6 address), MX (mail servers), TXT (free-form records including SPF and DMARC), NS (authoritative nameservers), SOA (zone metadata), CNAME (aliases), CAA (certificate authority restrictions), and DS (DNSSEC delegation signer). All nine are queried in parallel.
- What is TTL in DNS?
- TTL (Time to Live) is the number of seconds resolvers are allowed to cache a DNS record. A TTL of 300 means resolvers cache the answer for 5 minutes before re-querying. Short TTLs (60–300s) make changes propagate quickly but increase DNS query load. Long TTLs (3600–86400s) are more efficient but mean changes take longer to reach the internet.
- Why are my DNS changes slow to propagate?
- DNS propagation is bounded by TTL. If your record had a TTL of 3600 before you made the change, resolvers that cached the old answer won't re-query for up to an hour. The global propagation window is roughly equal to the old record's TTL. To speed up future changes, lower the TTL to 300 before making the change, wait for the old TTL to expire, then make the change.