Network Tools

DNS Lookup Tool

Query DNS records for any domain — A, AAAA, CNAME, MX, NS, TXT, SOA, SRV, and PTR. Results include TTL values and all answers for the selected record type.

9 Record Types
A / AAAA / MX / TXT / CNAME
NS / SOA / SRV / PTR
TTL Values
Instant Lookup

Domain

Record type

Enter a domain and select record type

How Domain Name System (DNS) Resolution Works

The Domain Name System (DNS) operates as the phonebook of the internet, translating human-friendly domain names (such as besttoolonline.com) into machine-routable IP addresses (such as 104.21.55.2 or 2606:4700::). Understanding DNS record types and propagation latency is crucial for web developers deploying new servers, configuring email security, and troubleshooting network connectivity.

Primary DNS Record Types

Record Type	Full Name	Standard Purpose
A	Address Record	Maps a domain name to an IPv4 address (e.g., `192.0.2.1`)
AAAA	IPv6 Address Record	Maps a domain name to a 128-bit IPv6 address
CNAME	Canonical Name	Aliases one domain name to another canonical hostname
MX	Mail Exchange	Directs email to responsible mail servers with priority rankings
TXT	Text Record	Stores human/machine text; used for SPF, DKIM, and site verification
NS	Name Server	Delegates a DNS zone to authoritative name servers
SOA	Start of Authority	Contains administrative zone parameters, TTLs, and serial numbers
PTR	Pointer Record	Maps an IP address back to a hostname (Reverse DNS lookup)

DNS Propagation & Time-to-Live (TTL)

When you update a DNS record, changes are not instantaneous across the globe. Authoritative DNS records specify a Time-to-Live (TTL) in seconds. Recursive DNS resolvers (such as Google 8.8.8.8 or Cloudflare 1.1.1.1) cache the record locally for the duration of the TTL before re-querying the authoritative name server.

Low TTL (300s / 5 min): Recommended immediately prior to server migrations to ensure rapid cutover.
Standard TTL (86400s / 24 hrs): Recommended for stable, static infrastructure to reduce DNS latency.

Performing DNS Lookups via CLI

Inspect records from the terminal using standard utilities:

# Query A records using dig
dig besttoolonline.com A +short

# Query MX records
dig besttoolonline.com MX

# Check TXT records for SPF/DKIM validation
dig besttoolonline.com TXT +short

# Cross-platform nslookup command
nslookup -type=any besttoolonline.com

DNS Caching, Anycast Routing & Delegation

Anycast BGP Routing: Authoritative DNS services (Cloudflare, Route 53) use Anycast routing to broadcast identical IP addresses globally, directing queries to the nearest geographic datacentre.
Recursive vs Authoritative Resolvers: Authoritative servers hold the official DNS zone records, while recursive resolvers query authoritative servers on behalf of client devices and cache the results.
DNSSEC (Domain Name System Security Extensions): Cryptographically signs DNS records using public key cryptography to eliminate DNS cache poisoning and spoofing attacks.

Frequently Asked Questions

What is the purpose of DNS Time-to-Live (TTL)?: TTL defines the duration in seconds that intermediate DNS resolvers are permitted to cache a record locally before re-querying authoritative name servers. Shorter TTLs allow rapid record propagation during migrations, while longer TTLs reduce network lookup latency.
Why are TXT records used for email authentication standards like SPF and DKIM?: TXT records store arbitrary text in DNS zones. Email providers query these records to verify whether sending mail servers are authorized by the domain owner (SPF) and to validate cryptographic public keys on signed messages (DKIM).
Which DNS record types are supported?: A, AAAA, CNAME, MX, TXT, NS, SOA, PTR, and SRV records are supported.
Which DNS server is queried?: The tool uses the Google Public DNS API (dns.google) for reliable, globally accessible queries.
What is an A record?: An A record maps a domain name to an IPv4 address. It is the most fundamental DNS record type.
What is a TXT record used for?: TXT records are used for domain verification, SPF (email sender policy), DKIM (email signing), and DMARC (email authentication).

Accuracy & Advisory Notice: DNS Lookup Tool

This website and utility are provided for general informational, calculation, and educational purposes only. Always verify critical computation outputs prior to professional deployment or financial use. See our Terms of Service and Privacy Policy for full governance details.

Loading tool...

How Domain Name System (DNS) Resolution Works

Primary DNS Record Types

Record Type

Full Name

Standard Purpose

Address Record

Maps a domain name to an IPv4 address (e.g., 192.0.2.1)

AAAA

IPv6 Address Record

Maps a domain name to a 128-bit IPv6 address

CNAME

Canonical Name

Aliases one domain name to another canonical hostname

Mail Exchange

Directs email to responsible mail servers with priority rankings

TXT

Text Record

Stores human/machine text; used for SPF, DKIM, and site verification

Name Server

Delegates a DNS zone to authoritative name servers

SOA

Start of Authority

Contains administrative zone parameters, TTLs, and serial numbers

PTR

Pointer Record

Maps an IP address back to a hostname (Reverse DNS lookup)

DNS Propagation & Time-to-Live (TTL)

Low TTL (300s / 5 min): Recommended immediately prior to server migrations to ensure rapid cutover.

Standard TTL (86400s / 24 hrs): Recommended for stable, static infrastructure to reduce DNS latency.

Performing DNS Lookups via CLI

Inspect records from the terminal using standard utilities:

# Query A records using dig dig besttoolonline.com A +short # Query MX records dig besttoolonline.com MX # Check TXT records for SPF/DKIM validation dig besttoolonline.com TXT +short # Cross-platform nslookup command nslookup -type=any besttoolonline.com

DNS Caching, Anycast Routing & Delegation

Anycast BGP Routing: Authoritative DNS services (Cloudflare, Route 53) use Anycast routing to broadcast identical IP addresses globally, directing queries to the nearest geographic datacentre.

Recursive vs Authoritative Resolvers: Authoritative servers hold the official DNS zone records, while recursive resolvers query authoritative servers on behalf of client devices and cache the results.

DNSSEC (Domain Name System Security Extensions): Cryptographically signs DNS records using public key cryptography to eliminate DNS cache poisoning and spoofing attacks.

Frequently Asked Questions

What is the purpose of DNS Time-to-Live (TTL)?

TTL defines the duration in seconds that intermediate DNS resolvers are permitted to cache a record locally before re-querying authoritative name servers. Shorter TTLs allow rapid record propagation during migrations, while longer TTLs reduce network lookup latency.

Why are TXT records used for email authentication standards like SPF and DKIM?

TXT records store arbitrary text in DNS zones. Email providers query these records to verify whether sending mail servers are authorized by the domain owner (SPF) and to validate cryptographic public keys on signed messages (DKIM).

Which DNS record types are supported?

A, AAAA, CNAME, MX, TXT, NS, SOA, PTR, and SRV records are supported.

Which DNS server is queried?

The tool uses the Google Public DNS API (dns.google) for reliable, globally accessible queries.

What is an A record?

An A record maps a domain name to an IPv4 address. It is the most fundamental DNS record type.

What is a TXT record used for?

TXT records are used for domain verification, SPF (email sender policy), DKIM (email signing), and DMARC (email authentication).