Your DNS.
A clearer view.
Inspect public DNS records for domains around the world. Compare resolver answers for your website, email and domain settings in one clear view.
Check your DNS records.
Requesting DNS replies from the selected public resolvers…
20 checks per connection within 15 minutes. A countdown appears if you reach the limit.
| Record | Record value | TTL / resolver | Action |
|---|
DNSSEC labels reflect the resolver’s authenticated-data flag for each reply. “Not confirmed” does not mean a record is invalid.
The response includes the original DNS reply fields, answer values and authority sections returned by the resolver services.
A comparison of selected public resolvers at the time shown. These are not geographic test locations or proof of worldwide propagation. Cached TTLs and legitimate routing differences can produce different replies.
For domains worldwide
Look up African, international and internationalised domain names, including subdomains and service records.
Compare what comes back
See the values returned by Google and Cloudflare, with resolver-specific TTLs and reply details.
Share a useful result
Copy individual records or export the snapshot to help your team investigate domain and email settings.
Clear answers.
Better decisions.
A record lookup gives you evidence to work with, whether you’re setting up a website, email or a domain.
Talk to our support teamWhich record type should I choose?
A and AAAA show IPv4 and IPv6 addresses. MX shows mail servers, NS shows name servers, CNAME shows aliases, and TXT often contains verification and email-policy data. SOA, CAA, SRV, PTR, DS and DNSKEY are also supported. “All records” checks all 12 supported types for the name you enter and shows the returned records together. To check records at another subdomain, enter that subdomain’s name.
Does a match mean my DNS has propagated everywhere?
No. Matching answer sets mean the selected Google and Cloudflare replies matched for these queries. They are public resolver services reached from the checking server, not test probes in every country. Other caches and geographic routing can return different values.
Why do the TTLs or answer values differ?
TTL is the remaining cache lifetime returned by a resolver, in seconds. Two resolvers may have cached an answer at different times. DNS routing and load balancing can also produce legitimate answer differences. This tool excludes TTL differences from the answer-set comparison.
Does “no data” mean the domain is broken?
No. A domain may have no record of the selected type. NXDOMAIN means that the queried name was not found, while SERVFAIL means a resolver could not complete the lookup. A timeout or unavailable resolver is a separate outcome.
Can I check SPF, DKIM and DMARC?
Choose TXT and enter the exact record name. SPF is commonly published on the domain; DMARC uses a name such as _dmarc.example.com, and DKIM uses a selector beneath _domainkey. The tool displays public TXT values; it does not certify that an email policy is correctly configured.
What does the DNSSEC label tell me?
“Validated” means the resolver reported authenticated data for that reply. “Not confirmed” means that flag was not set and does not, by itself, prove the DNS data is invalid or that DNSSEC is broken.
How do I check reverse DNS?
Choose PTR and enter a public IPv4 or IPv6 address. The checker creates the appropriate reverse DNS name automatically. You can also enter an existing in-addr.arpa or ip6.arpa record name.