Every DNS record of a domain, in one lookup.
Type a domain or a website address. The lookup asks for every common record type at once and names the network behind each address: the answers nslookup or dig would give, without a terminal.
DNS for wikipedia.org
17 records
A 1 · AAAA 1 · MX 2 · NS 3 · TXT 3 · SOA 1 · CAA 6
AIPv4 addresses, with the network that runs each one.
208.80.153.224 · TTL 46s · Wikimedia Foundation Inc. · AS14907
AAAAIPv6 addresses.
2620:0:860:ed1a::1 · TTL 180s · Wikimedia Foundation Inc. · AS14907
MXThe servers that accept mail for the domain, lowest number first.
10 mx-in1001.wikimedia.org
10 mx-in2001.wikimedia.org
NSThe name servers that hold the domain's records.
ns0.wikimedia.org
ns1.wikimedia.org
ns2.wikimedia.org
TXTText records: SPF, site verification codes and other notes for machines.
google-site-verification=AMHkgs-4ViEvIJf5znZle-BSE2EPNFqM1nDJGRyn2qk
v=spf1 include:_cidrs.wikimedia.org ~all
yandex-verification: 35c08d23099dc863
SOAThe zone's own settings: its primary name server, contact and timers.
ns0.wikimedia.org hostmaster.wikimedia.org · serial 2026060420 · refresh 43200s · retry 7200s · expire 1209600s · minimum 3600s
CAAThe certificate authorities allowed to issue certificates for the domain.
0 type "CAA"
0 issue "pki.goog"
0 type "CAA"
0 iodef "mailto:dns-admin@wikimedia.org"
0 type "CAA"
0 issue "letsencrypt.org"
No CNAME records at wikipedia.org.
Go deeper with the hosting checker, the MX lookup, the SPF checker and the DMARC checker.
Behind every check
- 24.7 million
- IP addresses profiled
- 2.7 million
- malicious domains tracked
- 228,000
- disposable email domains
- 2.3 million
- networks scored
Counts read live from the engine, not written into the page. The full dataset is published on GitHub under the MIT license and rebuilt every 30 minutes.
What each record type does
DNS turns names into the facts machines need: where a site lives, where its mail goes, who may issue its certificates. Each kind of fact has its own record type.
A and AAAA
The IPv4 and IPv6 addresses the name points at.
CNAME
An alias: the name points to another name and takes that name's addresses.
MX
The servers that accept the domain's email, tried lowest number first.
NS
The name servers that hold the domain's records.
TXT
Free text read by machines: SPF, domain verification codes, and DKIM keys under their own names.
SOA
The zone's start of authority: its primary name server, a contact address and the timers secondary servers follow.
CAA
The certificate authorities allowed to issue certificates for the domain.
Why DNS changes take time to show
Every answer carries a TTL, the number of seconds a resolver may keep it. After a change, a resolver that cached the old answer keeps serving it until its TTL runs out, which is why a new record can appear for some people and not yet for others. Lowering the TTL a day before a planned change makes the switch quicker.
The network behind each address
For every A and AAAA record, the lookup names the network that runs the address from FFraud's IP records and links to its full record: whether it sits in a datacenter, belongs to a known proxy or VPN, or has been reported for abuse. A list of numbers becomes an answer about who serves the domain.
Questions people ask.
A query that asks the domain name system for a name's records: its addresses, mail servers, name servers and text records. Type a domain above to run one for every common type at once.
It answers the same questions. nslookup and dig query DNS from a terminal; this page queries it from our servers, shows every common type at once and adds the owner of each address. On your own machine, nslookup -type=MX example.com or dig MX example.com asks for one type.
Resolvers keep answers until their TTL runs out, so after a change some people see the old record and some the new one. Large sites also answer by location and send each region to its nearest servers. This lookup shows what a resolver in the United States sees right now.
Look up the record here and compare it with the value you set. This page shows one resolver's view from the United States; once it shows the new value, resolvers that still hold the old one will follow within the old record's TTL.
That the name publishes none of that type. Most domains have no CAA record, many subdomains have no MX record, and NS and SOA records sit at the top of a zone, so a subdomain usually shows neither.
A CNAME makes a name an alias of another name. The lookup follows it and shows the final name's addresses, the ones a browser actually connects to.
Other free tools.
Who is hosting this website
Find the company that hosts any website, the platform it runs on, and whether a CDN stands in front of it.
OpenMX lookup
See a domain's MX records, the mail service behind them, and whether FFraud lists the domain as disposable.
OpenReverse DNS lookup
Find the PTR record for any address, the network behind it, and what the hostname gives away.
OpenDo it in code.
The same answer from a free API endpoint, with the reason, the recency and the network around the address. Or download the confirmed blocklist for bulk blocking. No card, no quota, no expiry.