DNS Lookup Tool

Query DNS records from multiple global locations. Check A, AAAA, MX, TXT, NS, and CNAME records.

Quick select:
A
AAAA
CNAME
MX
TXT
NS
SOA
CAA
PTR
What This Checks
Multiple record types (A, AAAA, MX, TXT, NS, CNAME, SOA, CAA)
Multi-region DNS resolution
Propagation checking
TTL information
Reverse DNS lookup

About DNS Lookup

Complete DNS lookup tool that queries A, AAAA, MX, TXT, NS, CNAME, and other DNS record types from multiple global DNS servers.

Key Features

Multiple record types (A, AAAA, MX, TXT, NS, CNAME, SOA, CAA)

Multi-region DNS resolution

Propagation checking

TTL information

Reverse DNS lookup

DNS (Domain Name System) is the backbone of internet navigation, translating human-friendly domain names into the IP addresses that computers use to communicate. Every time you visit a website, send an email, or connect to any online service, DNS queries happen behind the scenes.

Our multi-region DNS lookup tool queries DNS servers from 6+ global locations simultaneously, giving you a comprehensive view of how your domain resolves worldwide. This is essential for verifying DNS propagation after changes, diagnosing regional accessibility issues, and ensuring your DNS configuration is correct across all record types.

Whether you're troubleshooting email delivery problems, verifying a recent DNS migration, or checking that your CDN is properly configured, seeing results from multiple geographic regions helps you identify issues that single-location tools would miss.

**Methodology:** DNS queries to authoritative servers from 6 global regions, supporting A, AAAA, MX, TXT, NS, CNAME, CAA, SOA, and PTR record types.

Common DNS Errors & How to Fix Them

Click to expand troubleshooting steps

What This Means

The domain name does not exist in DNS. This means no DNS records of any type were found for this domain.

How to Fix

1) Verify spelling: dig example.com ANY. 2) Check registration: whois example.com (look for "Status: active"). 3) Verify NS at registrar matches your DNS provider. 4) If recently registered, wait 24-48 hours and test with: dig @8.8.8.8 example.com

nxdomain
domain not found
no such domain
dns lookup failed

What This Means

The DNS server encountered an error while processing the query. This often indicates a problem with the authoritative nameservers or DNSSEC validation failure.

How to Fix

1) Trace the query path: dig +trace example.com. 2) Test authoritative NS directly: dig @ns1.yourprovider.com example.com. 3) Check DNSSEC: dig +dnssec example.com (look for "ad" flag). 4) Bypass DNSSEC validation: dig +cd example.com. If +cd works but normal query fails, DNSSEC is broken.

servfail
server failure
dns error
dnssec

What This Means

The DNS server did not respond within the expected time. This can indicate network issues, overloaded nameservers, or firewall blocking.

How to Fix

1) Test NS connectivity: dig @ns1.example.com example.com +time=10. 2) Check if NS responds: nslookup example.com ns1.yourprovider.com. 3) Verify UDP port 53: nc -vzu ns1.example.com 53. 4) Test from different resolver: dig @1.1.1.1 example.com. If public resolvers work, your NS may be overloaded or blocking.

timeout
no response
dns slow
connection timeout

What This Means

The domain exists but has no records of the requested type. For example, querying MX records for a domain that only has A records.

How to Fix

1) Confirm record type exists: dig example.com MX +short. 2) Check all records: dig example.com ANY. 3) Query authoritative NS: dig @ns1.yourprovider.com example.com MX. 4) For MX, verify mail is configured in your DNS panel. For AAAA, IPv6 may not be configured (this is often intentional).

no records
empty response
missing record

What This Means

Different DNS resolvers are returning different values for the same query. This typically occurs during DNS propagation after a recent change.

How to Fix

1) Compare resolvers: dig @8.8.8.8 example.com vs dig @1.1.1.1 example.com vs dig @9.9.9.9 example.com. 2) Check TTL: dig example.com +ttlunits (lower = faster propagation). 3) Check authoritative: dig @ns1.yourprovider.com example.com (should show new value). 4) Wait for old TTL to expire, or pre-lower TTL before changes.

propagation
inconsistent
different results
dns not updated

What This Means

The DNS server refused to answer the query. This can happen when querying a server that doesn't serve the requested zone or has access restrictions.

How to Fix

1) Find correct NS: dig NS example.com +short. 2) Query the listed NS: dig @ns1.listed-server.com example.com. 3) If using custom NS, verify zone is configured: check DNS provider dashboard. 4) Some NS refuse queries from certain IPs (rate limiting)—try from different network.

refused
query refused
access denied

What This Means

The CNAME record points to another CNAME, creating a chain that's too long or creates a circular reference. Most resolvers limit CNAME chains to 8-16 hops.

How to Fix

1) Trace the CNAME chain: dig +trace example.com CNAME. 2) Check each hop: dig alias1.example.com CNAME, then dig alias2.example.com CNAME. 3) Ensure chain ends at A/AAAA: the final target must have an A or AAAA record. 4) Simplify by pointing directly to final target or using A record instead.

cname loop
cname chain
too many redirects

What This Means

The DNSSEC signatures for this domain are invalid or expired. DNSSEC-validating resolvers will refuse to return results for domains with broken DNSSEC.

How to Fix

1) Diagnose DNSSEC: dig +dnssec +cd example.com (cd=check disabled). 2) Check DS record at registrar: dig DS example.com. 3) Verify DNSKEY: dig DNSKEY example.com. 4) DS must match DNSKEY—use dnsviz.net for visual analysis. 5) To disable: remove DS records from registrar (takes 24-48h to propagate).

dnssec
signature expired
validation failed
bogus

Frequently Asked Questions

DNS essentials explained

DNS (Domain Name System) is the internet's phone book—it translates human-readable domain names like "example.com" into IP addresses that computers use to communicate. Without DNS, you'd need to memorize IP addresses for every website. DNS is critical for website accessibility, email delivery, and virtually all internet services. A misconfigured DNS can make your website unreachable or cause email to bounce.

general
beginner

DNS propagation is the time it takes for DNS changes to spread across all DNS servers worldwide. When you update a DNS record, the change must propagate from your authoritative nameserver to DNS resolvers globally. Propagation typically takes 1-24 hours, though it can take up to 48 hours in rare cases. The actual time depends on the TTL (Time To Live) value of your records—lower TTLs mean faster propagation but more DNS queries to your servers.

general
propagation

TTL (Time To Live) tells DNS resolvers how long to cache a record before checking for updates. A TTL of 3600 means resolvers cache the record for 1 hour. For stable records, use higher TTLs (3600-86400 seconds) to reduce DNS queries and improve performance. Before making changes, lower your TTL to 300-600 seconds a day in advance, make your changes, then restore the higher TTL. This minimizes downtime during DNS changes.

general
ttl

DNS resolvers in different geographic regions may have different cached values, especially during propagation. Checking from multiple regions helps you verify that your DNS changes have fully propagated worldwide, identify regional DNS issues, and ensure consistent resolution for global users. This is particularly important for CDN configurations, geo-targeted services, and diagnosing "works for me but not for users in X country" problems.

general
regions
propagation

An A (Address) record maps a domain name to an IPv4 address. It's the most fundamental DNS record type—when someone visits your website, their browser queries the A record to find your server's IP address. You can have multiple A records for the same domain to enable load balancing or failover. For IPv6 addresses, you'd use an AAAA record instead.

a-record
basics

MX (Mail Exchange) records specify which mail servers handle email for your domain. Each MX record has a priority value—lower numbers mean higher priority. When sending email to your domain, mail servers try the lowest priority MX first, falling back to higher priority servers if needed. For example, with priorities 10 and 20, mail goes to priority 10 first; if it's unavailable, priority 20 handles the mail.

mx
email

TXT records store text data in DNS and are used for domain verification (Google, Microsoft, SSL certificates), email authentication (SPF, DKIM, DMARC), and security policies. When you add a Google Search Console verification or configure SPF for email, you're adding TXT records. They're also used for DKIM signatures, DMARC policies, and various third-party service verifications.

txt
verification

NS (Name Server) records specify which DNS servers are authoritative for your domain—meaning they hold the master copies of your DNS records. When you register a domain or change DNS providers, you update NS records to point to your DNS host. Most domains have 2-4 NS records for redundancy. If all your nameservers go down, your domain becomes completely unreachable.

ns
nameserver

A CNAME (Canonical Name) record creates an alias from one domain to another. Instead of an IP address, it points to another domain name. For example, "www.example.com" might CNAME to "example.com" or to a CDN like "example.cloudfront.net". CNAMEs are useful for subdomains and CDN setups, but you cannot use a CNAME at the root domain (apex) alongside other records.

cname
alias

Global Infrastructure Verification

Verify SSL certificates, DNS records, and connectivity from 6+ regions worldwide. Get automated monitoring, expiry alerts, and full API access.

Last updated: January 27, 2026