About DNS Lookup

Complete DNS lookup tool that queries A, AAAA, MX, TXT, NS, CNAME, and other DNS record types from multiple global DNS servers.

Query DNS records from multiple global locations. Check A, AAAA, MX, TXT, NS, and CNAME records.

Key Features

  • Multiple record types (A, AAAA, MX, TXT, NS, CNAME, SOA, CAA)
  • Multi-region DNS resolution
  • Propagation checking
  • TTL information
  • Reverse DNS lookup

How DNS Lookup Works

ProbeOps DNS Lookup tests from 6 global locations to provide comprehensive results. When you run a check, our probe nodes in US East (Virginia), US West (Oregon), EU Central (Helsinki), AP South (Mumbai), CA Central (Canada), AP Southeast (Sydney) simultaneously query the target to identify regional differences and ensure global accessibility.

Results are returned in real-time with detailed breakdowns per region, allowing you to identify location-specific issues that might affect your users in different geographic areas.

Common Use Cases

  • Verify DNS propagation after making changes
  • Check email authentication records (SPF, DKIM, DMARC)
  • Troubleshoot domain resolution issues
  • Validate CDN and load balancer DNS configuration

Related Tools

You might also find these ProbeOps tools useful for your diagnostics:

Specialized Variants

ProbeOps offers specialized versions of DNS Lookup for specific use cases:

  • MX Record Lookup - Check mail exchange records and verify email server configuration from multiple locations.
  • TXT Record Lookup - Check TXT records for SPF, DKIM, DMARC, and domain verification from multiple locations.
  • NS Record Lookup - Check nameserver records and verify authoritative DNS configuration from multiple locations.
  • CNAME Record Lookup - Check CNAME aliases and verify subdomain configuration from multiple global locations.
  • CAA DNS Record Lookup - Query DNS CAA records to verify which certificate authorities are authorized to issue SSL/TLS certificates for your domain.
  • Reverse DNS Lookup - Look up PTR records to find the hostname associated with an IP address. Essential for email deliverability.

API Access

All ProbeOps tools are available via REST API for automation and integration. The DNS Lookup can be called programmatically from your applications, CI/CD pipelines, or monitoring scripts. See our API documentation for integration guides.

Pricing

DNS Lookup is available on all ProbeOps plans including our free tier. Free users get 100 probes per month with access to 2 regions. Paid plans starting at $19/month include unlimited regions and higher limits. See pricing details.

DNS Lookup Tool

Query DNS records from multiple global locations. Check A, AAAA, MX, TXT, NS, and CNAME records.

Quick select:
What This Checks
Multiple record types (A, AAAA, MX, TXT, NS, CNAME, SOA, CAA)Multi-region DNS resolutionPropagation checkingTTL informationReverse DNS lookup

About DNS Lookup

Complete DNS lookup tool that queries A, AAAA, MX, TXT, NS, CNAME, and other DNS record types from multiple global DNS servers.

Key Features

Multiple record types (A, AAAA, MX, TXT, NS, CNAME, SOA, CAA)

Multi-region DNS resolution

Propagation checking

TTL information

Reverse DNS lookup

Also Available via API & MCP Server

Automate dns lookup checks in your CI/CD pipelines or run them directly from your AI coding agent.

REST API

Single endpoint, JSON response. Integrate into any language or platform.

cURL

curl -X POST https://probeops.com/api/v1/run \
  -H "X-API-Key: YOUR_API_KEY" \
  -H "Content-Type: application/json" \
  -d '{"tool": "dns_lookup", "target": "example.com"}'
Learn more about the API

MCP Server

Works with Claude Code, Cursor, Windsurf, and any MCP-compatible IDE.

Claude Code

> Check the dns lookup for example.com

Claude uses the probeops_dns_lookup tool to run
the check from 6 global regions and returns
structured results.
Learn more about the MCP Server

DNS (Domain Name System) is the backbone of internet navigation, translating human-friendly domain names into the IP addresses that computers use to communicate. Every time you visit a website, send an email, or connect to any online service, DNS queries happen behind the scenes.

Our multi-region DNS lookup tool queries DNS servers from 6+ global locations simultaneously, giving you a comprehensive view of how your domain resolves worldwide. This is essential for verifying DNS propagation after changes, diagnosing regional accessibility issues, and ensuring your DNS configuration is correct across all record types.

Whether you're troubleshooting email delivery problems, verifying a recent DNS migration, or checking that your CDN is properly configured, seeing results from multiple geographic regions helps you identify issues that single-location tools would miss.

**Methodology:** DNS queries to authoritative servers from 6 global regions, supporting A, AAAA, MX, TXT, NS, CNAME, CAA, SOA, and PTR record types.

Common DNS Errors & How to Fix Them

Click to expand troubleshooting steps

What This Means

The domain name does not exist in DNS. This means no DNS records of any type were found for this domain.

How to Fix

1) Verify spelling: dig example.com ANY. 2) Check registration: whois example.com (look for "Status: active"). 3) Verify NS at registrar matches your DNS provider. 4) If recently registered, wait 24-48 hours and test with: dig @8.8.8.8 example.com

nxdomaindomain not foundno such domaindns lookup failed

What This Means

The DNS server encountered an error while processing the query. This often indicates a problem with the authoritative nameservers or DNSSEC validation failure.

How to Fix

1) Trace the query path: dig +trace example.com. 2) Test authoritative NS directly: dig @ns1.yourprovider.com example.com. 3) Check DNSSEC: dig +dnssec example.com (look for "ad" flag). 4) Bypass DNSSEC validation: dig +cd example.com. If +cd works but normal query fails, DNSSEC is broken.

servfailserver failuredns errordnssec

What This Means

The DNS server did not respond within the expected time. This can indicate network issues, overloaded nameservers, or firewall blocking.

How to Fix

1) Test NS connectivity: dig @ns1.example.com example.com +time=10. 2) Check if NS responds: nslookup example.com ns1.yourprovider.com. 3) Verify UDP port 53: nc -vzu ns1.example.com 53. 4) Test from different resolver: dig @1.1.1.1 example.com. If public resolvers work, your NS may be overloaded or blocking.

timeoutno responsedns slowconnection timeout

What This Means

The domain exists but has no records of the requested type. For example, querying MX records for a domain that only has A records.

How to Fix

1) Confirm record type exists: dig example.com MX +short. 2) Check all records: dig example.com ANY. 3) Query authoritative NS: dig @ns1.yourprovider.com example.com MX. 4) For MX, verify mail is configured in your DNS panel. For AAAA, IPv6 may not be configured (this is often intentional).

no recordsempty responsemissing record

What This Means

Different DNS resolvers are returning different values for the same query. This typically occurs during DNS propagation after a recent change.

How to Fix

1) Compare resolvers: dig @8.8.8.8 example.com vs dig @1.1.1.1 example.com vs dig @9.9.9.9 example.com. 2) Check TTL: dig example.com +ttlunits (lower = faster propagation). 3) Check authoritative: dig @ns1.yourprovider.com example.com (should show new value). 4) Wait for old TTL to expire, or pre-lower TTL before changes.

propagationinconsistentdifferent resultsdns not updated

What This Means

The DNS server refused to answer the query. This can happen when querying a server that doesn't serve the requested zone or has access restrictions.

How to Fix

1) Find correct NS: dig NS example.com +short. 2) Query the listed NS: dig @ns1.listed-server.com example.com. 3) If using custom NS, verify zone is configured: check DNS provider dashboard. 4) Some NS refuse queries from certain IPs (rate limiting)—try from different network.

refusedquery refusedaccess denied

What This Means

The CNAME record points to another CNAME, creating a chain that's too long or creates a circular reference. Most resolvers limit CNAME chains to 8-16 hops.

How to Fix

1) Trace the CNAME chain: dig +trace example.com CNAME. 2) Check each hop: dig alias1.example.com CNAME, then dig alias2.example.com CNAME. 3) Ensure chain ends at A/AAAA: the final target must have an A or AAAA record. 4) Simplify by pointing directly to final target or using A record instead.

cname loopcname chaintoo many redirects

What This Means

The DNSSEC signatures for this domain are invalid or expired. DNSSEC-validating resolvers will refuse to return results for domains with broken DNSSEC.

How to Fix

1) Diagnose DNSSEC: dig +dnssec +cd example.com (cd=check disabled). 2) Check DS record at registrar: dig DS example.com. 3) Verify DNSKEY: dig DNSKEY example.com. 4) DS must match DNSKEY—use dnsviz.net for visual analysis. 5) To disable: remove DS records from registrar (takes 24-48h to propagate).

dnssecsignature expiredvalidation failedbogus

Frequently Asked Questions

DNS essentials explained

DNS (Domain Name System) is the internet's phone book—it translates human-readable domain names like "example.com" into IP addresses that computers use to communicate. Without DNS, you'd need to memorize IP addresses for every website. DNS is critical for website accessibility, email delivery, and virtually all internet services. A misconfigured DNS can make your website unreachable or cause email to bounce.

generalbeginner

DNS propagation is the time it takes for DNS changes to spread across all DNS servers worldwide. When you update a DNS record, the change must propagate from your authoritative nameserver to DNS resolvers globally. Propagation typically takes 1-24 hours, though it can take up to 48 hours in rare cases. The actual time depends on the TTL (Time To Live) value of your records—lower TTLs mean faster propagation but more DNS queries to your servers.

generalpropagation

TTL (Time To Live) tells DNS resolvers how long to cache a record before checking for updates. A TTL of 3600 means resolvers cache the record for 1 hour. For stable records, use higher TTLs (3600-86400 seconds) to reduce DNS queries and improve performance. Before making changes, lower your TTL to 300-600 seconds a day in advance, make your changes, then restore the higher TTL. This minimizes downtime during DNS changes.

generalttl

DNS resolvers in different geographic regions may have different cached values, especially during propagation. Checking from multiple regions helps you verify that your DNS changes have fully propagated worldwide, identify regional DNS issues, and ensure consistent resolution for global users. This is particularly important for CDN configurations, geo-targeted services, and diagnosing "works for me but not for users in X country" problems.

generalregionspropagation

An A (Address) record maps a domain name to an IPv4 address. It's the most fundamental DNS record type—when someone visits your website, their browser queries the A record to find your server's IP address. You can have multiple A records for the same domain to enable load balancing or failover. For IPv6 addresses, you'd use an AAAA record instead.

a-recordbasics

MX (Mail Exchange) records specify which mail servers handle email for your domain. Each MX record has a priority value—lower numbers mean higher priority. When sending email to your domain, mail servers try the lowest priority MX first, falling back to higher priority servers if needed. For example, with priorities 10 and 20, mail goes to priority 10 first; if it's unavailable, priority 20 handles the mail.

mxemail

TXT records store text data in DNS and are used for domain verification (Google, Microsoft, SSL certificates), email authentication (SPF, DKIM, DMARC), and security policies. When you add a Google Search Console verification or configure SPF for email, you're adding TXT records. They're also used for DKIM signatures, DMARC policies, and various third-party service verifications.

txtverification

NS (Name Server) records specify which DNS servers are authoritative for your domain—meaning they hold the master copies of your DNS records. When you register a domain or change DNS providers, you update NS records to point to your DNS host. Most domains have 2-4 NS records for redundancy. If all your nameservers go down, your domain becomes completely unreachable.

nsnameserver

A CNAME (Canonical Name) record creates an alias from one domain to another. Instead of an IP address, it points to another domain name. For example, "www.example.com" might CNAME to "example.com" or to a CDN like "example.cloudfront.net". CNAMEs are useful for subdomains and CDN setups, but you cannot use a CNAME at the root domain (apex) alongside other records.

cnamealias

Global Infrastructure Verification

Verify SSL certificates, DNS records, and connectivity from 6+ regions worldwide.

Last updated: January 27, 2026