CloudSpex

Free DNS tool

DNS Lookup

See the DNS records a domain publishes right now: A, AAAA, CNAME, MX, NS, TXT, SOA, SRV and CAA, with their TTLs. Enter an IP address to see its reverse DNS (PTR) record.

Instant result, no email needed.

Every answer is labelled

Each record type gets its own result: the records found, no record of that type, the name does not exist (NXDOMAIN), or the resolver could not answer. A lookup that failed is never shown as a missing record. If the name is an alias, the CNAME chain is shown so you can see where the value really comes from.

This shows what a public resolver sees. To check whether every nameserver gives the same answer, use the Nameserver Checker; to check signing, the DNSSEC Checker; for an overall verdict on resolution, the DNS Health Check.

Frequently asked questions

Which resolver answers the lookup?

CloudSpex asks Google Public DNS (dns.google) over DNS-over-HTTPS and falls back to Cloudflare (cloudflare-dns.com) only if Google cannot be reached. The report names the resolver that answered. Because it is a cached public resolver, a record you changed a few minutes ago may still show its old value until the TTL runs out.

What does TTL mean?

TTL (time to live) is how many seconds a resolver may keep the answer in its cache. A cached answer shows the time remaining, so the same record can show a lower TTL than the one you configured.

Why does an IP address show a PTR record?

Looking up an IP address asks for its reverse DNS (PTR) record under in-addr.arpa or ip6.arpa. Mail servers often check that a sending IP has a PTR record and that it matches the server name.

How do I look up an SRV record?

Enter the full service name, for example _sip._tcp.example.com, and choose SRV. SRV records live under a service and protocol label, not on the bare domain.

What is the difference between "no record" and "could not be read"?

No record means the resolver answered and the name has no record of that type. Could not be read means the resolver did not give a usable answer (a timeout or an error); CloudSpex does not treat that as missing.

DNS records change quietly: a migration, a new mail provider, an expired verification.

Add your domain to CloudSpex to be told when its DNS records change.

Start Monitoring Free