10 record types · live, with TTLs
See a domain's DNS records.
A, AAAA, MX, NS, TXT, SOA and CAA records, read live with their TTLs.
What gets looked up
10 record types, read live, each with the TTL it was served with.
A
The IPv4 address the name points at, which is where the site is hosted.
AAAA
The IPv6 address, where one is published.
CNAME
An alias: this name is an alias for another one.
MX
Where mail for this domain is delivered. The number is the priority, and lower wins.
DMARC
The policy at _dmarc telling receivers what to do with mail that fails SPF and DKIM — and where to send reports about it.
MTA-STS
The record at _mta-sts announcing that mail servers must use TLS to deliver here, and pointing at the policy that says so.
NS
The nameservers the domain is delegated to, the ones that answer DNS questions about it.
TXT
Free-form text. In practice: SPF and DKIM mail policy, and ownership verification for other services.
SOA
The zone's start of authority: the primary nameserver, the contact, and the timers.
CAA
Which certificate authorities may issue TLS certificates for this domain.
About the TTL
The number beside each record, and the answer to most DNS questions.
A TTL is how long a resolver may keep an answer before asking again. A record served with a one-hour TTL can go on returning the old value for an hour after you change it, which is why a change that looks broken is usually a change that has not expired yet.
What this page shows is the cached view most of the internet gets, which is what you want when checking whether a change has actually propagated.
Questions
What do these record types do?
A and AAAA point the name at an IPv4 and IPv6 address, which is where the site is hosted. MX says where mail for the domain is delivered, lowest priority number first. NS names the nameservers the domain is delegated to. TXT is free-form text, used in practice for SPF and DKIM mail policy and for proving ownership to other services. CNAME makes the name an alias for another. SOA carries the zone's own timers. CAA restricts which certificate authorities may issue TLS certificates for the domain.
I just changed a record and it still shows the old value.
That is the TTL, shown next to every record. It is the number of seconds a resolver is allowed to keep an answer before asking again, so a record with a one-hour TTL can serve the old value for up to an hour after you change it. Lower the TTL before you plan a change, not after. What you see here is what the rest of the internet sees, rather than what your registrar's control panel says.
Why does it say a record type could not be read instead of showing nothing?
Because those are different answers and only one of them is about your domain. An empty list means the zone genuinely publishes no records of that type. A lookup that failed means we do not know. Collapsing the second into the first would tell you your mail is unconfigured when in fact the query timed out, so a failed record type stays on the page and says so.
The domain does not exist here but WHOIS says it is registered.
Both can be true. Registration and DNS are separate systems: a name can be registered with no nameservers ever set, or held by somebody who never published a zone. NXDOMAIN means no DNS entry, not no owner. WHOIS is the lookup that answers the ownership question.
Is this the same as running dig?
Close. You see the cached, recursive view most of the internet gets, which is usually what you want when checking whether a change has propagated. For the authoritative answer with no cache in between, query the nameservers in the NS record directly.
DNS says how a domain is configured, not who holds it. The Whois lookup answers that, and domain search checks one name across every extension at once.