DNS Record Checker: see where your domain points
See where your domain points: A, CNAME, MX, TXT, NS, CAA and SOA records, explained in plain words.
- Free to use
- Nothing to install
- No sign-up
Want an expert to check this result?
Send it to us in one click. We read it and reply within one business day with what we would fix first.
About the DNS Record Checker
Enter your domain, for example smilestudio.example. We read its public DNS records (A, AAAA, CNAME, MX, TXT, NS, CAA and SOA, plus the www name and the DMARC record) and explain them: where your website points, whether www and the bare domain lead to the same place, which mail service and DNS host the host names suggest, what each TXT record is for, and which certificate authorities may issue certificates for you. We only read DNS: nothing connects to the addresses we find, and private addresses are flagged as unreachable. For SPF, DKIM and DMARC in depth, use the Email Deliverability Checker.
How it works
-
Step 1
Enter your domain, or any page or email address on it, such as smilestudio.example.
-
Step 2
We read the public DNS records of the domain and its www name, and explain each one.
-
Step 3
Fix what is flagged at your DNS host, then check again once the old records' time to live (TTL) has passed.
What the main records do
An A record (IPv4) or AAAA record (IPv6) holds your server's address. A CNAME makes one name an alias of another. MX records say where email for the domain is delivered, NS records name the servers that answer for it, TXT records hold text such as SPF and verification codes, CAA records say which certificate authorities may issue certificates, and the SOA record holds the zone's primary server and timers. RFC 1034 says no other record should sit beside a CNAME, so the bare domain, which needs SOA and NS records, should not be a CNAME.
Verification and certificate records
Search Console verifies a Domain property only through a DNS TXT record that looks like google-site-verification=…, and Search Console Help says to keep it: verification lasts only while Google can find it. Without CAA records any public certificate authority may issue certificates for your domain once it checks you control it; with them, only the ones named can. Let's Encrypt's value is letsencrypt.org.
What this tool cannot do
It asks our server's DNS resolver once, so a change you have just made may not show yet, and other networks may see old records until their time to live runs out. DNS cannot list every subdomain, so we read only the domain, www and _dmarc. Mail service, DNS host and platform names come from patterns in host names (our pattern match), not from the companies. It does not check DKIM keys or count SPF lookups: the Email Deliverability Checker does.
Frequently asked questions
How do I check where my domain points?
Enter it above. The result shows the A and AAAA records (the server addresses), any CNAME (an alias of another host name), and whether www points to the same place. If a CNAME ends in a known platform's name, such as myshopify.com or github.io, we name the platform; that is our pattern match.
Why does my site open with www but not without it?
The bare domain probably has no A record, or one that points to an old server. Add an A record for the bare domain (host "@") with your host's address, keep a CNAME for www, and redirect one name to the other with a 301. Do not put a CNAME on the bare domain itself: use an A record there, or your DNS host's ALIAS or CNAME flattening option.
What is a TXT record used for?
It holds text that other services read: SPF, which lists the servers allowed to send email for you; DMARC, at _dmarc; and verification codes from Google and other services. Search Console Help says to keep your Google verification record after verifying. The result explains each TXT record we find.
Do I need a CAA record?
No. Without one, any public certificate authority may issue certificates for your domain once it checks you control it. With one, only the authorities you name can, for example 0 issue "letsencrypt.org". If you add one, include the authority that issues your current certificate, or its next renewal fails.
Why do I still see old records after changing my DNS?
Each record has a time to live (TTL), shown in seconds in the result: resolvers may keep a copy for that long before asking again. Until it passes, some networks still get the old answer. Lower the TTL a day before a planned move, and check again later.
Related reading
Rather have us do it for you?
Tell us about your business and what you want to fix. We reply within one business day.
Talk to us Our service: Technical SEO servicesMore free tools
All tools- Website SEO Audit Crawl up to 50 pages and get a health score, every issue and a 30-day plan.
- Redirect Checker Trace 301/302 redirects, chains and loops to the final URL.
- Robots.txt Tester Test a URL against robots.txt and see which rule blocks or allows it.
- AI Bot Log Analyzer See how AI crawlers crawl your site from your server access log.
Want us to fix what the tool found?
Tell us about your business and what you want to grow. We reply within one business day with next steps, not a sales script.
- A reply within one business day
- A quick look at your site and search visibility before we talk
- Your details are only used to answer your enquiry