DNS translates names such as example.com into records that computers use. This lookup can inspect common record types including A, AAAA, MX, TXT, NS, CNAME, and SOA.

What the main record types mean

  • A maps a hostname to an IPv4 address.
  • AAAA maps it to IPv6.
  • MX identifies mail servers.
  • TXT carries text data used by systems such as SPF, DKIM verification, and site ownership checks.
  • NS identifies authoritative name servers.
  • CNAME aliases one hostname to another.
  • SOA contains authority and zone timing information.

Why DNS changes take time

Resolvers cache records according to TTL values, so changing a record at the authoritative provider does not instantly remove every cached copy. During a migration, two users can temporarily receive different answers.

Troubleshooting tip

When a website or mail service is failing, compare the record you intended to publish with the record actually returned. For email-specific records, the Email Authentication Checker provides more interpretation.

How to use this tool as evidence, not as a score

This tool is designed for published DNS records and resolver troubleshooting. Run the check, record the exact input/result and compare it with the configuration you expected. A single result is most useful when it answers a specific troubleshooting question.

How to interpret the result

Compare A/AAAA, MX, TXT, NS, CNAME and SOA records with the intended DNS design. TTL explains how long cached data may persist.

Important limitation

A correct DNS record does not prove the web/mail service behind it is healthy, and recursive caches can temporarily differ.

A practical troubleshooting workflow

  1. State the symptom and expected result before testing.
  2. Run the tool once without changing configuration.
  3. Change only one relevant variable—such as VPN state, DNS record, router rule or URL.
  4. Run the same test again and compare.
  5. Confirm the finding with the system/provider/vendor tool closest to the source of truth.

This avoids “tool hopping,” where several unrelated checkers produce numbers but none actually isolates the problem.

Privacy and responsible use

Use network/domain tools on systems and data you are authorized to test. Public registration/DNS information can be inspected, but results should not be used to claim a person’s identity or precise location. Do not submit passwords, API keys or other secrets into diagnostic fields unless the page explicitly requires them and you trust the system.

What a useful result looks like

A useful published DNS records and resolver troubleshooting result changes a decision. It should tell you whether the observed value matches the expected configuration, which layer to inspect next, or whether a previous change actually fixed the symptom. Save the timestamp, target and result when comparing before/after states.

False certainty to avoid

One tool sees only one part of a system. A successful network request does not prove an application is healthy; a DNS record does not prove mail or a website is configured correctly; an open port does not prove the service behind it is secure; and a geolocation database result does not prove a person’s exact location. Interpret the output within the tool’s stated scope.

Repeatability matters

Transient packet loss, DNS caching, CDN routing, firewall state and server load can change from one run to the next. Repeat measurements when timing or availability matters, and compare from the same vantage point before concluding that a configuration change caused the difference.

Corroborate at the source of truth

When the result affects a production decision, confirm it with the system that owns the data: authoritative DNS/provider console for DNS, router/firewall configuration for local networking, certificate issuer/server configuration for TLS, mail-provider logs for authentication, or the web server/CDN for HTTP behavior. Third-party checks are evidence, not authority over your configuration.

Troubleshooting notes worth recording

  • Exact input/target and whether it is IPv4, IPv6, hostname, URL or domain.
  • Network context: home/office, VPN on/off, Wi-Fi/Ethernet, and ISP if relevant.
  • Status/result before the change and after the change.
  • Any cache, TTL, timeout or rate-limit condition that can delay the expected result.
  • The authoritative configuration you compared against.

Privacy and authorization

Test systems you own or are authorized to administer. Network metadata can be sensitive even when it is technically public. Do not use lookup results to make unsupported claims about a person’s identity, physical address or intent, and never paste passwords or secret tokens into general diagnostic inputs.

DNS and registration data change on different timelines

Authoritative DNS, recursive caches, registrar/registry data and application configuration are separate systems. A changed DNS record can be authoritative immediately yet remain cached elsewhere until TTL expiry; WHOIS/RDAP data can follow registry rules; mail authentication also depends on the message actually being sent with the expected alignment/signature.

Check the authoritative source first

If a public resolver shows an unexpected answer, compare it with the authoritative nameserver and the DNS provider configuration. That tells you whether the problem is the published zone or downstream caching/resolution.