NetworkAI
  • MonitoringCertificate & Domain MonitorDaily checks of TLS certificates, domain registration and DNS, with alerts when a renewal fails.
  • AssessmentSecurity AssessmentA passive security report for a domain you own: TLS, DNS, email authentication, headers and registration.
Kostenlose Tools
Hier startenDomain-Health-CheckSSL, DNS, E-Mail-Authentifizierung, Security-Header und Ablaufdatum in einem bewerteten Bericht.Health-Check starten →
Domain
  • Domain-Ablauf-Checker (Bulk)
  • RDAP-Domain-Abfrage
  • WHOIS-Abfrage
SSL / TLS
  • SSL-Zertifikat-Checker
  • SSL-Ablauf-Checker (Bulk)
  • Rechner für 47-Tage-Zertifikatslaufzeiten
  • Laufzeit-Check für Zertifikate
  • Post-Quanten-TLS-Checker
DNS
  • DNS-Abfrage
  • MX-Abfrage
  • CAA-Record-Checker
  • DNS-Propagation-Checker
  • TXT-Record-Abfrage
  • NS-Abfrage
  • CNAME-Abfrage
  • Reverse-DNS-Abfrage
E-Mail-Authentifizierung
  • SPF-Record-Checker
  • SPF-Record-Generator
  • DMARC-Record-Checker
  • DMARC-Record-Generator
  • DKIM-Record-Checker
  • Absender-Anforderungen-Checker
Website-Sicherheit
  • Security-Header-Checker
Netzwerk & IP
  • Wie ist meine IP-Adresse?
  • Subnetzrechner
Alle kostenlosen Tools →
PreiseDocsAnleitungen
AnmeldenKostenlos starten
  • MonitoringCertificate & Domain MonitorDaily checks of TLS certificates, domain registration and DNS, with alerts when a renewal fails.
  • AssessmentSecurity AssessmentA passive security report for a domain you own: TLS, DNS, email authentication, headers and registration.
Kostenlose Tools
Hier startenDomain-Health-Check
Domain
  • Domain-Ablauf-Checker (Bulk)
  • RDAP-Domain-Abfrage
  • WHOIS-Abfrage
SSL / TLS
  • SSL-Zertifikat-Checker
  • SSL-Ablauf-Checker (Bulk)
  • Rechner für 47-Tage-Zertifikatslaufzeiten
  • Laufzeit-Check für Zertifikate
  • Post-Quanten-TLS-Checker
DNS
  • DNS-Abfrage
  • MX-Abfrage
  • CAA-Record-Checker
  • DNS-Propagation-Checker
  • TXT-Record-Abfrage
  • NS-Abfrage
  • CNAME-Abfrage
  • Reverse-DNS-Abfrage
E-Mail-Authentifizierung
  • SPF-Record-Checker
  • SPF-Record-Generator
  • DMARC-Record-Checker
  • DMARC-Record-Generator
  • DKIM-Record-Checker
  • Absender-Anforderungen-Checker
Website-Sicherheit
  • Security-Header-Checker
Netzwerk & IP
  • Wie ist meine IP-Adresse?
  • Subnetzrechner
Alle kostenlosen Tools →
PreiseDocsAnleitungen
Kostenlos startenAnmelden
  1. Startseite
  2. /Kostenlose Tools
  3. /DNS
  4. /DNS-Abfrage

Diese Seite ist noch nicht übersetzt und wird deshalb auf Englisch angezeigt.

Kostenloses Tool · Ohne Anmeldung

DNS Lookup

Enter a domain to see all of its DNS records at once — A, AAAA, CNAME, MX, NS, TXT, CAA and SOA — for developers and admins checking a change or debugging a domain.

Die Ergebnisse stammen von öffentlichen Resolvern (Cloudflare 1.1.1.1 und Google 8.8.8.8) und werden bis zu eine Minute zwischengespeichert. Ein Mailserver sieht möglicherweise etwas anderes, wenn sich ein Eintrag kürzlich geändert hat – Änderungen brauchen bis zur TTL des Eintrags, um sich zu verbreiten.

Das Ganze als API

Early Access · noch nicht verfügbar

Wir entwickeln eine API, die diese Prüfungen als JSON liefert. Sie existiert noch nicht – Anfrage und Antwort unten zeigen das geplante Format und können sich ändern. Tragen Sie sich in die Warteliste ein, und wir schreiben Ihnen genau einmal: wenn der Early Access startet.

Geplante Anfrage
curl "https://networkaitools.com/api/v1/dns?domain=example.com" \
  -H "Authorization: Bearer nk_live_..."
Geplante Antwort
{
  "status": "ok",
  "records": {
    "A": ["93.184.215.14"],
    "MX": [{ "priority": 10, "exchange": "mail.example.com" }],
    "CAA": [{ "flags": 0, "tag": "issue", "value": "letsencrypt.org" }]
  },
  "resolver": "1.1.1.1"
}

Wird nur genutzt, um Sie über den Start der API zu informieren. Kein Newsletter, und Sie bestätigen zuerst per E-Mail.

What is a DNS lookup?

A DNS lookup asks the Domain Name System what is published for a name. DNS stores different kinds of records for each domain: addresses for its website, the servers that accept its email, text records used for verification and email security, and the nameservers that hold all of it.

What each record type means

TypeWhat it holdsTypical use
AAn IPv4 addressPoints the name at a web server
AAAAAn IPv6 addressThe same, for IPv6 networks
CNAMEAn alias to another namewww pointing at a hosting provider
MXMail servers and their priorityWhere email for the domain is delivered
NSThe authoritative nameserversWhich DNS provider answers for the domain
TXTFree-form textSPF, domain verification, DKIM keys
CAACertificate authorities allowed to issueLimits who can issue TLS certificates
SOAZone metadata and serial numberShows the primary nameserver and when the zone last changed

How to read the results

Each record type is queried separately and shown as its own group. A group marked as empty means the name exists but has no record of that type, which is normal — most domains have no CNAME at the root, and many have no AAAA.

  • No records at all usually means the name does not exist: a typo, or a domain that has not been registered or delegated.
  • No A or AAAA means the name has no address, so nothing can connect to it as a website.
  • One nameserver is a single point of failure. The DNS standard (RFC 1034) expects at least two.
  • A CNAME alongside MX or NS is invalid: a CNAME cannot share a name with other records.
  • No AAAA is only a note. The site works, but not over IPv6-only connections.

Queries go to the public resolver 1.1.1.1, so you see what the wider internet sees, including cached answers. That is the right view for checking whether a change has taken effect for real visitors.

Why a DNS change is not visible yet

DNS does not push changes out. Every record carries a TTL — a number of seconds resolvers may keep a cached copy. After you edit a record, resolvers that already hold the old answer keep serving it until their copy expires. People call this propagation, but it is really just caches timing out.

To make a planned change take effect quickly:

  • Lower the record's TTL to 300 seconds a day or two before the change.
  • Make the change, then confirm it here.
  • Raise the TTL back to an hour or more once everything works.
Nameserver changes at the registrar are slower. The parent zone's NS records commonly have a TTL of 48 hours, and you cannot shorten it.

Common fixes

Website does not load on the bare domain. The root needs its own A/AAAA record. A www record does not cover it:

example.com.      A      203.0.113.10
www.example.com.  CNAME  example.com.

CNAME at the root is rejected. The DNS standard does not allow a CNAME at the zone apex, because the apex must also hold NS and SOA records. Use your DNS host's ALIAS, ANAME or CNAME-flattening feature instead.

Email stopped after moving DNS providers. MX and TXT records are easy to leave behind in a migration. Compare this output with the old zone, then check them directly with the MX lookup and SPF checker.

Häufige Fragen

How do I check the DNS records of a domain?

+

Enter the domain in the box above. The tool queries a public resolver for A, AAAA, CNAME, MX, NS, TXT, CAA and SOA records and lists each group. From a terminal, dig example.com ANY is unreliable — most servers refuse ANY queries — so query each type separately.

How long does DNS propagation take?

+

As long as the old record's TTL. A record with a 300-second TTL is replaced everywhere within about five minutes; one with an 86400-second TTL can linger for a day. Changing nameservers at the registrar can take up to 48 hours.

What is the difference between an A record and a CNAME?

+

An A record maps a name directly to an IPv4 address. A CNAME maps a name to another name, and the resolver then looks that one up. Use a CNAME when a provider may change its IP addresses; use an A record when you control a fixed address.

Can a domain have multiple TXT records?

+

Yes. A domain commonly has several — SPF, site verification for Google or Microsoft, and others. The exception is that only one of them may start with v=spf1. DKIM and DMARC records live on their own subdomains, not at the root.

Why are the results different from my own computer?

+

Your computer asks your ISP's or company's resolver, which may hold an older cached answer, or may be configured to answer differently for internal names. This tool asks a public resolver, which shows what most of the internet currently sees.

What does the SOA serial number tell me?

+

It is a version counter for the zone. DNS providers increase it whenever the zone changes, and secondary nameservers use it to know when to fetch a fresh copy. If the serial has not changed after an edit, the edit was probably not saved.

Verwandte Tools

Alle Tools: DNS →
  • DNS-Propagation-Checker

    Prüfen Sie, ob 21 öffentliche DNS-Resolver Ihren neuen A-, MX-, TXT- oder CNAME-Eintrag schon liefern.

  • TXT-Record-Abfrage

    Alle TXT-Einträge einer Domain, mit SPF, DMARC und Verifizierungs-Tokens gekennzeichnet.

  • NS-Abfrage

    Die Nameserver einer Domain, ihre IP-Adressen und ob alle dieselbe Zone ausliefern.

  • CNAME-Abfrage

    Eine CNAME-Kette Schritt für Schritt bis zum endgültigen Hostnamen und seinen IP-Adressen verfolgen.

  • MX-Abfrage

    Mailserver nach Priorität, ihre Adressen und der Anbieter dahinter.

  • Reverse-DNS-Abfrage

    Der PTR-Hostname einer IPv4- oder IPv6-Adresse und ob er auf dieselbe IP zurückführt.

Geschrieben und gepflegt vom NetworkAI-Team, entwickelt von einem aktiven Netzwerksicherheits-Ingenieur · Zuletzt aktualisiert: 12. Oktober 2026

NetworkAI

Erneuerungsfehler-Alarme für TLS-Zertifikate und Domainregistrierungen.

Produkt

  • Zertifikat-Monitor
  • Preise
  • Anmelden
  • Kostenlos starten

Kostenlose Tools

  • Domain-Health-Check
  • SSL-Zertifikat-Checker
  • SPF-Record-Checker
  • DMARC-Record-Checker
  • Security-Header-Checker
  • DNS-Abfrage
  • Alle kostenlosen Tools →

Tool-Kategorien

  • Domain
  • SSL / TLS
  • DNS
  • E-Mail-Authentifizierung
  • Website-Sicherheit
  • Netzwerk & IP

Ressourcen

  • Dokumentation
  • Slack- & Webhook-Alarme
  • Leitfäden
  • Alle Vergleiche
  • NetworkAI vs UptimeRobot
© 2026 NetworkAI · Entwickelt von einem Netzwerksicherheitsingenieur
DatenschutzAGB
EnglishEspañolالعربية