What is DNS and how does DNS resolution work?

DNS (Domain Name System) is the global address book of the internet. It translates human-friendly domain names (like audityourweb.com) into computer-readable numerical IP addresses (like 104.21.5.12). The resolution journey queries Root Nameservers, followed by TLD Nameservers, and finally your authoritative nameservers.

What are the most common DNS record types?

The most common DNS records include A (IPv4), AAAA (IPv6), CNAME (Aliases), MX (Mail exchange), TXT (SPF, DMARC, Verification), NS (Nameservers), SOA (Zone details), and CAA (Certificate authority authorization).

What is DNS propagation and why does it take up to 24–48 hours?

DNS propagation is the time required for DNS changes to spread across all internet service providers and caching resolvers worldwide. The speed of propagation is governed by your record TTL (Time to Live). If a record has a TTL of 86,400 seconds, intermediate DNS caches will continue serving the old cached data until that timer counts down to zero.

Why are CAA records critical for website security?

A CAA (Certificate Authority Authorization) record specifies exactly which Certificate Authorities (like Let's Encrypt or DigiCert) are permitted to issue SSL/TLS certificates for your domain. Without a CAA record, any trusted CA worldwide could mistakenly or maliciously issue a certificate for your domain.

How can I speed up DNS propagation before migrating a website?

To achieve near-instant migration with zero downtime, reduce your DNS record TTL down to 300 seconds (5 minutes) at least 48 hours before the scheduled cutover. Once the migration is complete and tested, raise the TTL back up to 3600 seconds or 86400 seconds to optimize DNS caching speed.

Network & DNS Suite

Free DNS Record Lookup & Checker

Look up A (IPv4), AAAA (IPv6), CNAME, MX, TXT, NS, SOA, and CAA records for a domain. Results come from one DNS resolver and do not measure propagation across regions.

Free Developer Tool

DNS Lookup & Record Inspector

Query eight common DNS record types for a public domain through one resolver. Inspect A, AAAA, CNAME, MX, TXT, NS, SOA, and CAA records with configuration tips.

Why check CAA records?

CAA (Certificate Authority Authorization) records prevent unauthorized or compromised Certificate Authorities from issuing fraudulent SSL/TLS certificates for your domain. Without CAA, any CA on earth can issue a certificate for your site.

Your DNS records will appear here

Enter a domain to look up eight common record types through this server's DNS resolver. This is not a global propagation check.

How This DNS Lookup Works

This tool asks its configured DNS resolver for eight common record types. The resolver may return cached answers, so the results show what it sees at the time of the request.

After a DNS change, compare results from multiple resolvers or query your authoritative nameservers directly before concluding that a change has propagated worldwide.

Essential DNS Record Types Explained

Domains use different record types to route web traffic and email, and to set certificate issuance policies:

A & AAAA Records

Connect hostnames to web servers. A points to 32-bit IPv4 addresses, while AAAA points to 128-bit IPv6 addresses.

MX Records (Mail Exchange)

Route incoming emails to designated mail hosts with priority weights (lower numbers = higher priority).

TXT Records (SPF & DMARC)

Hold security directives for email spoofing protection (SPF, DMARC, DKIM) and third-party SaaS verification.

CAA Records (SSL Security)

Prevents rogue Certificate Authorities from issuing fraudulent SSL/TLS certificates for your domain.

Understanding DNS Propagation & TTL

Every DNS record contains a TTL (Time to Live) value measured in seconds. TTL dictates how long an intermediate DNS cache is allowed to reuse the record before asking the authoritative nameserver for a fresh copy.

TTL Setting	Seconds	Ideal Use Case	Trade-off
5 Minutes	300s	Active website migrations, IP cutovers, dev testing.	Higher DNS query volume to nameservers.
1 Hour	3600s	Standard production websites with occasional updates.	Balanced caching speed and agility.
1 Day	86400s	Stable records that rarely change (MX, NS, Root A).	Max cache speed; slow propagation if changed.

Related Security Tools

Explore our free webmaster security suite:

Full Platform

Automate Your Website Compliance

Beyond DNS security, does your website meet ADA & WCAG 2.2 accessibility standards? Find out with our AI-powered site audit.

Scan Your Website Free

Frequently Asked Questions About DNS Lookups

Everything you need to know about DNS records, propagation delays, and CAA security.

DNS (Domain Name System) is the decentralized global directory of the internet. It translates human-friendly domain names (such as audityourweb.com) into machine-readable IP addresses (such as 104.21.5.12 or 2606:4700::1). When you visit a website, your computer contacts recursive resolvers, Root Nameservers, TLD Nameservers (e.g. .com), and finally your domain's Authoritative Nameservers to fetch the correct IP address.