Record types explained
| Type | Purpose | Example |
|---|---|---|
| A | IPv4 address of the domain | 93.184.216.34 |
| AAAA | IPv6 address | 2606:2800:220:1::248 |
| CNAME | Alias to another hostname | www → example.netlify.app |
| MX | Mail servers, with priority | 10 mx1.mailhost.com |
| NS | Authoritative name servers | ns1.cloudflare.com |
| TXT | Text: SPF, DKIM, site verification | v=spf1 include:_spf.google.com ~all |
| SOA | Zone authority and serial number | ns1… hostmaster… serial 2026100601 |
| CAA | Which certificate authorities may issue SSL | 0 issue "letsencrypt.org" |
Email security checks
- SPF (a TXT record starting
v=spf1) lists servers allowed to send mail for the domain. - DMARC (a TXT record at
_dmarc.domain) tells receivers what to do with mail that fails SPF/DKIM. Gmail and Yahoo now require DMARC for bulk senders. - MX records must exist to receive email.
Missing SPF or DMARC is a common reason legitimate emails land in spam.
Troubleshooting with DNS
- Website moved but still shows the old site? Check the A record and its TTL — changes can take up to the TTL (in seconds) to spread.
- Google Search Console verification failing? Confirm the
google-site-verificationTXT record is present. - SSL certificate will not issue? A CAA record may be blocking your certificate authority.
Find the server's IP and owner with the Domain to IP and Hosting Checker tools; verify HTTPS with the SSL Checker.
Frequently asked questions
How do I check the DNS records of a domain?
Enter the domain and click Check now. You get A, AAAA, CNAME, MX, NS, TXT, SOA and CAA records, plus SPF and DMARC checks.
How long do DNS changes take?
Usually minutes to a few hours. Resolvers cache records for their TTL, so the old value can persist until it expires — up to 48 hours in rare cases.
What is an SPF record?
A TXT record starting with v=spf1 that lists the servers allowed to send email for your domain. It helps prevent spoofing and spam filtering.
Why does my domain have no MX record?
Then it cannot receive email. Add MX records from your email provider if you use addresses at the domain.
What is a CAA record?
It restricts which certificate authorities may issue SSL certificates for the domain, adding protection against mis-issued certificates.

