DNS lookup

What does a domain's DNS say about it?

Every domain publishes records that tell the internet where its website is, who handles its email and which services it uses. Enter a domain to see them all, explained in plain words.

Try:github.com wikipedia.org ip5.io

wikipedia.org

In plain words

Website: 208.80.154.224 · Wikimedia Foundation Inc.
2620:0:861:ed1a::1 · Wikimedia Foundation Inc.
Email arrives at: wikimedia.org
Allowed to send its email: wikimedia.orgOther senders are marked as suspicious.
Fake emails using it: Rejected
DNS is run by: wikimedia.org
HTTPS certificates from: Let's Encrypt, Google Trust ServicesNo other company may issue them.

Registration and hosting: website lookup →

Services it has verified

Many services ask domain owners to add a record to prove they own the domain. Together these records hint at the tools an organization uses.

Google
Yandex

All records

AWebsite address (IPv4)1Where browsers connect to open the site.

208.80.154.224Wikimedia Foundation Inc. · Look up →

AAAAWebsite address (IPv6)1Where browsers with IPv6 connect.

2620:0:861:ed1a::1Wikimedia Foundation Inc. · Look up →

CNAMEAlias1Where www.wikipedia.org points.

www.wikipedia.org → dyna.wikimedia.orgTwo names for the same site.

MXEmail2Where email for wikipedia.org is delivered.

10 mx-in1001.wikimedia.orgwikimedia.org
10 mx-in2001.wikimedia.orgwikimedia.org

NSName servers3The servers that answer for this domain.

ns0.wikimedia.orgwikimedia.org
ns1.wikimedia.orgwikimedia.org
ns2.wikimedia.orgwikimedia.org

TXTText records3Email rules and ownership proofs.

yandex-verification: 35c08d23099dc863Proves ownership to Yandex.
v=spf1 include:_cidrs.wikimedia.org ~allSPF: who may send its email.
google-site-verification=AMHkgs-4ViEvIJf5znZle-BSE2EPNFqM1nDJGRyn2qkProves ownership to Google.

DMARCEmail policy1What happens to fake emails using this domain.

v=DMARC1; p=reject; rua=mailto:dmarc-rua@wikimedia.org;Rejected Reports go to dmarc-rua@wikimedia.org.

CAACertificate rules3Which companies may issue HTTPS certificates.

0 iodef "mailto:dns-admin@wikimedia.org"Where certificate companies report problems
0 issue "letsencrypt.org"Let's Encrypt
0 issue "pki.goog"Google Trust Services

SOAZone details1Technical settings of the domain's DNS.

ns0.wikimedia.org. hostmaster.wikimedia.org. 2026060420 43200 7200 1209600 3600Primary name server: ns0.wikimedia.org.

What a DNS lookup can't tell

Who owns the domainDNS shows where things point. For registration dates, use the website lookup; owners' names are mostly hidden.

Every subdomainDNS answers questions about names you already know. There is no list of all names under a domain.

What other networks seeThese are Cloudflare DNS's answers. Right after a change, some networks can still have the old ones for a while.

From the terminal

curl ip5.io/dns-lookup/github.com
curl "ip5.io/dns-lookup/github.com?format=json"

5 questions

Q1What is DNS?

The internet's address book. When you type a website's name, your device asks DNS which address to connect to. Domains also publish where their email goes and rules about who may send it.

Q2What do the record types mean?

A and AAAA are the website's addresses (IPv4 and IPv6). CNAME is an alias for another name. MX says where email is delivered. NS lists the servers that answer for the domain. TXT holds text like email rules and ownership proofs. CAA says who may issue HTTPS certificates.

Q3Why do companies publish verification records?

Services like Google, Microsoft or Stripe ask for a record to prove that whoever sets up an account really controls the domain. The records often stay after setup, so they quietly show which services an organization uses.

Q4Why don't I see my DNS change yet?

DNS answers are kept for a while by the servers that asked, as set in each record's time to live. Most changes show up within minutes to a few hours.

Q5Does the domain owner see my lookup?

No. ip5.io asks Cloudflare DNS, which answers from its own copy or asks the domain's name servers. The question comes from Cloudflare, not from you, and ip5.io doesn't keep it.