Practical guide
How to use the NSLookup tool
NSLookup is the lookup most administrators learn first because it ships with Windows and macOS. This page gives you the same workflow without a terminal: pick a record type, enter a name, and read the answer.
What this tool checks
NSLookup resolves the most common DNS record types — A (IPv4 address), AAAA (IPv6 address), CNAME (alias), NS (nameserver), MX (mail exchanger), and TXT (text records such as SPF, DKIM, and DMARC) — and returns a clean answer that mirrors what you would see in a terminal. It is the fastest way to check whether a domain points where you think it points.
When to use it
Use NSLookup for the everyday cases: confirming a website points at the right IP, checking which nameservers a domain delegates to, verifying a CNAME points at a hosted service, or sharing a quick lookup result with a colleague. For deeper DNS troubleshooting — flags, response codes, TTLs, signatures — switch to the DIG tool.
How to read the result
An A record will show one or more IPv4 addresses, AAAA shows IPv6 addresses, CNAME shows the canonical (real) hostname an alias points to, and NS shows the list of authoritative nameservers for the domain. If a CNAME is present, every other record type for that name is effectively answered from the target name. NSLookup will follow the chain for you.
Common errors and what they mean
NXDOMAIN means the name does not exist — usually a typo or an unregistered domain. SERVFAIL means the resolver could not complete the query, often a DNSSEC problem on the authoritative side. An empty answer with no error means the name exists but has no record of the requested type — for example, looking up an AAAA record on an IPv4-only host.
Record types you can look up
These are the record types this tool resolves and what each one answers.
| Type | Answers the question | Typical value |
|---|---|---|
| A | What IPv4 address does this name use? | 93.184.216.34 |
| AAAA | What IPv6 address does this name use? | 2606:2800:220:1::1946 |
| CNAME | Is this name an alias, and for what? | target.hosted-service.net |
| NS | Which nameservers are authoritative? | ns1.example.net |
| MX | Which servers receive mail for this domain? | 10 mail.example.net |
| TXT | What text records (SPF, DKIM, DMARC) exist? | v=spf1 include:_spf.google.com ~all |
Field notes
Most "DNS is broken" reports that reach me are really a CNAME surprise: a name is an alias, so its A, MX, or TXT answers actually come from the target. When a record looks missing, check for a CNAME first. And if a desktop nslookup disagrees with this page, you are almost always comparing two different resolvers — pin both to the same resolver before assuming the record itself is wrong.
Example NSLookup query
- Example input
example.com (type: A, resolver: Cloudflare)- Example result
Name: example.com Address: 93.184.216.34
An A record is a name-to-IPv4 mapping. If you wanted the IPv6 equivalent, switch the record type to AAAA. The 'Non-authoritative answer' line you see in a terminal is omitted here for clarity.
Related tools
Related guides
nslookup vs dig
Why nslookup is great for a quick check but dig is the tool for troubleshooting.
Read guideDNS Records Explained
Background on the A, AAAA, CNAME, and NS record types this lookup returns.
Read guideNXDOMAIN vs SERVFAIL
When nslookup says 'non-existent domain' versus 'server failed', here is what each one actually means and how to fix it.
Read guideFAQ
Why does nslookup show different results than dig?
What does 'Non-authoritative answer' mean?
How do I look up an MX record with nslookup?
Why am I getting 'server can't find example.com: NXDOMAIN'?
Can I use NSLookup to test a specific nameserver?
Can I look up an IP address with nslookup (reverse DNS)?
Why does nslookup return more than one IP address for a domain?
Last reviewed: 2026-06-25.