DNS Lookup Tool: Check Any Domain's DNS Records
Use this free DNS lookup tool to see the public DNS records for any domain. Choose ALL or a single record type (A, AAAA, MX, NS, TXT, CNAME, SOA or CAA) and get each record's value and TTL. It's the quickest way to confirm a DNS change, find a domain's DNS servers or troubleshoot website and email problems.
Free · no sign-upDNS record types explained
A DNS lookup tool shows the records that tell the internet where a domain's website, email and services live. Each record type does a different job.
| Record | What it does | Typical use |
|---|---|---|
| A | Points the domain to an IPv4 address. | Sending visitors to your web server |
| AAAA | Points the domain to an IPv6 address. | The IPv6 version of an A record |
| MX | Lists the mail servers for the domain. Lower priority numbers are tried first. | Receiving email |
| NS | Lists the nameservers that control the domain's DNS. | Finding where DNS is managed |
| TXT | Holds free-form text. | SPF, DMARC and domain verification |
| CNAME | Makes one name an alias of another. | Pointing www or a subdomain to a service |
| SOA | Administrative data about the DNS zone, including its serial number. | Checking that changes were published |
| CAA | Lists which certificate authorities may issue SSL certificates for the domain. | Limiting who can issue certificates |
How to use the DNS lookup tool
- Enter a domain such as example.com.
- Choose a record type, or leave ALL to see every type at once.
- Press Look up.
- Compare the values with what your host, email provider or DNS provider told you to set.
DNS server lookup: find a domain's nameservers
To find which DNS servers control a domain, choose NS. The results list the domain's authoritative nameservers, such as ns1.yourhost.com, which tells you where its DNS is managed: at the registrar, the web host or a DNS service. The SOA record shows the primary nameserver and the zone's serial number.
This is different from the DNS resolver your own device uses to look up websites. To see your resolvers, run the DNS leak test.
Quick DNS health check
Run the lookup with ALL selected and check these six things:
- NS: at least two nameservers, matching the ones shown at your registrar.
- A / AAAA: point to your current web host or CDN.
- MX: point to your email provider, with the priorities it recommends.
- TXT: exactly one SPF record. Check it with the SPF checker.
- CAA: if you have one, it includes the certificate authority you use.
- SOA: the serial number changes after you edit your DNS.
This is a quick DNS health check of your public records. It isn't a full DNS audit, such as DNSSEC validation or a DNS checker that tests propagation across resolvers worldwide.
Why don't I see my new DNS record yet?
Resolvers cache each record for its TTL. If a record had a TTL of 3600, some resolvers may keep showing the old value for up to an hour after you change it. Before a big change, such as moving hosts or email providers, lower the TTL a day in advance, make the change, then wait for the old TTL to expire.
Next: check your email security
Your TXT records hold SPF and DMARC. Check that they are set up correctly so nobody can send email as you.
DNS Lookup FAQ
What is a DNS lookup tool?
It's a tool that queries the public DNS records of a domain, such as A, MX, NS and TXT records, so you can see where its website and email point.
How do I find a domain's DNS servers?
Choose NS as the record type and look up the domain. The results list its authoritative nameservers, which show where the domain's DNS is managed.
How do I do a DNS health check?
Look up the domain with ALL selected and check that it has at least two nameservers, A or AAAA records pointing to your host, MX records pointing to your email provider, a single SPF record and, if you use one, a correct CAA record.
I changed a DNS record but still see the old one. Why?
Resolvers cache records for the TTL period. Lower the TTL before big changes, then wait for the old TTL to expire.
Why are no records found?
The domain may not exist, its nameservers may be misconfigured, or that record type simply isn't set.
Can I look up any domain?
Yes. DNS records are public information.
Can I use a CNAME at the root domain?
No. The DNS standard doesn't allow it. Use A and AAAA records, or your DNS host's ALIAS or ANAME feature.
More free security tools
Email Security Checker
Check SPF, DKIM and DMARC for any domain.
Open tool →SSL/TLS Checker
Certificate expiry, trust status, protocol and cipher.
Open tool →IP Lookup
Location, ISP, ASN and reverse DNS for any IPv4 or IPv6 address.
Open tool →Security Headers Checker
Grade the HTTP security headers of a website.
Open tool →DNS & WebRTC Leak Test
Check whether your VPN leaks your real IP or DNS.
Open tool →VPN & Proxy Checker
Find out if an IP belongs to a VPN, proxy or data center.
Open tool →