Skip to main content
Free Tools

DNS lookup: check any domain's DNS records instantly

Resolve A, AAAA, CNAME, MX, NS, TXT, SOA and CAA records for any domain - plus SPF and DMARC email checks - with a plain-English explanation of every result. Free, no signup.

No signup requiredAll record typesSPF & DMARC checks

Checks A, AAAA, CNAME, MX, NS, TXT, SOA and CAA records - plus SPF and DMARC email authentication - in one query.

A DNS lookup asks the Domain Name System what records a domain has - the instructions that tell the internet where to find a website, where to deliver its email, and which policies apply. This tool resolves every common record type at once, over Cloudflare's DNS-over-HTTPS resolver, so the results are independent of your local network or stale DNS cache.

What this tool checks

Addressing records

A and AAAA records (the IPv4/IPv6 servers) and CNAME aliases that point one name at another.

Mail routing

MX records and your email provider, plus SPF and DMARC authentication status.

Delegation

NS and SOA records that show which nameservers are authoritative for the zone.

Policy & verification

TXT records (verification, SPF) and CAA records that restrict who can issue your SSL certificates.

How to check your DNS records

  1. Enter the domain (for example, example.com) and run the lookup.
  2. Review the grouped records with their values and TTLs.
  3. Check the email panel to confirm SPF and DMARC are in place.
  4. Act on it - verify a migration, debug mail delivery, or confirm your nameservers.

Prefer the command line? The same data comes from dig example.com ANY or nslookup -type=any example.com. This tool formats and explains it for you.

Why DNS matters

DNS sits underneath everything: a single wrong record can take a site offline, send your email to spam, or block your SSL certificate from renewing. Most "the website is down after we moved hosts" incidents are really DNS problems - the A record still points at the old server, or the nameservers were never updated. Checking your records from an independent resolver is the fastest way to confirm what the rest of the world actually sees.

DNS record types reference

Common DNS record types and what they do
RecordPurposeTypical TTL
AMaps the domain to an IPv4 address300-3600s
AAAAMaps the domain to an IPv6 address300-3600s
CNAMEAliases one name to another (e.g. www → root)3600s
MXRoutes email to mail servers, by priority3600s
NSLists the authoritative nameservers86400s
TXTSPF, domain verification, arbitrary text policies3600s
SOAStart of authority - zone metadata & serial3600s
CAARestricts which CAs may issue certificates3600s

SPF & DMARC: email authentication explained

SPF (Sender Policy Framework) is a TXT record listing the servers allowed to send mail for your domain. DMARC lives at _dmarc.yourdomain.com and tells receiving servers what to do with mail that fails checks - p=none only monitors, while p=quarantine or p=reject actively block spoofed mail. A domain with SPF but no DMARC is only half-protected. For deeper guidance, see Google's documentation and the DMARC specification (RFC 7489).

How to read your results

  • No A record? The site has no IPv4 server configured (or uses a CNAME). Expect the site not to load.
  • No MX record? The domain can't receive email at all.
  • SPF/DMARC missing? Your outbound mail is more likely to be flagged as spam and your domain is easier to spoof.
  • Unexpected NS records? Your domain may still be delegated to an old host - a common cause of "we migrated but nothing changed".

Frequently asked questions

What is a DNS lookup?
A query to the Domain Name System that returns a domain's records - A, MX, TXT, NS and more - the same data you'd get from dig or nslookup.
What records does this tool check?
A, AAAA, CNAME, MX, NS, TXT, SOA and CAA, plus SPF and DMARC email authentication, each explained in plain English.
How do I check a website's DNS?
Enter the domain and run the lookup. Records appear grouped with values and TTLs.
What is an MX record?
It tells other servers where to deliver your email, by priority. The host reveals your email provider.
Why do SPF and DMARC matter?
They authenticate your outbound mail. Without them, email lands in spam and your domain is easy to spoof.
What is a TTL?
How long a record is cached before resolvers refetch it. Lower it before a migration so changes apply quickly.
Why are there no records for my domain?
It may be unregistered, misspelled, or recently changed and not yet propagated (up to 48 hours).
Is it free?
Yes - free, no signup. Lookups run from edge servers, independent of your local DNS cache.

Related technical-SEO tools

Launch Faster

Ready to ship your next product?

Tell us what you're building. Senior engineers will scope, plan, and start delivering your product with production-ready architecture - fast.

Talk to real engineers
Clear scope in one call
No obligation