Query DNS records for any domain. View A, AAAA, MX, TXT, CNAME, NS, SOA, CAA, and SRV records instantly.
5 free lookups available
Our free DNS Lookup Tool performs real-time queries using DNS over HTTPS (DoH) to retrieve all DNS records for any domain. Unlike traditional DNS tools that may return cached or incomplete data, we query authoritative nameservers directly through secure DoH endpoints, ensuring you get the most up-to-date and accurate DNS information available.
For each domain lookup, we retrieve all major DNS record types—A, AAAA, MX, TXT, CNAME, NS, SOA, CAA, and SRV—and automatically analyze email authentication records (SPF, DKIM, DMARC) and DNSSEC status. This comprehensive approach gives you a complete picture of how a domain is configured, all in one place.
Query A, AAAA, MX, TXT, CNAME, NS, SOA, CAA, and SRV records for any domain in seconds. View TTL values, priorities, and complete record data.
Automatically verify SPF, DKIM, and DMARC records with validation checks. Get instant feedback on email authentication configuration.
Check if DNSSEC is enabled and properly configured. Verify DNSKEY and RRSIG records to ensure DNS security.
Most DNS lookup tools only show basic A and MX records, leaving you to manually check email authentication and security settings. Our tool provides complete DNS intelligence with automatic analysis:
This comprehensive approach means you don't need multiple tools or manual record parsing. One lookup gives you everything you need to understand a domain's DNS configuration, email security, and infrastructure setup.
Debug DNS propagation issues, verify record changes have taken effect, troubleshoot email delivery problems, and verify CDN configurations. Check SPF/DMARC before launching email campaigns.
Verify SPF, DKIM, and DMARC records are correctly configured. Identify email authentication failures that cause messages to be marked as spam. Troubleshoot email delivery issues.
Audit DNS security configurations, verify DNSSEC implementation, check for misconfigured records that could be exploited, and investigate suspicious domains for threat intelligence.
Verify DNS changes after migrations, check nameserver configurations, validate certificate authority settings (CAA records), and troubleshoot service discovery issues (SRV records).
Research domain configurations before purchase, check if domains are actively configured, verify email setup for business domains, and understand technical infrastructure of potential acquisitions.
Verify domain configurations for SEO tools, check email authentication for marketing campaigns, ensure proper DNS setup for subdomain tracking, and audit competitor domain configurations.
DNS records are the building blocks of how domains work on the internet. Each record type serves a specific purpose:
Maps a domain name to an IPv4 address. This is the most common record type—when you visit a website, your browser uses A records to find the server's IP address.
Maps a domain name to an IPv6 address. IPv6 is the newer internet protocol with a much larger address space than IPv4.
Specifies mail exchange servers responsible for receiving email. Each MX record has a priority value—lower numbers indicate higher priority.
Stores arbitrary text data. Commonly used for SPF (email sender verification), DKIM (email authentication), DMARC (email policy), and domain verification codes.
Creates an alias pointing one domain name to another. Useful for subdomains like www.example.com pointing to example.com.
Specifies the authoritative nameservers for a domain. These are the servers that hold the official DNS records for the domain.
Start of Authority record contains administrative information about the DNS zone, including the primary nameserver, administrator email, and zone serial number.
Certificate Authority Authorization specifies which certificate authorities are allowed to issue SSL/TLS certificates for the domain. Helps prevent unauthorized certificate issuance.
Service locator record used for service discovery. Specifies the hostname and port for specific services (like SIP, XMPP, or custom applications).
Pointer record used for reverse DNS lookups. Maps an IP address back to a domain name, often used for email server verification.
Our DNS lookup tool uses DNS-over-HTTPS (DoH) for all queries, ensuring fast, private, and accurate results. Unlike traditional DNS tools that may return cached data from recursive resolvers, we query authoritative nameservers in real-time through secure DoH endpoints provided by a small set of global public resolvers (today Cloudflare and Google).
For each domain lookup, we perform:
All queries are performed in real-time against authoritative nameservers, ensuring you get the most current DNS configuration from these resolvers. This propagation view currently covers Cloudflare and Google and should be treated as a strong signal for those providers rather than a complete picture of regional resolver behavior worldwide.
Enter any domain name in the search box above. Our tool will query all DNS record types and display them in an organized table. You'll see A records, MX records, TXT records (including SPF/DMARC), nameservers, and more—all in one place.
These are email authentication protocols. SPF (Sender Policy Framework) specifies which servers can send email for your domain. DKIM (DomainKeys Identified Mail) adds cryptographic signatures to emails. DMARC (Domain-based Message Authentication) tells receiving servers what to do with emails that fail SPF or DKIM checks. Our tool automatically checks and validates all three.
DNSSEC (DNS Security Extensions) adds cryptographic signatures to DNS records, preventing DNS spoofing and cache poisoning attacks. When enabled, it ensures that DNS responses haven't been tampered with. Our tool checks for DNSKEY and RRSIG records to determine if DNSSEC is properly configured.
DNS changes can take time to propagate worldwide due to TTL (Time To Live) values. If you recently updated DNS records, wait for the TTL period to expire (typically 300-3600 seconds). Our tool queries authoritative nameservers directly, so it shows the current state—if changes aren't visible here, they may not have propagated to all DNS servers yet.
An A record points directly to an IP address. A CNAME record points to another domain name (an alias). You can't have both an A record and a CNAME record for the same name. CNAME records are useful for subdomains like www.example.com pointing to example.com, while A records are needed for the root domain.
We perform real-time queries against authoritative nameservers using DNS-over-HTTPS (DoH), ensuring accuracy and privacy. Unlike tools that may return cached data, our results reflect the current state of DNS records. IP geolocation and nameserver provider identification use pattern matching against known databases and signatures.
Yes, you can look up DNS records for any publicly accessible domain with any TLD (.com, .io, .dev, country codes, etc.). The tool works with domains that have public DNS records. It won't work for internal/private domains or domains that don't resolve publicly.
TTL (Time To Live) is the number of seconds that DNS resolvers should cache the record before querying again. Lower TTL values (like 300 seconds) mean faster propagation of DNS changes but more frequent queries. Higher TTL values (like 86400 seconds) reduce server load but slow down DNS change propagation.
MX (Mail Exchange) records tell email servers where to deliver email for your domain. If MX records are missing or misconfigured, email won't be delivered. Our tool shows all MX records with their priority values, helping you verify your email routing is set up correctly.
CAA (Certificate Authority Authorization) records specify which certificate authorities are allowed to issue SSL/TLS certificates for your domain. This prevents unauthorized certificate issuance, which could be used for man-in-the-middle attacks. Our tool shows CAA records to help you verify your certificate security configuration.
Tired of logging into five different registrar dashboards? Connect them all to Domain Collective. Edit DNS records, update nameservers, track expirations—everything in one place.
Start free — no credit card required