Free DNS Lookup Tool

DNS records are the internet's phone book - they tell computers where to find we...

SecureFastFree

Updated

Try:
|

DNS Record Types Quick Reference

A

Maps domain to IPv4 address

AAAA

Maps domain to IPv6 address

CNAME

Alias pointing to another domain

MX

Mail server for receiving email

TXT

Text data (SPF, DKIM, verification)

NS

Authoritative name servers

SOA

Start of authority record

CAA

Certificate authority authorization

SSL Secured
256-bit Encryption
Cloud Processing
Mobile Friendly

What's Included

Multi-Type Query - Query multiple record types simultaneously
Query Timing - See exactly how long each lookup takes
One-Click Copy - Copy formatted results to clipboard
JSON Export - Download results for documentation
Sorted Results - Records organized by type and priority
TTL Display - Human-readable cache duration

Why Use Free DNS Lookup Tool?

Instant Results

Get DNS records in milliseconds. We query Cloudflare's global network, so results come back fast no matter where you are. No waiting around for slow lookups.

Secure DNS-over-HTTPS

Your queries go through Cloudflare's encrypted DNS service. Nobody can snoop on what domains you're looking up, and the results can't be tampered with.

All Record Types

Query A, AAAA, CNAME, MX, TXT, NS, SOA, PTR, SRV, and CAA records in one go. Pick the ones you need or grab everything at once.

Export Your Data

Copy results to your clipboard or download them as JSON. Great for documentation, audits, troubleshooting tickets, or comparing before-and-after changes.

No Account Needed

Just type a domain and hit enter. We don't ask for your email, don't make you sign up, and don't limit how many lookups you can do.

Works with Any Domain

Look up .com, .org, .io, .dev, country codes, new TLDs - if it's a valid domain, we can query it. Subdomains work too.

When You'll Need DNS Lookup

Email Troubleshooting

When emails aren't arriving, MX records are the first thing to check. Verify they point to the right mail servers and that priorities are set correctly.

Domain Migration

Moving to a new host or DNS provider? Check that your records updated correctly and compare with what you expected to see.

Security Audits

Review SPF, DKIM, DMARC, and CAA records to assess email authentication and certificate policies. Catch misconfigurations before they become problems.

Development & DevOps

Verify staging and production domains resolve correctly, check that subdomains point to the right services, and debug DNS-related deployment issues.

How It Works

1

Type Your Domain

Enter the domain you want to check. You can paste a full URL and we'll clean it up automatically - no need to remove https:// or www yourself.

2

Pick Your Record Types

Choose which DNS records you want to see. The common ones are pre-selected, but you can toggle individual types or use Select All to grab everything.

3

Review the Results

Your records appear in a clean table showing type, name, value, and TTL. MX records show priority, TXT records display the full value. Copy or export when you're done.

DNS Tips from Experience

Lower TTL Before Making Changes

Planning DNS updates? Lower your TTL to 300 seconds (5 minutes) a day or two before making changes. This way, when you do update records, the old cached values expire quickly. After your changes propagate, you can raise TTL back up to reduce DNS load.

MX Priority Matters

Lower priority numbers are tried first for email delivery. If your primary mail server has priority 10 and backup has 20, email goes to the primary. If primary is down, it tries the backup. Don't set all MX records to the same priority unless you want random distribution.

Use CNAME for Flexibility

Point subdomains to services using CNAME records when possible. If the service's IP changes, you don't need to update your DNS - the CNAME follows automatically. Just remember you can't use CNAME at the root domain (example.com) - only subdomains (www.example.com).

Always Set Up SPF and DKIM

Email without SPF and DKIM authentication increasingly ends up in spam. SPF says who can send email for your domain. DKIM cryptographically signs messages. Together with DMARC, they're essential for email deliverability in 2024 and beyond.

Frequently Asked Questions

When you type a domain like google.com into your browser, your computer asks DNS servers to translate that name into an IP address it can actually connect to. A DNS lookup tool like this one lets you see those translation records directly. It's useful for troubleshooting website issues, verifying your own domain is configured correctly, or just understanding how a particular site is set up.
The most common reasons are troubleshooting email problems (checking MX records), verifying domain ownership (TXT records for verification codes), debugging website issues (A records pointing to wrong servers), confirming SSL certificate setup (CAA records), and checking if DNS changes have propagated after making updates at your registrar.
A records point to IPv4 addresses - the classic format like 192.168.1.1 with four numbers separated by dots. AAAA records point to IPv6 addresses - the newer format with eight groups of hexadecimal numbers like 2606:4700:4700::1111. Most domains have both so they work with older and newer internet connections.
Look up MX records for your domain. You should see entries pointing to your email provider's mail servers. The priority number matters - lower numbers are tried first. If you're using Google Workspace, you'd see records like ASPMX.L.GOOGLE.COM. For Microsoft 365, it would be something like yourdomain-com.mail.protection.outlook.com.
TXT records hold text data and serve many purposes. SPF records (starting with v=spf1) tell email servers who's allowed to send email for your domain. DKIM records contain public keys for email authentication. Domain verification codes for services like Google Search Console or Microsoft 365 go in TXT records. They're basically the catch-all for any text-based configuration.
TTL stands for Time To Live and it's measured in seconds. It tells other DNS servers how long they can cache this record before checking for updates. A TTL of 3600 means one hour. Lower TTLs (like 300) mean changes propagate faster but increase load on DNS servers. Higher TTLs (like 86400 for 24 hours) reduce load but slow down propagation when you make changes.
DNS propagation takes time - anywhere from a few minutes to 48 hours depending on TTL values and caching. Our tool queries Cloudflare directly, so you're seeing current authoritative data. If your browser still shows old info, try clearing your browser cache, flushing your local DNS cache (ipconfig /flushdns on Windows, sudo dscacheutil -flushcache on Mac), or just wait for the old cached values to expire.
NS (Name Server) records tell the internet which DNS servers are authoritative for your domain. When you register a domain, your registrar sets NS records pointing to their nameservers by default. If you use Cloudflare, AWS Route 53, or another DNS provider, you update NS records to point to their servers instead.
Query TXT records for your domain. Your SPF record is a TXT record starting with v=spf1. DKIM records are at selector._domainkey.yourdomain.com (replace 'selector' with your actual DKIM selector). DMARC is at _dmarc.yourdomain.com. These three work together to authenticate email and prevent spoofing.
CAA (Certificate Authority Authorization) records specify which certificate authorities are allowed to issue SSL certificates for your domain. If you only want Let's Encrypt certificates, you'd add a CAA record allowing letsencrypt.org. This prevents unauthorized CAs from issuing certificates for your domain, adding an extra layer of security.
Absolutely. Check CNAME records to verify they point to your CDN provider (like d1234.cloudfront.net for CloudFront or yourdomain.cdn.cloudflare.net for Cloudflare). For load balancers, verify A records point to the correct IP addresses. Multiple A records for the same domain means round-robin DNS for basic load distribution.
Yes, completely free with no catches. No signup, no daily limits, no premium tier. We use Cloudflare's public DNS-over-HTTPS API which doesn't log personally identifiable information. The tool runs entirely in your browser - we don't even have a backend server receiving your queries.

Related Tools