Free DNS Lookup Tool – Check A, MX, TXT, NS & CNAME Records
Instantly look up DNS records for any domain — A, AAAA, MX, TXT, NS, CNAME, SOA, and CAA. This free DNS lookup tool queries Google's public DNS resolver directly from your browser with no sign-up, no API key, and no rate limits.
What Is a DNS Lookup Tool?
A DNS lookup tool queries the Domain Name System directly and shows you the raw records a domain publishes — the IP addresses it points to, the mail servers that handle its email, the nameservers that manage it, and any text-based configuration it exposes. Instead of relying on your computer's cached DNS, this tool sends a fresh query to Google's public DNS resolver (dns.google) and shows you exactly what comes back in real time.
This is the same information your browser silently looks up every time you visit a website, except here it is surfaced directly so you can verify configuration, debug propagation issues, audit email authentication records, or confirm that DNS changes have actually taken effect. Whether you are a web developer, sysadmin, SEO professional, or site owner troubleshooting a problem, DNS lookup is one of the most fundamental diagnostic tools available.
Why Would You Need to Check DNS Records?
- Verifying domain setup — Confirm A or CNAME records point to the correct server after pointing a domain at new hosting, a CDN, or a landing page builder.
- Email deliverability — Check that MX records resolve correctly and that SPF, DKIM, and DMARC TXT records are published as expected. Missing or misconfigured email authenticationrecords are one of the top reasons legitimate emails land in spam.
- Debugging propagation — See what a public resolver currently returns while waiting for DNS changes to propagate globally after a hosting migration or nameserver change.
- Migrating providers — Confirm nameserver (NS) records have switched over after moving a domain to a new registrar or DNS host.
- Security audits — Review CAA records to see which certificate authorities are authorized to issue SSL/TLS certificates for a domain.
- Competitive research — Look up a competitor's DNS to see which hosting provider, CDN, or email service they use — all publicly available information in DNS.
- General troubleshooting — Diagnose "site not loading" or "email not arriving" issues that trace back to DNS misconfiguration.
DNS Record Types Explained
This tool supports all eight major DNS record types. The table below explains what each one does and when you would look it up:
| Record | Purpose | Example Use Case |
|---|---|---|
| A | Maps domain to an IPv4 address | Verify your site points to the correct server IP |
| AAAA | Maps domain to an IPv6 address | Check if a domain supports IPv6 |
| CNAME | Alias pointing to another domain | Confirm a subdomain routes through a CDN |
| MX | Specifies mail servers for the domain | Debug email delivery failures |
| TXT | Free-form text for verification and auth | Check SPF, DKIM, DMARC records |
| NS | Lists authoritative nameservers | Confirm nameserver migration completed |
| SOA | Zone admin info (primary NS, serial, refresh) | Verify zone updates propagated |
| CAA | Restricts which CAs can issue SSL certs | Audit SSL certificate authorization |
DNS Response Status Codes
Every DNS query returns a status code alongside the results. Understanding these codes helps you diagnose issues quickly:
| Code | Name | What It Means |
|---|---|---|
| 0 | NOERROR | Query succeeded — records may or may not exist for that type |
| 2 | SERVFAIL | Nameserver failed to process — often a server-side issue |
| 3 | NXDOMAIN | Domain does not exist — not registered or expired |
| 5 | REFUSED | Nameserver refused the query — usually a policy restriction |
How to Use This DNS Lookup Tool
- Step 1: Type a domain name — for example, example.com or mail.example.com for a subdomain.
- Step 2: Select the record type you want to check.
- Step 3: Press Enter or click Search to run the lookup.
- Step 4: View results. Each record shows its type, TTL, and data value. Click any record to copy its value.
- Step 5: Use "Export all DNS data" to download every record type as a single JSON file for documentation or audits.
Understanding TTL (Time to Live)
Every DNS record has a TTL value, shown in seconds next to each result. TTL tells DNS resolvers how long they can cache that record before re-querying the authoritative nameserver. A TTL of 3600 means one hour of caching; 300 means five minutes.
When you update a DNS record, the change does not appear everywhere instantly. Resolvers worldwide may still serve the old cached version until their local TTL expires. This is why freshly changed records can take minutes to 48 hours to propagate, depending on the previous TTL. Checking against a public resolver like this tool is the fastest way to see whether Google's DNS has picked up your change.
If you plan to make DNS changes, lowering the TTL to 300 seconds a day or two beforehand ensures faster propagation when the actual update is made.
Common DNS Troubleshooting Scenarios
Website Not Loading After Changing Hosting
Look up the A record. If it still shows your old hosting provider's IP, the DNS change has not propagated yet — check the TTL to estimate when it will. If the A record shows the new IP but the site does not load, the issue is at the hosting level, not DNS.
Email Not Being Delivered
Check MX records first — they must point to your email provider's servers. Then check TXT records for SPF, DKIM, and DMARC. If any of these are missing or incorrectly formatted, receiving servers may reject or spam-folder your outgoing mail.
SSL Certificate Not Issuing
If your hosting provider cannot issue an SSL certificate, check the CAA record. If a CAA record exists and does not include your certificate authority (e.g., letsencrypt.org), issuance will be blocked. Either add the correct CA or remove the CAA restriction.
Subdomain Not Resolving
Enter the full subdomain (e.g., blog.example.com) and look up its A or CNAME record. If NOERROR returns with zero records, the subdomain has not been created in DNS yet — add the record at your DNS provider.
Email Authentication Records — SPF, DKIM, and DMARC
Three TXT-based DNS records form the backbone of email authentication. If you manage a domain that sends email, these are critical for deliverability:
- SPF (Sender Policy Framework) — Lists the servers authorized to send email for your domain. Missing or overly broad SPF records are one of the most common causes of email going to spam.
- DKIM (DomainKeys Identified Mail) — Adds a cryptographic signature to outgoing emails. The receiving server uses a public key published in your DNS to verify the message was not tampered with.
- DMARC (Domain-based Message Authentication) — Tells receiving servers what to do when SPF or DKIM checks fail. DMARC also enables reporting so you can see who is sending email using your domain.
Use the TXT record lookup in this tool to verify all three are correctly published for your domain.
How DNS Works — A Quick Overview
The Domain Name System is the internet's phone book. When you type a URL into your browser, your device does not know where to find that website. It asks a DNS resolver to translate the human-readable domain name (like example.com) into a machine-readable IP address (like 93.184.216.34). The resolver checks its cache first; if it does not have the answer, it queries the authoritative nameservers for that domain and returns the result.
This entire process — DNS resolution — happens in milliseconds and is invisible to the user. But when it breaks or is misconfigured, websites go down, emails stop arriving, and SSL certificates fail to issue. That is when a DNS lookup tool becomes essential for pinpointing what went wrong.
Frequently Asked Questions
Is this DNS lookup tool free to use?
Why does this tool show different results than my own computer?
What does NXDOMAIN mean?
Why are there no results for a record type I expected?
Can I look up DNS records for a subdomain?
What is the difference between A and CNAME records?
How long does DNS propagation take?
What is the Export All DNS Data button?
Does this tool store or track the domains I look up?
Final Thoughts
DNS is the invisible infrastructure that makes the internet work. When everything is configured correctly, nobody thinks about it. When something breaks — a site goes down, email stops arriving, an SSL certificate fails to issue — DNS is almost always the first place to look. This tool gives you instant, reliable visibility into any domain's DNS configuration so you can diagnose issues, verify changes, and move on.
Looking for other tools? Explore our EMI calculator for loan planning, our calorie calculator for daily nutrition targets, or our BMI calculator to check your body mass index.