Free tool · no sign-up

Free DNS lookup

See the DNS records the rest of the internet sees for any domain — A, AAAA, MX, TXT, NS, CNAME, SOA and CAA — or the reverse DNS (PTR) of an IP address. Queried live on public resolvers, with each record type explained in plain words.

You can also paste a URL or an e-mail address — we extract the host name. A “www.” prefix is kept, because it is a different name in DNS.

Record types

For an IP address we look up its reverse DNS (PTR) automatically.

Free lookups left today: 100

How this DNS lookup works

  1. 1

    Enter a name or an IP

    Type a domain, a subdomain or an IP address. Pasted URLs and e-mail addresses are cleaned up for you.

  2. 2

    Live public resolvers

    We query Cloudflare (1.1.1.1) and Google (8.8.8.8) in real time, so you see what other servers on the internet see — not what your own network caches.

  3. 3

    Readable results

    Each record type comes with its status and a short explanation. SPF, DMARC and DKIM records are highlighted, with a link to check them in depth.

DNS record types explained

A domain is more than a website: its DNS zone also decides where its e-mail goes, who may send on its behalf and which certificates are valid.

A

Address record (IPv4)

Maps a name to one or more IPv4 addresses, e.g. example.com → 203.0.113.10. Browsers use it to reach a website, and mail servers use it as a fallback when a domain has no MX record.

AAAA

Address record (IPv6)

The IPv6 equivalent of the A record. A name can have both; clients that support IPv6 usually prefer it.

MX

Mail exchanger

Lists the servers that accept e-mail for the domain, each with a priority — the lowest number is tried first. Without a working MX record, a domain cannot reliably receive replies or bounces.

TXT

Text record

Holds free text. It carries SPF policies (v=spf1 …), ownership proofs for Google, Microsoft and others, and — at special names such as _dmarc and selector._domainkey — DMARC and DKIM.

NS

Name server

Names the servers that are authoritative for the zone, i.e. where its records are actually managed. Changing NS records moves your whole DNS to another provider.

CNAME

Canonical name (alias)

Makes one name an alias of another, e.g. www.example.com → example.netlify.app. A name with a CNAME cannot hold other records, which is why the root of a domain normally uses A records instead.

SOA

Start of authority

One per zone: the primary name server, the administrator’s mailbox (written with a dot instead of @), the serial number and the timers that control how secondaries and caches refresh.

CAA

Certification Authority Authorization

Says which certificate authorities may issue TLS certificates for the domain, e.g. 0 issue "letsencrypt.org". With no CAA record, any public CA may issue.

PTR

Pointer (reverse DNS)

Maps an IP address back to a host name. Mail servers check it: an IP that sends e-mail should have a PTR whose name resolves back to the same IP (forward-confirmed reverse DNS).

Why you may see different results elsewhere

DNS answers are cached for the time set in each record’s TTL (time to live). After you change a record, resolvers that cached the old value keep returning it until the TTL expires — from a few minutes to 48 hours for long TTLs. This is what people call “DNS propagation”.

This tool asks public resolvers directly, so it reflects what most of the internet sees. Our own results are cached for 5 minutes; if you just made a change, wait a little and look again.

Frequently asked questions

Is this DNS lookup free?

Yes. You can run 100 lookups a day without an account (shared with the MX lookup). The tool only reads public DNS records.

Which DNS servers does the tool use?

Public resolvers from Cloudflare (1.1.1.1) and Google (8.8.8.8). That shows what the rest of the internet sees, independently of the DNS cache of your own computer or network.

What does “Domain not found” (NXDOMAIN) mean?

The name does not exist in DNS at all — no record of any type. Usually it is a typo, an expired domain or a subdomain that was never created. “No record” is different: the name exists but has no record of that particular type.

How do I find a domain’s SPF record?

Look at the TXT records: the SPF policy is the one that starts with v=spf1, and a domain must have only one. We highlight it in the results. To check it against the 10-lookup limit and see whether DKIM and DMARC are in place, use the free SPF, DKIM and DMARC checker.

Why can’t I see the DMARC or DKIM record of a domain?

They live at special names, not at the domain itself: DMARC at _dmarc.example.com and DKIM at selector._domainkey.example.com. Look up those names directly (as TXT), or use our DKIM checker, which tries the common selectors for you.

How long do DNS changes take to show up?

Up to the record’s previous TTL. Many providers use 5 minutes to 1 hour; some records have TTLs of 24 hours or more. Our results are cached for 5 minutes.

Can I look up an IP address?

Yes. For an IPv4 or IPv6 address the tool returns its reverse DNS (PTR) record — the host name the owner of the IP has assigned to it. Mail servers expect sending IPs to have one.

Why does www.example.com show different records from example.com?

They are two different names in DNS. The www name is often a CNAME pointing to a hosting or CDN provider, while the root holds the MX, SPF and verification records.

Healthy domain + clean list = inbox

A free account gives you 200 credits (10 for free-provider e-mails) to validate lists in bulk, through the REST API or in real time on your forms.

Create free account — 200 credits

No credit card. Credits never expire.