Enter a domain to see its DNS records with their TTLs: A, AAAA, MX, TXT, NS, CNAME, SOA and CAA, one type or all at once. Queries go straight from your browser to a public DNS-over-HTTPS resolver.
Enter a domain and click Look up DNS to see its records.
Advertisement
Advertisement
How to use the DNS Lookup
Type a domain such as example.com. You can also paste a full URL or an email address: the domain is taken from it.
Choose a record type (A, MX, TXT…) or All to query every type at once.
Click Look up DNS or press Enter. Results appear in a few hundred milliseconds with the TTL of each record.
Read the status: NXDOMAIN means the domain does not exist, and No records means the name exists but has no record of that type.
Copy or download the results, or copy the page link to share the same lookup.
DNS record types explained
Type
What it stores
Example value
A
IPv4 address the name points to
93.184.215.14
AAAA
IPv6 address
2606:2800:21f:cb07:6820:80da:af6b:8b2c
CNAME
Alias: this name is another name (cannot coexist with other records on the same name)
www.example.com → example.com
MX
Mail servers with a priority; lower numbers are tried first
Certificate authorities allowed to issue SSL certificates
0 issue "letsencrypt.org"
PTR
Reverse DNS: the hostname for an IP address (looked up under in-addr.arpa or ip6.arpa)
1.1.1.1 → one.one.one.one
Reading the SOA record
The SOA (Start of Authority) record has seven fields. The serial is a version number that must increase whenever the zone changes; many providers use the date format YYYYMMDDnn. Refresh and retry tell secondary name servers how often to check for updates, expire is how long they keep serving the zone if the primary is unreachable, and the last value is the negative cache TTL: how long resolvers remember that a name or record does not exist. The responsible email is written with a dot instead of the @ sign (hostmaster.example.com means [email protected]).
DNS propagation and TTL
DNS changes do not "propagate" by being pushed out. Each resolver keeps a cached answer until its TTL expires, then asks the authoritative name servers again. So after an edit, the worst-case wait is the TTL of the old record (plus the negative cache TTL if the record did not exist before). Tip: lower the TTL to 300 seconds a day before a planned migration, make the change, then raise it again.
This tool queries public DNS-over-HTTPS resolvers (Cloudflare and Google). They follow the same caching rules, so comparing both resolvers is a quick way to see whether a change is visible yet.
Frequently asked questions
What is a DNS lookup?
A DNS lookup asks the Domain Name System for the records stored for a name, such as the IP address a domain points to (A and AAAA), its mail servers (MX), or text records used for email security and verification (TXT).
Which DNS server does this tool use?
It sends DNS-over-HTTPS queries from your browser to Cloudflare's public resolver (1.1.1.1). If Cloudflare cannot be reached it automatically retries with Google Public DNS. You can also pick a resolver yourself. No FreeToolCabin server is involved.
What does TTL mean?
Time To Live is how many seconds a resolver may cache the record before asking again. A TTL of 3600 means changes can take up to an hour to be seen by users whose resolver already cached the old value. Resolvers count the TTL down, so you may see a value lower than the one configured.
Why do I see different results than my own computer?
Your computer uses your ISP's or router's resolver, which may have older cached records, and some domains return different answers by location (geo-DNS and CDNs). After changing DNS, old values stay cached until their TTL runs out.
How do I check SPF and DMARC records?
Look up the TXT records of your domain: the SPF record starts with v=spf1. For DMARC, look up TXT records of _dmarc.yourdomain.com; the record starts with v=DMARC1. This tool labels both automatically.
What is the difference between NXDOMAIN and no records?
NXDOMAIN means the name does not exist at all in DNS. No records (NOERROR with an empty answer) means the name exists but has no records of the type you asked for, for example a domain with an A record but no AAAA record.
What is a CAA record?
A Certification Authority Authorization record lists which certificate authorities may issue SSL/TLS certificates for the domain, for example 0 issue "letsencrypt.org". If no CAA record exists, any CA may issue.