DNS lookup.
A free DNS lookup tool and
DNS checker — run a full
DNS record lookup and
check DNS records for any
domain. Queries A, AAAA, MX, TXT, NS, SOA, CNAME, CAA and DS records in
parallel, like dig,
but in your browser, in one click.
No signup · runs in your browser · also try our MX lookup, blacklist checker and SPF/DKIM/DMARC checker.
How to check a domain's DNS records in 3 steps
- 1
Enter the domain in the box above (e.g.
example.com) and click Look up DNS. - 2
Read the records. Each record type — A, AAAA, MX, TXT, NS, SOA, CNAME, CAA and DS — comes back in its own card with the TTL (cache lifetime) shown for every value.
- 3
Check the configuration matches what you expect. Missing MX, leftover A records or absent SPF/DMARC in TXT are classic signs of a domain that needs attention.
Common DNS record types
Not sure what you're looking at? Here's what each common DNS record type does, with an example of how it looks.
| Record | What it does | Example |
|---|---|---|
| A | Maps a hostname to an IPv4 address — the host that answers when someone visits the site. | 93.184.216.34 |
| AAAA | Maps a hostname to an IPv6 address. The IPv6 equivalent of an A record. | 2606:2800:220:1:248:1893:25c8:1946 |
| CNAME | Aliases one name to another canonical name. Common on subdomains pointing to a CDN. | www → cdn.example.net |
| MX | Mail exchanger — which servers receive email for the domain, and in what priority order. | 10 aspmx.l.google.com |
| TXT | Free-form text. SPF, DKIM and DMARC policies all live here, plus domain-ownership proofs. | v=spf1 include:_spf.google.com ~all |
| NS | Authoritative nameservers — which servers run DNS for the domain. | ns1.cloudflare.com |
| SOA | Start of Authority — primary nameserver, zone serial and refresh/expiry timers. | ns1… hostmaster… 2026060101 … |
| CAA | Restricts which certificate authorities may issue TLS certs for the domain. | 0 issue "letsencrypt.org" |
Note: SPF, DKIM and DMARC are not their
own record types — they all live inside
TXT
records. Use our
SPF/DKIM/DMARC checker
to validate those specifically.
What this checks
A / AAAA — IPv4 / IPv6 addresses the domain resolves to. The actual hosts that answer when someone visits the site.
MX — mail exchanger records. Which mail servers receive email for this domain, and in what priority order.
TXT — free-form text records. This is where SPF, DMARC verification keys, domain ownership proofs and dozens of vendor-specific tags live. Often the noisiest record type and a goldmine for understanding how a domain is set up.
NS / SOA — authoritative nameservers and the primary zone metadata (serial, TTLs, refresh). Tells you who runs DNS for the domain and when the zone was last updated.
CNAME — canonical-name
aliases. Common on subdomains like
www
pointing to a CDN or load balancer.
CAA — Certification Authority Authorization. Restricts which CAs can issue TLS certs for the domain. A missing CAA record means any CA may issue — which is fine for most, but high-security setups should pin to specific CAs.
DS — DNSSEC delegation signer. If you see DS records, DNSSEC is enabled at the parent zone and the chain of trust is at least partially configured.
Privacy
Lookups happen in your browser via Cloudflare's public DNS-over-HTTPS endpoint. Edos Solutions doesn't log the domains you check, doesn't run any analytics on this page, and doesn't capture your IP.
Common DNS problems we fix
A DNS lookup often surfaces issues that quietly break a site or its email. The ones we see most:
Missing or incorrect records
No MX means no mail. A pointing at an old host means a dead site. We audit the whole zone and fix what's wrong or absent.
Propagation & TTL confusion
Changes that "won't take effect" are usually high TTLs still cached. We set sensible TTLs and stage changes so cutovers are clean.
Dangling CNAME records
A CNAME pointing to a decommissioned service is a broken page at best — and a subdomain-takeover risk at worst. We find and retire them.
No CAA record
With no CAA record, any certificate authority can issue a TLS cert for your domain. We pin issuance to the CAs you actually use.
Need your DNS and mail infrastructure managed?
Edos Solutions runs DNS, mail and security infrastructure for Australian organisations — correct records, sane TTLs, DNSSEC, CAA and authentication, monitored and kept right.
References
- RFC 1035, the DNS specification covering record types and resolution.
- Cloudflare: What is DNS?, a plain-English explainer.
Frequently asked questions
- What is a DNS lookup?
- A DNS lookup queries the Domain Name System to retrieve records associated with a domain — IP addresses, mail servers, authoritative nameservers, cryptographic keys, and other configuration. This tool queries nine record types simultaneously, the same way a mail server or browser would, and shows you the raw results with TTLs.
- What record types does this tool check?
- A (IPv4 address), AAAA (IPv6 address), MX (mail servers), TXT (free-form records including SPF and DMARC), NS (authoritative nameservers), SOA (zone metadata), CNAME (aliases), CAA (certificate authority restrictions), and DS (DNSSEC delegation signer). All nine are queried in parallel.
- What is TTL in DNS?
- TTL (Time to Live) is the number of seconds resolvers are allowed to cache a DNS record. A TTL of 300 means resolvers cache the answer for 5 minutes before re-querying. Short TTLs (60–300s) make changes propagate quickly but increase DNS query load. Long TTLs (3600–86400s) are more efficient but mean changes take longer to reach the internet.
- Why are my DNS changes slow to propagate?
- DNS propagation is bounded by TTL. If your record had a TTL of 3600 before you made the change, resolvers that cached the old answer won't re-query for up to an hour. The global propagation window is roughly equal to the old record's TTL. To speed up future changes, lower the TTL to 300 before making the change, wait for the old TTL to expire, then make the change.
- How do I check the DNS records for my domain?
- Type your domain into the box above and click "Look up DNS". This free DNS checker queries live DNS in your browser and returns A, AAAA, MX, TXT, NS, SOA, CNAME, CAA and DS records in parallel, with the TTL shown for each — no dig, command line or signup required. You can also share the result by adding ?domain=yourdomain.com to the page URL.