Free DNS Lookup

01 · Definition

What is dns lookup?

A DNS lookup queries the Domain Name System for a specific record type on any hostname. Choose A to resolve IPv4 addresses, AAAA for IPv6, MX for mail servers, TXT for SPF records and domain verification tokens, CNAME for aliases, NS for nameservers, SOA for zone authority, PTR for reverse lookup, SRV for service discovery, or CAA for certificate authority authorisation. Each record type answers a different question about the hostname.

The tool above submits a live DNS query for the chosen record type and returns every matching record with its TTL. Read the in-depth DNS lookup guide for what each record type means, when to use each one, and common patterns across record types.

02 · Process

How it works

1. 1Enter the hostname.Type the fully qualified domain name you want to query — e.g. example.com or mail.example.com. Wildcards (*.example.com) work for types that support them.
2. 2Choose the record type.Select the DNS record type to query. The most commonly used are A (IPv4), TXT (SPF and verification tokens), MX (mail servers), and CNAME (aliases).
3. 3Submit the query.The tool sends a live DNS query to a resolver. Results reflect the current published state of the DNS zone — not a cached snapshot.
4. 4Read the records.Each returned record shows its data value and TTL (time-to-live in seconds). Lower TTLs mean changes propagate faster; very low TTLs (under 300 seconds) suggest a migration is in progress.

03 · Risk

Why it matters

DNS records are the source of truth for how a domain behaves on the internet. An incorrect A record sends visitors to the wrong server. A missing TXT record means SPF fails. A stale CNAME alias after a migration causes intermittent 404s. A misconfigured CAA record blocks certificate issuance. These are all live production problems — and all visible from a DNS lookup before they become incidents.

For regulated firms, DNS records are also an audit surface. The ability to query and document the DNS state of both your own domains and counterparty domains is part of due diligence — particularly for MX records (inbound mail routing), TXT records (SPF and domain ownership verification), and CAA records (TLS certificate authority authorisation).

04 · Use cases

Common ways to use this tool

• Migration verification. After pointing a domain at a new host, query the A record to confirm the new IP has propagated and the old IP is no longer returned.
• SPF and TXT record audit. Query TXT records to read the published SPF record, domain ownership verification tokens, and any DKIM public keys published at selector._domainkey.yourdomain.com.
• CNAME alias check. Confirm a CNAME is pointing to the intended target — useful for CDN integrations, subdomain redirects, and third-party service connections.
• Nameserver verification. After transferring a domain to a new registrar or DNS provider, query NS records to confirm the new nameservers are live and the old ones are no longer authoritative.

05 · Interpretation

What to check in the result

When reading DNS query results, check:

• Records match expected values. Compare the returned data against what your DNS provider shows in its dashboard. Discrepancies indicate propagation lag or a misconfiguration that was silently overwritten.
• TTL is appropriate for your situation. A TTL of 3600 seconds (one hour) or higher is typical for stable records. If you are about to make a change, lower the TTL to 300 seconds 24 hours beforehand so the change propagates quickly.
• No unexpected records. Extra A records you did not add, TXT records with unknown tokens, or CNAME aliases pointing at third-party services you did not configure are all signs of a misconfiguration or unauthorised change.
• NXDOMAIN vs NOERROR with no answer. A Status 3 (NXDOMAIN) means the hostname does not exist. A Status 0 (NOERROR) with no records means the hostname exists but has no record of that type — these are different states with different causes.