Check DNS records for any domain — A, AAAA, MX, CNAME, TXT, NS, SOA and more. Results direct from authoritative DNS.
Every domain name has to be translated into an address a machine can route to, and DNS is the system that does it. A DNS lookup asks the domain's authoritative nameservers what they currently publish for a given record type — the address a site resolves to, where its mail is delivered, which services it has verified. This tool queries live, so you see what resolvers are being told right now rather than a cached snapshot.
Ten types are queryable here. The ones you will reach for most:
| Type | What it holds | Check it when |
|---|---|---|
| A | IPv4 address | A site points to the wrong server after a migration |
| AAAA | IPv6 address | Only some visitors can reach the site |
| MX | Mail servers, with priority | Email stops arriving |
| TXT | SPF, DKIM, DMARC, verifications | Mail lands in spam, or a service won't verify |
| CNAME | Alias to another name | A subdomain resolves unexpectedly |
| NS | Authoritative nameservers | A registrar transfer looks incomplete |
| CAA | Which CAs may issue certificates | Certificate issuance is refused |
Each row shows the value and a TTL — how long resolvers are permitted to cache that answer. TTL is the number that explains most "I changed it but nothing happened" problems: if a record had a 24-hour TTL, resolvers that already cached the old value will keep serving it until it expires, no matter what your registrar now shows. Before a planned migration, drop the TTL to a few minutes a day ahead, then raise it afterwards. An empty result means the domain publishes nothing for that type, which is normal for many records and is not an error.
This tool queries one record type at a time, which keeps results readable and gives you a shareable URL for a specific query. If you would rather audit a domain's entire DNS configuration in a single pass, use the DNS Record Checker, which returns every type together. For diagnosing whether your own resolver is leaking, see the DNS Leak Test, and for mail-specific records the SPF & DMARC Checker validates them properly.