Skip to main content
ShieldMarc
100% free, no sign-up needed

Free DNS Lookup Tool

Enter any domain below to instantly query its DNS records. View A, AAAA, MX, TXT, NS, SOA and SRV records. Choose a specific type or look up everything at once.

New to DNS? Read our DNS Record Types Explained guide for a full explanation.

What Are DNS Records?

DNS (Domain Name System) records are instructions stored on authoritative nameservers that tell the internet how to handle requests for your domain. Each record type serves a different purpose, from routing web traffic to the correct IP address (A/AAAA) to specifying mail servers (MX) and verifying domain ownership (TXT).

DNS Record Types Explained

TypePurpose
AMaps a domain to an IPv4 address
AAAAMaps a domain to an IPv6 address
MXSpecifies mail servers and priority for email delivery
TXTStores text data, often used for SPF, DKIM, DMARC and domain verification
NSLists the authoritative nameservers for the domain
SOAStart of Authority. Contains zone admin details, serial number and timing parameters
SRVService locator for SIP, XMPP and other service discovery

Why Should You Check DNS Records?

  • Troubleshoot email delivery: Incorrect MX or TXT records (SPF/DKIM) are the #1 cause of emails landing in spam.
  • Verify domain configuration: After migrating hosting or DNS providers, confirm records propagated correctly.
  • Security auditing: Review TXT records for SPF, DMARC, and DKIM alignment to prevent spoofing.
  • Debug website issues: Confirm A/AAAA records point to the right server.
  • Monitor for unauthorized changes: Detect when records are modified unexpectedly, which can be a sign of DNS hijacking.

How This Tool Works

Our DNS lookup tool queries authoritative DNS resolvers in real-time. Results are returned instantly - no software to install, no sign-up required. Select “ALL” to query every record type at once, or pick a specific type for a focused lookup.

How to Read DNS Records

When you run a DNS lookup, each record contains several fields. Here is how to interpret the most important ones:

  • TTL (Time to Live): How long (in seconds) a resolver should cache this record before re-querying. A TTL of 3600 means the record is cached for 1 hour.
  • Priority (MX records): A number indicating preference. Lower numbers are tried first. If your primary mail server (priority 10) is unavailable, the sender tries the next server (priority 20).
  • TXT values: Text strings often containing SPF rules (starting with v=spf1), DMARC policies (starting with v=DMARC1), or domain verification tokens from third-party services.
  • NS records: Show which nameservers are authoritative for your domain. If these point to the wrong provider, none of your other records will work correctly.

Need Automated DNS Monitoring?

This free tool is perfect for quick lookups. If you manage multiple domains and need continuous DNS change detection, propagation alerts, and a unified dashboard for your IT team, join the early access list for up to 90 days free.

Want the full picture?

Our Security Grade scans DNS records alongside DMARC, SPF, SSL/TLS, DNSSEC, registration, and expiry across your primary and alternate brand domains in one click.

Frequently Asked Questions

How long does DNS propagation take?

DNS propagation typically takes between 5 minutes and 48 hours, depending on the TTL (Time to Live) of the previous record. Most changes propagate within 1 to 4 hours. You can verify propagation by querying different DNS resolvers.

Why do my DNS records show different results on different tools?

Different DNS lookup tools may query different resolvers, which may have cached older versions of your records. If you recently changed a record, some resolvers will still show the old value until the TTL expires. Our tool queries authoritative resolvers for the most current results.

What is the difference between A and AAAA records?

A records map a domain to an IPv4 address (e.g. 93.184.216.34). AAAA records map a domain to an IPv6 address (e.g. 2606:2800:220:1:248:1893:25c8:1946). Modern best practice is to publish both for full internet compatibility.

How do I check if my MX records are correct?

Use this tool to look up MX records for your domain. The results should show your mail provider's servers (e.g. aspmx.l.google.com for Google Workspace). If no MX records appear, email delivery to your domain will fail. Priority numbers determine which server is tried first (lower = higher priority).