Type a domain name above and click Analyze to get started.
Free DNS lookup, no signup. Enter a domain to see its A, AAAA, MX, NS, TXT, CNAME and SOA records in one search, with the TTL of each record, read live from Cloudflare’s 1.1.1.1 resolver.
Look Up DNS Records for Any Domain
Enter a domain name above to query its complete DNS configuration in real time. Our DNS Lookup Tool checks seven record types simultaneously — A, AAAA, MX, NS, TXT, CNAME, and SOA — using Cloudflare’s DNS-over-HTTPS resolver for fast, reliable, and private results.
Understanding DNS Records
DNS (Domain Name System) is the infrastructure that translates human-readable domain names into the IP addresses and server configurations that computers need to route traffic. Every domain has a set of DNS records that control where its website is hosted, how email is delivered, and what security protocols are in place.
A Records map a domain name to an IPv4 address. This is the most fundamental DNS record — it tells browsers which server to contact when someone visits the domain. Multiple A records can point to different servers for load balancing.
AAAA Records serve the same purpose as A records but for IPv6 addresses. As the internet transitions to IPv6, having AAAA records indicates a modern, forward-looking infrastructure.
MX Records (Mail Exchange) specify which servers handle email for the domain. The priority value determines which server receives email first. If you see MX records pointing to Google (aspmx.l.google.com) or Microsoft (outlook.com), the domain uses Google Workspace or Microsoft 365 for email.
NS Records (Nameserver) identify which DNS servers are authoritative for the domain. Common nameserver providers include Cloudflare, AWS Route 53, Google Cloud DNS, and registrar-provided nameservers.
TXT Records store arbitrary text data and serve multiple purposes. The most important TXT records are SPF records (which authorize email senders), DKIM records (which verify email authenticity), and domain verification records for services like Google Search Console and Microsoft 365.
CNAME Records (Canonical Name) create aliases that point one domain name to another. They’re commonly used for subdomains — for example, pointing “www” to the root domain, or pointing “blog” to a hosting platform.
SOA Records (Start of Authority) contain administrative information about the DNS zone, including the primary nameserver, the email of the domain administrator, and timing parameters for DNS record refresh intervals.
How to Read Your DNS Lookup Results
Most problems show up as a record that is missing, not one that is wrong. Check these five things first:
- No A or AAAA record: the root domain doesn’t point to any server, so the website won’t load.
- No MX record: the domain can’t receive email. Mail sent to it bounces.
- No TXT record starting with
v=spf1: the domain has no SPF record, so receiving servers can’t tell which servers may send its mail. - More than one TXT record starting with
v=spf1: that is an error. A domain must publish only one SPF record, or SPF checks fail. - Nameservers you don’t recognise: the NS records decide where every other record is managed. If they point to an old provider, changes you make elsewhere have no effect.
The TTL column is how long, in seconds, resolvers may cache a record. A TTL of 3600 means a change can take up to an hour to show up for someone who looked the record up just before you changed it.
MX, TXT and CNAME Lookups
MX lookup
MX records list the mail servers for a domain, each with a priority number. Lower numbers are tried first. The server names usually give away the email provider: aspmx.l.google.com is Google Workspace, *.mail.protection.outlook.com is Microsoft 365.
TXT lookup
TXT records hold the SPF record (v=spf1 …) and verification strings for services like Google Search Console. This tool reads the TXT records on the root domain. DMARC lives on its own name, _dmarc.example.com, and DKIM keys live on selector._domainkey.example.com. Our Domain Reputation Checker tests SPF and DMARC together.
CNAME lookup
A CNAME makes one name an alias of another. An empty CNAME result on a root domain is normal: DNS doesn’t allow a CNAME at the root, so root domains use A records. CNAMEs show up on subdomains such as www or shop.
What This Lookup Doesn’t Show
The lookup queries the name you enter, for seven record types. It doesn’t list subdomains, and it doesn’t query CAA, PTR or DKIM records. DKIM can’t be looked up without knowing the selector name the email provider chose. Results come from one public resolver, so right after a change you may still see the old value until its TTL runs out.
Common Use Cases
Troubleshooting email delivery issues is one of the most common reasons to check DNS records. If emails aren’t arriving, the MX records may be misconfigured or missing entirely. Verifying SPF and DKIM records in the TXT records helps diagnose authentication failures that cause emails to land in spam.
Web developers check A records and CNAME records when migrating a website to a new host or setting up a CDN. Pointing DNS to the wrong IP address is one of the most common causes of website downtime after a hosting change.
Security audits start with DNS. Our SSL Certificate Checker verifies HTTPS encryption, while the Domain Reputation Checker uses DNS data to assess email authentication and overall domain health. For historical context, the Domain Age Checker reveals how long a domain has been registered.
How Many Domains Lack MX, SPF or DMARC?
Of 47 domains checked here in the last 30 days, 38% had MX, SPF and DMARC all set; 62% were missing at least one of them.
From this site's own log of checks, 30 days, each domain counted once with its latest result. 3 checks that ended in an error are left out. Updated 25 Oct 2026. Domains are never shown.
Frequently Asked Questions
How do I look up the DNS records of a domain?
Enter the domain in the box at the top of this page. The tool queries A, AAAA, MX, NS, TXT, CNAME and SOA records at once through Cloudflare’s 1.1.1.1 resolver and lists every record with its TTL. No signup.
How do I check a domain’s MX records?
Run a DNS lookup on the domain and read the MX rows. Each shows a priority number and a mail server. No MX rows means the domain can’t receive email.
How do I find a domain’s SPF record?
Look at the TXT rows for one that starts with v=spf1. That is the SPF record. A domain should have exactly one. If there are two, SPF checks fail.
Why does my DNS change not show up yet?
Resolvers cache each record for its TTL. If the old record had a TTL of 3600 seconds, a resolver that cached it can keep serving it for up to an hour after your change.
Why is there no CNAME record for my root domain?
DNS doesn’t allow a CNAME at the root of a domain, so root domains use A and AAAA records. CNAMEs appear on subdomains like www.
Does this DNS lookup show DKIM or DMARC?
Not in the records table. DMARC sits at _dmarc.yourdomain and DKIM at a selector name only your email provider knows. The Domain Reputation Checker tests SPF and DMARC for you.