Free tool
DNS lookup
See every record behind a domain, explained: where the site lives, where mail goes, who runs the nameservers, which certificate authorities may issue, and whether DNSSEC is set up. Free, no sign-up.
We query public DNS only. Nothing is sent to the domain itself, and no email address is needed.
What each record does
A and AAAA
Where the name points: the IPv4 and IPv6 addresses a browser connects to.
CNAME
An alias: this name is really that other name. It cannot sit at the top of a domain without a provider flattening it.
MX
Where mail for the domain is delivered, in priority order. No MX means no incoming mail.
NS and SOA
Which nameservers answer for the domain and the zone's authority record. We also ask every nameserver whether they agree.
TXT
Text records: SPF, DMARC, and the verification tokens services ask you to add. Two SPF records break SPF.
CAA
Which certificate authorities may issue certificates for the domain. A cheap lock most domains do not have.
DNSSEC
Whether answers for the domain are signed and validate. A broken chain makes the domain vanish for validating resolvers.
PTR (reverse DNS)
What name an IP address maps back to, and whether that name points forward again. Mail servers check this.
About the lookup
Is it really free?
Yes. There is no sign-up and no email address to give. There is a limit on lookups per hour from one connection so the tool stays fast for everyone.
Why does it say "not checked"?
A DNS server did not answer in time. We never guess, and we never call a record absent when we could not read it. Try again in a minute.
I just changed a record and it still shows the old one.
Resolvers cache answers for the record's TTL, and "no such record" answers for the zone's negative TTL. There is no "propagation"; caches expire. The SOA card shows the negative TTL.
What does "the nameservers disagree" mean?
Each nameserver for the domain was asked for the zone serial and they returned different numbers. A recent change has not reached every server yet, or one server is stale. If it lasts more than a day, the zone transfer between them is broken.
Can you fix what it found?
For businesses whose website we build and host, yes: DNS management is part of the service, and Email Deliverability covers the email records. Talk to us.
Still have questions? We are happy to walk through your domain with you.
DNS you never have to think about
We manage DNS for every website we build and host, and watch the email records every day.