DNS Lookup & Analysis Tool

Query DNS records, check email security (SPF/DMARC/DKIM), run reverse DNS lookups, detect hosting infrastructure, and check SSL certificates — all in one place.

Enter a domain name, select a record type, then click Lookup.

Tip: Use "Fetch All Records" to see everything at once.

How to Use the DNS Lookup & Analysis Tool

Enter a domain — Type example.com or any domain into the search field.
Select record type — Choose from A, AAAA, CNAME, MX, TXT, NS, SOA, SRV, CAA, or PTR. Click Lookup for a single type, or "Fetch All Records" to see everything at once.
Check DNS Health — Switch to the DNS Health tab to see SPF, DMARC, DKIM, DNSSEC, and CAA analysis. Green means configured, red means missing.
Run a reverse lookup — Switch to the Reverse DNS tab and enter an IP to find its PTR record (e.g. 8.8.8.8 → dns.google).
Detect infrastructure — Switch to the Infrastructure tab to identify hosting, CDN, DNS, and email providers from DNS records.

When I migrate hosting, I check A records first. A missing MX record means email silently stops working — I learned that the hard way after wondering why nobody got my emails for two days.

What Is a DNS Lookup?

A DNS lookup (or DNS resolution) is the process of converting a human-readable domain name like example.com into a machine-readable IP address, or retrieving other DNS records associated with the domain. The Domain Name System (DNS) acts like the phonebook of the internet — it tells your browser which server to connect to when you type a domain name.

DNS Record Types

A (Address) — Maps a domain to an IPv4 address
AAAA (IPv6 Address) — Maps a domain to an IPv6 address
CNAME (Canonical Name) — Aliases one domain to another
MX (Mail Exchange) — Specifies mail servers for the domain
NS (Name Server) — Lists authoritative name servers
TXT (Text) — Stores arbitrary text, often for email security (SPF, DKIM, DMARC)
SOA (Start of Authority) — Contains admin info about the DNS zone
SRV (Service) — Specifies services like SIP or LDAP
CAA (Certification Authority Authorization) — Restricts which CAs can issue SSL certificates
PTR (Pointer) — Maps an IP address to a domain name (reverse DNS)

Features

DNS Health Check — Automatically analyzes SPF, DMARC, DKIM, DNSSEC, CAA, and MX records. Detects misconfigurations like multiple SPF records.
All Records Mode — Fetches A, AAAA, CNAME, MX, TXT, NS, SOA, SRV, and CAA in a single click.
Reverse DNS — Enter any IP to find its PTR record. Useful for email server verification and network diagnostics.
Infrastructure Detection — Identifies hosting providers (Cloudflare Pages, Vercel, Netlify, AWS), email providers (Google Workspace, Microsoft 365), and DNS providers.
WHOIS & SSL — Quick access to domain registration dates and SSL certificate details.
Copy & Export — Copy individual record values, export as JSON, or copy dig commands.

How to Use DNS Lookup Results

Each query returns the raw DNS records for the domain you entered. A quick way to verify DNS setup: check the A or AAAA records match your server's IP, confirm MX records point to your email provider, and review TXT records for SPF, DKIM, and DMARC — the three email authentication records that prevent spoofing.

I check my own domain's records whenever I migrate hosting or switch email providers. A missing MX record means email silently stops working — I learned that one the hard way after switching providers and wondering why nobody was getting my emails for two days.

If you're troubleshooting slow load times, check whether the domain has both A and AAAA records. Browsers try IPv6 first and fall back to IPv4. Missing one of them means some visitors take longer than necessary to connect.

Frequently Asked Questions

What is DNS propagation?

DNS propagation is the time it takes for DNS record changes to spread across all DNS servers worldwide. When you update a record, your authoritative nameserver reflects the change immediately, but cached copies on other DNS servers may take hours or days to refresh. Typical propagation takes 24-48 hours, but TTL (Time To Live) settings control how long records are cached.

What does TTL mean in DNS?

TTL (Time To Live) is a value in seconds that tells DNS resolvers how long to cache a record before requesting a fresh copy. A TTL of 3600 (1 hour) means resolvers will reuse the cached result for an hour. Lower TTLs (300 seconds) are useful when you expect to make changes soon. Higher TTLs (86400 = 1 day) reduce DNS query load for stable records.

How does DNS lookup work step by step?

When you query a domain, the resolver first checks its cache. If not found, it asks the root nameserver, which directs it to the TLD nameserver (.com, .org, etc.), which then directs it to the domain's authoritative nameserver. The authoritative server returns the requested record type, and the resolver caches and returns the result to you. This entire process typically completes in milliseconds.

Why would I check DNS records for my domain?

Common reasons include verifying that DNS changes have propagated after updating hosting or email providers, checking SPF/DKIM/DMARC records for email deliverability, troubleshooting why a website or email service isn't working, and auditing the security configuration of your domain.

What is the difference between authoritative and recursive DNS?

An authoritative DNS server holds the actual DNS records for a domain and can provide definitive answers. A recursive DNS server (like Cloudflare 1.1.1.1 or Google 8.8.8.8) queries authoritative servers on your behalf and caches the results. This tool queries authoritative servers via DNS-over-HTTPS APIs from your chosen resolver.

Can DNS affect website speed?

Yes. DNS resolution time is part of the total page load time. A slow DNS provider can add 20-100ms to every request. Using a fast recursive resolver like Cloudflare 1.1.1.1 or Google 8.8.8.8 can reduce DNS lookup times. Additionally, using a CDN with globally distributed nameservers can improve resolution speed for visitors around the world.

What is DNS-over-HTTPS (DoH)?

DNS-over-HTTPS encrypts DNS queries using HTTPS, preventing eavesdropping and manipulation of DNS traffic by ISPs or attackers on the same network. This tool uses Cloudflare's DNS-over-HTTPS API, keeping your queries private.

What is a reverse DNS lookup?

A reverse DNS lookup maps an IP address back to a domain name using PTR (Pointer) records. It is commonly used for email server verification (to check that the sending server's IP matches its domain), network diagnostics, and security logging. Use the Reverse DNS tab in this tool to look up PTR records for any IP.

What is a DNS health check?

A DNS health check analyzes your domain's SPF, DMARC, DKIM, DNSSEC, CAA, and MX configuration. SPF prevents email spoofing by authorizing specific senders. DMARC tells receiving servers how to handle unauthenticated email. DKIM adds a cryptographic signature to outgoing mail. CAA restricts SSL certificate issuance. The DNS Health tab shows all of these at a glance.