DNS Lookup
Free DNS lookup. Check A, AAAA, MX, TXT, NS, CNAME, and CAA records for any domain, queried live via DNS-over-HTTPS. See exactly what a domain publishes. No account needed.
3 free lookups per day. No signup needed.
What this DNS lookup checks
DNS records are the routing table for a domain: which server answers for it, where its email goes, which providers are authorized to issue certificates for it, and which nameservers are in charge of the whole zone. This tool queries a domain's A, AAAA, MX, TXT, NS, CNAME, and CAA records live via DNS-over-HTTPS and shows exactly what's published right now, the same records a browser or mail server would see.
How to check DNS records
- 1Enter the domain (for example, example.com) and run the lookup.
- 2We query the records live over DNS-over-HTTPS, no waiting on your local cache.
- 3You see every A, AAAA, MX, TXT, NS, CNAME, and CAA record the domain publishes right now.
How a DNS lookup resolves
A DNS lookup asks a resolver for a domain's records; the resolver in turn asks the domain's authoritative nameservers, which hold the real answers. Because this tool queries live over DNS-over-HTTPS, you see what is published at the source, not a stale value cached on your own machine or network.
DNS record types explained
Each record type does one job. A and AAAA point the domain at a server, MX routes its mail, NS delegates the zone to nameservers, TXT carries SPF and verification strings, CNAME aliases one name to another, and CAA limits which certificate authorities can issue certificates for the domain.
Frequently asked
What is a DNS lookup?
It queries a domain's nameservers for its DNS records: A/AAAA for where it points, MX for mail routing, TXT for verification and SPF/DKIM, NS for who provides its DNS, CNAME aliases, and CAA for which certificate authorities may issue certificates for it.
What is a CAA record?
It lists which certificate authorities are allowed to issue SSL/TLS certificates for a domain. Without one, any public CA can issue a certificate for it; with one, only the named CAs can.
Why did my DNS records change and I didn't do it?
A/AAAA can rotate legitimately for load balancing without anything being wrong. NS, MX, and CAA changing unexpectedly is more significant, since those three control who answers for the domain, who routes its mail, and who can issue certificates, and can indicate a compromise.
How do I check a domain's DNS records?
Enter the domain above and run the DNS lookup. This DNS checker queries the domain live over DNS-over-HTTPS and shows its A, AAAA, MX, TXT, NS, CNAME, and CAA records exactly as they are published right now.
Which DNS records should I check?
A and AAAA show where the site is hosted, MX where mail is routed, NS which nameservers are in charge, TXT holds SPF and verification, and CAA controls certificate issuance. Unexpected NS, MX, or CAA changes matter most.
How long do DNS changes take to propagate?
Up to the record's TTL, from a few minutes to 48 hours, so a change may not appear everywhere at once. To watch it roll out, use the DNS Propagation Checker.
Related tools: Domain Expiry Checker ·Whois Lookup ·SSL Certificate Checker
Read more: what ongoing DNS monitoring covers
A quiet DNS change can hijack a domain.
This shows DNS records once. Expiroo watches them for you and flags the changes that matter, nameservers, mail routing, and certificate authorities, and alerts you by email, Telegram, WhatsApp, or webhook.
Start monitoring for freeNo charge during your 7-day trial.