DNS Lookup - A, MX, TXT, NS & More

Query DNS records for any domain straight from your browser via secure DNS-over-HTTPS. Check A, AAAA, MX, TXT, NS, CNAME, SOA, and CAA records, or all of them at once.

Look up DNS records without opening a terminal

This DNS lookup tool queries live DNS records for any domain directly from your browser. It supports the eight record types that cover nearly every real-world question: A and AAAA for IPv4 and IPv6 addresses, MX for mail routing, TXT for verification and email policies, NS for delegated nameservers, CNAME for aliases, SOA for zone metadata, and CAA for certificate issuance rules.

Developers use it to verify a deployment points at the right server, email administrators check MX priorities and SPF or DKIM strings in TXT records, and domain owners confirm that nameserver changes have propagated. The query-all button runs all eight lookups in parallel, giving a complete snapshot of a domain's public DNS in about a second.

Queries go over DNS-over-HTTPS to Google Public DNS at dns.google, the same resolver behind the 8.8.8.8 service. Because DoH runs on standard HTTPS, it works from any network without special ports, and responses arrive as JSON with the name, TTL, and data for every record. MX results are sorted by priority, and multi-part TXT strings are joined for readability.

The TTL column tells you how long resolvers cache each answer: a TTL of 300 means changes propagate within about five minutes, while 86400 means up to a day. When migrating a site, lower the TTL in advance, make the change, and confirm the new values here before raising it again. An NXDOMAIN result means the name simply does not exist.

DNS checks pair well with the other web tools on ToolForte: test crawler access with the Robots.txt Tester and validate your page metadata with the Meta Tag Generator. Apart from the DNS query itself, which goes only to Google Public DNS, nothing you type is sent anywhere, and no API key or rate-limited quota stands between you and your next lookup.

How the DNS Lookup Works

  1. 01Enter a domain name; full URLs are accepted and reduced to their hostname automatically.
  2. 02Pick a record type such as A, MX, or TXT, or use the query-all button to fetch all eight common types in parallel.
  3. 03The query is sent over DNS-over-HTTPS to Google Public DNS and answers arrive as structured JSON.
  4. 04Read the results table with name, TTL, and data per record; MX rows are sorted by priority and TXT strings are joined for readability.

Reading DNS Records Like an Administrator

Each record type answers a different question. A and AAAA records map a name to IPv4 and IPv6 addresses, and are the first thing to check when a site points at the wrong server. CNAME shows that a name is an alias for another name, common for www hosts and CDN endpoints; a name with a CNAME cannot carry most other records. MX records route email, and their priority numbers matter: mail is delivered to the lowest number first, with higher values as fallbacks. TXT records carry machine-readable policies, most importantly SPF, DKIM, and DMARC entries that decide whether the world trusts your outgoing email, plus site-verification strings for services like Search Console. NS shows which nameservers are authoritative, SOA exposes zone metadata including the serial number that increments on every change, and CAA whitelists which certificate authorities may issue TLS certificates for the domain. The TTL column is your propagation clock: resolvers cache each answer for that many seconds, so a change to a record with TTL 86400 can take a day to be seen everywhere. Before any migration, lower TTLs in advance, make the change, verify the new values here, and then restore longer TTLs for performance.

When to Use the DNS Lookup

Use it whenever DNS is the suspect: a freshly deployed site shows the old server, email bounces and you need to see MX and SPF records, a TLS certificate will not issue and CAA might be the reason, or a domain transfer requires confirming nameserver changes propagated. It is also the quickest way to verify TXT records after adding site-verification or DMARC entries, and to inspect any public domain's setup when debugging integrations. Since it runs over standard HTTPS, it works from corporate and public networks where classic DNS tools are blocked.

Common Use Cases

  • Verifying that a deployed website's A and AAAA records point at the new server.
  • Checking MX priorities and SPF, DKIM, and DMARC TXT records when email fails.
  • Confirming nameserver changes after a domain transfer with an NS lookup.
  • Auditing a domain's crawl setup together with its robots.txt rules. Robots.txt Tester

Expert Tips

  • Lower TTLs a day before planned DNS changes so the switch propagates in minutes instead of hours.
  • Use the query-all button before and after a migration to capture a full snapshot you can compare.
  • If email deliverability drops, read the TXT records first: a malformed SPF entry silently fails many receivers.

Frequently Asked Questions

What does NXDOMAIN mean?
The domain name does not exist in DNS at all. Check for typos, a missing subdomain, or a recently registered domain whose delegation has not propagated yet.
Why do MX records have priority numbers?
Mail servers try the MX host with the lowest priority number first and use higher numbers as backups. The tool sorts MX answers by priority so the primary mail server is always the top row.
Is this lookup private?
The query goes over encrypted DNS-over-HTTPS directly to Google Public DNS at dns.google, the operator of 8.8.8.8. Nothing else you do on the page is transmitted, and no API key is required.

Related tools

12 suggested

From the blog

Further reading