DNS Lookup Tool
Perform advanced DNS lookups for any domain. Find A, AAAA, MX, CNAME, TXT, and SOA records directly from authoritative servers. Bypasses client caches.
Ready to lookup DNS records
Enter a domain name above and click "Lookup" to check DNS records across 28 global servers.
Why Trust Our Network Tools?
Built according to rigorous E-E-A-T (Experience, Expertise, Authoritativeness, and Trustworthiness) standards.
100% Free & Accurate
Our tools provide unrestricted, lifetime-free access to authoritative DNS servers worldwide, completely bypassing deceptive ISP caches.
Privacy First & Secure
All sensitive computations like password generation and hashing occur 100% locally in your browser. No data is ever transmitted, logged, or stored on our servers.
Used by the Experts
Reliably trusted by thousands of sysadmins, DevOps engineers, and network professionals daily for pinpoint diagnostic accuracy.
Advanced DNS Lookup Tool
Our free DNS lookup tool performs deep-level querying of your domain's authoritative zone files. Whether you need to verify DMARC policies for email deliverability, compare AAAA and A record performance, or debug why a DNS lookup shows SERVFAIL, this tool instantly queries authoritative nameservers to give you raw, unfiltered domain configurations.
Comprehensive Record Audits
Resolve A, AAAA, MX, CNAME, TXT, NS, and SOA records to ensure your entire web and email infrastructure is mapped correctly.
Query Authoritative Sources
Standard DNS lookups often provide cached data. This tool queries authoritative nameservers directly for the absolute 'source of truth'.
Verify Email Deliverability
Validate SPF, DKIM, and DMARC configurations within TXT records to ensure your legitimate emails reach the inbox.
Compare AAAA and A Records
Dual-stack architectures require perfect alignment between IPv4 (A) and IPv6 (AAAA). Verify your modern cloud configurations.
A DNS lookup queries authoritative nameservers to reveal the exact routing configurations for a domain. By checking records like A (IPv4), AAAA (IPv6), MX (Email), and TXT (Security), network administrators can verify infrastructure setup, troubleshoot email bouncing, and ensure web traffic is routed to the correct hosting provider.
What is this tool?
This tool is a direct line to the internet's phonebook. It skips local caches and asks the master servers exactly what rules are set up for a domain's website, email, and security.
How to use it
- Type the domain name into the search bar.
- Select the specific record type you need (like TXT for security rules or A for the main server).
- Hit 'Lookup' to fetch the raw, unfiltered data directly from the authoritative source.
- Review the results table for IP addresses, TTLs (Time to Live), and raw text values.
Real-World Use Cases
- Verifying that a new SSL certificate is pointing to the correct server IP.
- Checking the exact DMARC policy string to debug why emails are landing in spam.
- Confirming that a CNAME alias is properly routing to a service like Shopify or Vercel.
Example Outputs
Querying a TXT record might output: 'v=spf1 include:_spf.google.com ~all', confirming Google is authorized to send emails on your behalf.
How to Check DKIM TXT Records Online Free
Email spoofing and phishing have fundamentally changed how strict mail providers (like Gmail and Yahoo) handle inbound messages. If you don't aggressively authenticate your domain, your emails will bounce.
To check your DKIM (DomainKeys Identified Mail) infrastructure using this DNS Lookup tool, you cannot simply query your root domain. DKIM records are stored at specific cryptographic selectors. You must enter the domain format as [selector]._domainkey.yourdomain.com and select 'TXT' as the record type.
A valid DKIM query will return a long string beginning with v=DKIM1; k=rsa; p=.... If the string is fragmented or missing, your mail service provider's cryptographic signing will fail, leading to heavy spam classification.
Why Does My DNS Lookup Show SERVFAIL?
Encountering a SERVFAIL (Server Failure) error during a DNS lookup is a critical red flag indicating that the recursive resolver could not communicate with the authoritative nameserver, or the data received was severely corrupted.
The leading modern cause of SERVFAIL is Broken DNSSEC (DNS Security Extensions). If a domain registrar holds a Delegation Signer (DS) record, but the actual nameservers (like Cloudflare or AWS Route 53) are not signing the zone properly, resolver policies actively block the resolution to protect users from hijacking.
Other common causes include an outright outage at your DNS hosting provider, aggressive firewall rules blocking UDP port 53 traffic, or a syntax error in your zone file (such as a missing trailing dot in an NS record).
Understanding Important DNS Record Types
A vs AAAA Records: When you compare AAAA and A record performance, the AAAA (IPv6) record often yields faster connection times on modern 5G cellular networks. Ensuring both are configured correctly guarantees compatibility for legacy and modern clients alike.
CNAME Restrictions: A CNAME (Canonical Name) cannot coexist with any other record type at the same specific hostname. This is why you mathematically cannot place a CNAME on the root apex (e.g., example.com) and must use A records or an ALIAS/ANAME record provided by premium DNS hosts.
Common DNS Lookup Record Formats
| Record Type | Strategic Use Case |
|---|---|
| A (IPv4) | The backbone of the old internet. Points the domain to a 32-bit IP address. |
| AAAA (IPv6) | Future-proofs the domain. Bypasses NAT bottlenecks increasing routing speed. |
| TXT (DMARC/SPF) | Mandatory for modern email. Prevents unauthorized servers from sending mail as you. |
| SOA (Start of Auth) | Defines the administrator email and the baseline TTL for negative caching. |
| CNAME | Allows easy pointing to PaaS providers like Vercel, Heroku, or Shopify. |
Related Tools & Resources
Frequently Asked Questions
Explore DNS Resources
Deepen your technical knowledge with our expert guides and tools focused on DNS. Establish a stronger foundation in modern internet architecture.
What is DNS? A Complete Guide to the Domain Name System
Learn how DNS works, why it matters for every website and email, and how domain names are translated into IP addresses. A comprehensive guide for beginners and professionals.
DNS Propagation Explained: How Long Does It Take and How to Speed It Up
Understand why DNS changes take time to propagate worldwide, what affects propagation speed, and proven techniques to minimize propagation time when changing DNS records.
Email Authentication: SPF, DKIM, and DMARC Explained
A comprehensive guide to SPF, DKIM, and DMARC email authentication records. Learn how each protocol works, how to configure them correctly, and how they protect your domain from email spoofing.
Verified by Get DNS INFO Team
Expert ReviewThis tool and its educational content are maintained by network infrastructure specialists. We provide real-time, authoritative DNS data and expert guidance on email security, propagation, and network optimization.
Meet the Experts