FREE TOOL
Free DNS lookup
Enter a domain and see every DNS record it has - addresses, mail, nameservers, verification records, DNSSEC - with TTLs, from a public resolver or straight from the domain’s own nameserver.
Just changed a record? Pick Authoritative to see the new value at the source, then check how far it has spread.
The big picture
Know what’s on a domain before you move it
Every domain carries a small pile of DNS records that nobody remembers adding. An MX record from the email switch three years ago. A TXT record that keeps Google Search Console verified. An SPF line listing every service allowed to send as you. A CAA record that quietly decides which certificate authority can issue your SSL. Each one was a five-minute job at the time - and each one is invisible until it breaks.
Moving a domain is when they break. Point the nameservers at a new provider without copying everything over, and the website comes up fine while email bounces, verifications lapse and certificates fail to renew. Nothing tells you on launch day. You find out from a customer a week later.
This lookup lists every record in one pass - from Google, Cloudflare, OpenDNS, Quad9, Yandex, or the domain’s authoritative nameserver, the source of truth with no cache in between. Each record shows its TTL, so you know how long the old value can linger once you change it. When a name is an alias, you see where it points and can follow it in one click. From any record, jump to the DNS checker to watch a change spread worldwide.
Listing one domain’s records is a type-and-read job - that’s this page, free, no account. Moving a domain to new infrastructure, keeping every old URL redirected and nothing dropped on the way, is a different job. That’s Redirect Supply.
FAQs
Everything you might ask about DNS lookups
Is it free? Do I need an account?
Free, and no - type a domain, hit Lookup. Nothing to sign up for.
What’s the difference between this and the DNS checker?
The lookup shows every record of a domain from one server - what’s configured. The DNS checker shows one record from 53 servers around the world - how far a change has spread. Look up first, change what you need, then check propagation.
Which server should I pick?
Authoritative for the real, current records straight from the domain’s nameserver - best right after a change. Google, Cloudflare and the others show what most visitors get, which can be a cached, older answer until the TTL runs out.
Why are the TTLs different on each server?
The authoritative nameserver shows the full TTL that’s set on the record. Public resolvers show how much is left in their cache, so the number counts down and differs from server to server.
Why don’t I see all my subdomains?
DNS doesn’t let anyone list every name in a domain - you can only ask about names you already know. Look them up one by one, for example www.example.com or _dmarc.example.com.
Why does www only show a CNAME?
A name with a CNAME is an alias, so it can’t hold any other records of its own. Its addresses come from the target - for Framer sites, usually sites.framer.app. Use the Look up button to follow it.
What are DS and DNSKEY?
They’re DNSSEC records, which let resolvers verify DNS answers haven’t been tampered with. DNSKEY holds the domain’s public keys; DS sits in the parent zone (for example .com) and vouches for them. No records means DNSSEC isn’t enabled - common, and not an error.
Can I look up an IP address?
Yes - enter an IP and you get its PTR (reverse DNS) record, the hostname it points back to.
Can I share or save a result?
Yes - the domain, server and record type go into the address bar, so a copied link opens the same lookup. Download every record as CSV or JSON with the buttons above the results.
Do you store what I look up?
Only an anonymous log of which domains, servers and record types are looked up, to see how the tool is used. No IP addresses, no cookies, nothing tied to you.
Have more questions?
