Logo
DNS lookup·A · MX · TXT · NS · CAA · SOA

All DNS records, instantly.

Look up A, AAAA, CNAME, MX, TXT, NS, SOA and CAA records in one shot — with email health scoring and a clean, readable layout.

8 record types
Email health score
Enter a domain to look up its DNS records.
Try google.com, github.io, or your own domain.
What you get

DNS, finally readable.

Raw DNS output is a wall of text. We parse every record type and surface the details that matter to developers, sysadmins, and domain owners.

8 record types at once

A, AAAA, CNAME, MX, TXT, NS, SOA and CAA — all fetched in a single query and displayed in a clean, filterable view.

Email health scoring

SPF, DMARC, DKIM and CAA are analysed automatically. A health score tells you at a glance how hardened the domain is against spoofing.

Filter by record type

Tab between record types instantly. Need just the MX records? One click. Want everything? "All" shows a two-column grid.

Hosting & mail detection

We identify the hosting provider from IP ranges and the mail provider from MX records — so you see Cloudflare, Vercel, Google Workspace at a glance.

Stop second-guessing.

Find your domain in the next 30 seconds.

Free forever. No login required. 1,100+ TLDs in one query — plus AI suggestions and the premium marketplace.

Start checking now Learn more
1,147
TLDs
200ms
Avg lookup
100
Suggestions/query
FAQ

DNS, explained.

An A record maps a hostname directly to an IPv4 address. A CNAME (canonical name) maps a hostname to another hostname — the resolver then looks up that target. You cannot use a CNAME at the zone apex (root domain), which is why you see A records for example.com but often CNAME for www.example.com.
MX (Mail Exchange) records tell the internet which servers accept email for a domain. The priority number determines order — a lower number means higher priority. If the primary server is down, senders fall back to higher-priority-number entries.
These three TXT records form the email authentication stack. SPF lists servers authorised to send mail for the domain. DKIM adds a cryptographic signature to outbound messages. DMARC tells receiving servers what to do when SPF or DKIM fail — report, quarantine, or reject.
Every DNS record has a TTL (time-to-live) that tells resolvers how long to cache the answer. Until that timer expires, many resolvers worldwide still serve the old value. A low TTL (300s) means changes spread in ~5 minutes; a high TTL (86400s) can mean up to 24 hours.
CAA (Certification Authority Authorization) records restrict which certificate authorities are allowed to issue SSL/TLS certificates for a domain. If a CAA record specifies "letsencrypt.org", only Let's Encrypt can issue certs — any other CA attempting to will fail, protecting against misissuance.
The SOA (Start of Authority) record is the authoritative record for the zone. It stores the primary nameserver, an admin contact email, a serial number (incremented on every zone change), and timing parameters like refresh, retry, and expire intervals.