DNS Records Lookup
Look up DNS records for any domain or URL. Query A/AAAA (IPv4/IPv6), CNAME, MX, TXT (SPF/DMARC/DKIM), NS, and SOA records. Includes filtering by record type, findings/score, copy/export to JSON, and a clean raw-text output view.
Features
- Look up DNS records for a domain or URL (auto-extracts the hostname).
- Filter by record type: ALL, A, AAAA, CNAME, MX, TXT, NS, SOA.
- Compare IPv4/IPv6 resolution (A vs AAAA) for modern dual-stack readiness.
- Email DNS visibility: find SPF/DMARC/DKIM-related TXT records and common gaps.
- Findings + score card to surface likely configuration issues faster.
- Built-in filtering and “only problems” view for quicker troubleshooting.
- Copy results easily for tickets and documentation.
- Export a JSON report for automation and auditing.
- Clean raw-text output suitable for sharing and diffing.
🧭 How to use for dns-records-lookup
Enter a domain or URL
Paste a hostname like example.com or a full URL like [https://example.com/path](https://example.com/path). The tool will use the domain portion for DNS queries.
Choose a record type
Select ALL to get a complete view, or pick a specific type (A, AAAA, MX, TXT, etc.) to focus the lookup.
Review results and findings
Check returned records first, then review findings/score for potential problems (missing expected records, suspicious values, or incomplete email setup).
Export and share
Copy results into a support ticket or download the JSON report to keep an audit trail or automate checks.
Technical specs
Lookup model
This tool performs DNS record queries for the provided domain/URL and returns results as readable raw text with optional findings.
| Setting | Behavior | Default |
|---|---|---|
| Input | Domain or URL (hostname extracted) | [https://example.com](https://example.com) |
| Record Type | ALL, A, AAAA, CNAME, MX, TXT, NS, SOA | ALL |
| Timeout | DNS lookup timeout limit | 12000 ms |
| User-Agent | Identifies the request user agent | Encode64Bot/1.0 (+[https://encode64.com](https://encode64.com)) |
| Private networks | Blocks access to private network ranges for safety | Disabled (private networks not allowed) |
Record types explained
A quick guide to what each record type typically represents and when you’ll use it.
| Type | What it does | Common use |
|---|---|---|
| A | Maps a name to an IPv4 address | Web hosting, origin servers |
| AAAA | Maps a name to an IPv6 address | IPv6 support and dual-stack setups |
| CNAME | Aliases one name to another canonical name | CDN hostnames, service routing |
| MX | Mail exchanger records with priority | Email routing and deliverability |
| TXT | Text records used for many policies | SPF, DKIM, DMARC, verification tokens |
| NS | Delegates a zone to authoritative name servers | DNS provider configuration and delegation |
| SOA | Start of authority for a zone | Zone serial/refresh metadata and authority |
Email security records (SPF/DMARC/DKIM)
Email deliverability and spoofing resistance depend heavily on DNS TXT records. This tool helps you list and verify their presence at a glance.
| Record | Where to look | What you expect |
|---|---|---|
| SPF | TXT at root domain (example.com) | A single v=spf1 policy (avoid multiple SPF TXT records) |
| DMARC | TXT at _dmarc.example.com | v=DMARC1 with a policy (p=none/quarantine/reject) |
| DKIM | TXT at selector._domainkey.example.com | A public key value published by your mail provider |
Command line
Prefer the CLI? These commands reproduce common DNS checks locally. Use them to confirm results or script diagnostics.
macOS / Linux
Query A and AAAA records
dig example.com A +short
dig example.com AAAA +shortShows IPv4 and IPv6 addresses. Useful for dual-stack validation.
Query CNAME
dig [www.example.com](http://www.example.com) CNAME +shortShows whether a hostname is an alias to another hostname (often a CDN).
Query MX records
dig example.com MX +shortLists mail exchangers and their priorities.
Query TXT (SPF and other verification records)
dig example.com TXT +shortShows TXT records; look for v=spf1 and other policy/verification values.
Query DMARC
dig _dmarc.example.com TXT +shortShows DMARC policy if configured.
Query NS and SOA
dig example.com NS +short
dig example.com SOA +shortValidates authoritative name servers and zone authority metadata.
Windows
Basic lookup (A record)
nslookup -type=A example.comShows IPv4 mapping for the domain.
TXT lookup (SPF/DMARC hints)
nslookup -type=TXT example.comLists TXT records; DMARC is typically under _dmarc.example.com.
Use cases
Validate web hosting and CDN routing
Confirm that your domain points to the right IPs or CDN hostnames, and that IPv6 is configured as expected.
- Check A/AAAA for origin IPs
- Confirm CNAME points to your CDN provider
- Detect missing AAAA (no IPv6) when you expect it
Troubleshoot email routing and deliverability
Inspect MX and TXT records to verify mail provider setup and anti-spoofing policies.
- MX records point to your mail provider
- SPF is published (v=spf1 ...)
- DMARC exists at _dmarc.yourdomain
- DKIM selectors exist under selector._domainkey
Debug DNS provider changes and delegations
When migrating DNS providers, NS/SOA help confirm delegation and authority boundaries.
- NS records match the provider you configured at the registrar
- SOA indicates the authoritative zone you expect
Diagnose broken subdomains
If a subdomain doesn’t resolve, look for missing A/AAAA or incorrect CNAME targets.
- CNAME points to a non-existent hostname
- No A/AAAA published for the subdomain
- NS delegation exists when using separate zone hosting
❓ Frequently Asked Questions
❓Can I paste a full URL instead of a domain?
❓What does "ALL" record type mean?
❓Why do I see multiple A or AAAA records?
❓Why is publishing multiple SPF TXT records a problem?
❓Where is DMARC stored in DNS?
❓Where is DKIM stored in DNS?
❓Does this tool check DNS propagation globally?
Pro Tips
When migrating DNS, validate NS at the registrar and then verify SOA to confirm which provider is authoritative.
For performance and modern connectivity, publish AAAA if your infrastructure supports IPv6 (many CDNs do by default).
For email security, aim for SPF + DKIM + DMARC together; DMARC without DKIM/SPF alignment won’t be effective.
Keep SPF manageable: avoid too many DNS lookups and avoid multiple SPF records at the root domain.
Export JSON and keep it in incident tickets during outages—DNS snapshots are useful when records change mid-debug.
Additional Resources
Other Tools
- CSS Beautifier
- HTML Beautifier
- Javascript Beautifier
- PHP Beautifier
- Color Picker
- Sprite Extractor
- Base32 Binary Encoder
- Base32 Decoder
- Base32 Encoder
- Base58 Binary Encoder
- Base58 Decoder
- Base58 Encoder
- Base62 Binary Encoder
- Base62 Decoder
- Base62 Encoder
- Base64 Binary Encoder
- Base64 Decoder
- Base64 Encoder
- Hex Binary Encoder
- Hex Decoder
- Hex Encoder
- Csharp Formatter
- Csv Formatter
- Dockerfile Formatter
- Elm Formatter
- ENV Formatter
- Go Formatter
- Graphql Formatter
- Hcl Formatter
- INI Formatter
- JSON Formatter
- Latex Formatter
- Markdown Formatter
- Objectivec Formatter
- Php Formatter
- Proto Formatter
- Python Formatter
- Ruby Formatter
- Rust Formatter
- Scala Formatter
- Shell Script Formatter
- SQL Formatter
- SVG Formatter
- Swift Formatter
- TOML Formatter
- Typescript Formatter
- XML Formatter
- YAML Formatter
- Yarn Formatter
- CSS Minifier
- Html Minifier
- Javascript Minifier
- JSON Minifier
- XML Minifier
- Cache Headers Analyzer
- Cors Checker
- Csp Analyzer
- Http Headers Viewer
- Http Status Checker
- Open Graph Meta Checker
- Redirect Chain Viewer
- Robots Txt Tester
- Security Headers Checker
- Security Txt Checker
- Sitemap Url Inspector
- Tls Certificate Checker
- PDF To Text
- Regex Tester
- Serp Rank Checker
- Whois Lookup