Free Tool

DNS Lookup Tool

Look up all DNS records for any domain - A, AAAA, MX, NS, TXT, SOA, CAA, and CNAME. Analyze email security and get a DNS health grade. Free, no signup required.

What You Get

Here's an example of the DNS records this tool reveals. Try it above with any domain.

A

DNS Health: A

example.com — 14 records found in 42ms

A Record93.184.216.34
AAAA Record2606:2800:21f:...
Nameserversa.iana-servers.net
MX Records10 mail.example.com
SPFFound
DMARCFound

The DNS lookup queries authoritative nameservers to retrieve every record type configured for your domain. You'll see A and AAAA records (your domain's IP addresses with TTL values), nameservers and SOA data (who manages your DNS zone), and MX records (where your email is routed).

The tool also performs an email security analysis, checking for SPF and DMARC records that protect your domain from email spoofing and impersonation. Combined with CAA record checks (which restrict certificate issuance), this gives you a comprehensive picture of your domain's DNS health.

How It Works

1

Enter Domain

Type any domain name or URL. We'll extract the hostname and look up its DNS records.

2

We Query DNS Servers

Our server resolves all record types in parallel — A, AAAA, MX, NS, TXT, SOA, CAA, and CNAME — plus DMARC.

3

Get Your DNS Report

View every record, email security analysis, and an overall health grade. Copy, download, or share results instantly.

Frequently Asked Questions

This tool queries DNS servers to retrieve all DNS records for a domain. It shows A (IPv4), AAAA (IPv6), CNAME, MX (mail), NS (nameservers), TXT, SOA (start of authority), and CAA records. It also analyzes your email security configuration (SPF and DMARC) and gives your DNS setup a health grade.

Yes, completely free with no signup required. Enter any domain and get instant results. There are no daily limits.

A records map a domain to an IPv4 address. AAAA records map to IPv6. CNAME creates an alias pointing to another domain. MX records specify mail servers and their priority. NS records define the authoritative nameservers for the domain. TXT records hold text data often used for email authentication (SPF, DKIM, DMARC). SOA contains zone authority information like the primary nameserver and admin contact. CAA restricts which certificate authorities can issue SSL certificates for the domain.

The grade evaluates your DNS configuration across several criteria: whether you have A/AAAA records for availability, multiple nameservers for redundancy, MX records for email delivery, SPF and DMARC records for email security, CAA records for certificate security, and a proper SOA record. An A+ grade means your DNS is well-configured across all categories.

SPF (Sender Policy Framework) is a TXT record that specifies which mail servers are authorized to send email for your domain, helping prevent spoofing. DMARC (Domain-based Message Authentication, Reporting & Conformance) builds on SPF and DKIM to tell receiving servers what to do with unauthenticated emails. Both are essential for protecting your domain from email impersonation and improving deliverability.

CAA (Certificate Authority Authorization) records specify which certificate authorities (CAs) are allowed to issue SSL/TLS certificates for your domain. Without CAA records, any CA can issue a certificate, increasing the risk of unauthorized certificate issuance. Adding CAA records is a simple but effective security measure.

DNS records can vary depending on which DNS resolver you query, due to caching and propagation delays. After making DNS changes, it can take anywhere from minutes to 48 hours for changes to propagate globally, depending on the record's TTL (Time To Live). This tool queries from the server's perspective, which may differ from your local resolver.

Yes! exit1.dev is rolling out continuous DNS monitoring. You can track DNS record changes, get alerts when records change unexpectedly, and monitor DNS resolution health around the clock — catching misconfigurations and hijacking attempts before they affect your users.

Need Continuous DNS Monitoring?

Stop checking manually. exit1.dev monitors your DNS records around the clock and alerts you when something changes. Catch misconfigurations and hijacking attempts before they affect your users.

Start Free Monitoring