Skip to content
MixTool

DNS lookup

See a domain's live DNS records, check its email security setup and do reverse lookups for IP addresses.

  • Checks live public data
  • Free · no sign-up
  • Works on phone and desktop
Loading tool…

Every DNS record in one place

Enter a domain to query its A, AAAA, CNAME, MX, NS, TXT, SOA and CAA records through Cloudflare's or Google's public DNS over HTTPS — the same answers the rest of the internet sees right now. Each record shows its TTL, MX servers are sorted by priority, and SOA records are broken into readable fields.

The email security section checks the domain's SPF and DMARC records and explains in plain English whether they protect against spoofed email. You'll also see when answers are DNSSEC-validated, and entering an IP address performs a reverse (PTR) lookup.

How to check DNS records

  1. 1

    Enter a domain or IP

    A URL works too; it's trimmed to the host.

  2. 2

    Choose a record type

    Or All for the complete picture.

  3. 3

    Review the records

    Values, TTLs and email security.

Key features

  • Eight record types

    A, AAAA, CNAME, MX, NS, TXT, SOA and CAA.

  • SPF and DMARC checks

    Plain-English verdicts for email authentication.

  • Two resolvers

    Compare Cloudflare and Google answers.

  • Reverse DNS

    PTR lookups for IPv4 and IPv6.

Common uses

  • Launching a website: Confirm A records point to your new host.
  • Fixing email delivery: Check MX, SPF and DMARC when mail lands in spam.
  • Domain verification: Confirm TXT records for Google, Microsoft 365 or SSL providers.

Tips and good to know

  • DNS changes can take up to the old record's TTL to reach everyone; check both resolvers to see if an update has spread.
  • Want to know who owns an IP address from the A record? Use the IP Lookup.

Frequently asked questions

What is an MX record?

It tells other mail servers where to deliver email for a domain. Lower priority numbers are tried first.

How long do DNS changes take?

Usually minutes, but resolvers can keep old answers until the previous record's TTL expires — anywhere from 5 minutes to 48 hours.

What are SPF and DMARC?

SPF lists the servers allowed to send email for a domain. DMARC tells receivers what to do when a message fails checks. Together they stop spammers from impersonating the domain.

Is my lookup private?

Queries go straight from your browser to the public resolver you choose; they don't pass through our servers.