Skip to content
FR

DNS lookup

Check a domain's DNS records: A, AAAA, CNAME, MX, TXT (SPF, DKIM, DMARC), NS, SOA and CAA, with TTL and DNSSEC validation.

  • Free
  • No sign-up
  • No file uploaded
  • Windows, Mac, Android, iPhone

Loading the tool…

About this tool

Enter a domain name to see its DNS records: IP addresses, mail servers, SPF or DKIM text records, name servers. Perfect for checking a setup or troubleshooting a site or email that isn't working.

When to use it

Checking a DNS change

After pointing a domain to a new host, confirm that the A or CNAME record is published.

Troubleshooting email

Messages going to spam or bouncing? Check the MX records, the SPF record and the DKIM and DMARC keys in the TXT records.

Verifying a domain

Google, Microsoft or an email service asks for a verification TXT record: check that it is visible.

How to use

  1. Enter the domain name.
  2. Choose a type or “all”.
  3. Read the records and their TTL.

How it works

Lookups use DNS-over-HTTPS: your browser queries Cloudflare's public resolver (1.1.1.1) directly, or Google's as a fallback. The answers are the same ones visitors get.

The TTL is how many seconds a resolver may cache the answer. “DNSSEC signed” means the resolver has verified the zone's cryptographic signatures.

Tips for best results

  • After a change, wait at least the previous TTL before deciding it doesn't work.
  • For DKIM, look up the TXT record of “selector._domainkey.your-domain” (your email provider gives the selector).
  • For DMARC, look up the TXT record of “_dmarc.your-domain”.
  • A domain cannot have a CNAME at its root alongside other records.
  • Paste a full URL: the domain name is extracted automatically.

Common problems and fixes

My new record doesn't show up

It may still be cached: wait for the TTL to expire, and check that you created it with the right DNS provider (see the NS records).

The result says NXDOMAIN

The name does not exist: a typo, an expired domain or a subdomain that was never created.

The lookup fails

An ad blocker or corporate network may block cloudflare-dns.com and dns.google. Try another network.

Frequently asked questions

Does Zanakit log my lookups?

No. Your browser sends the domain straight to Cloudflare's or Google's resolver.

What is an MX record?

It lists the servers that receive the domain's email, in priority order (lowest number first).

Why does the TTL go down between lookups?

The resolver shows the time left before its cached copy expires.

Can I look up a subdomain?

Yes, for example “www.example.com” or “_dmarc.example.com”.

Related searches

Still stuck?

Ask on the forum: the category, the tool, your device sheet and the test result will be filled in for you.