Free tool

Read a domain's public record

Every DNS record a domain publishes is readable by anyone, attackers included. Query all eight record types at once, or pick one — resolved live, no cache.

Standard DNS queries only. Nothing is stored.

01A

02AAAA

03MX

04NS

05TXT

06CNAME

07SOA

08CAA

10Record Types

DetailedResults

<5sLookup

3/dayFree Lookups

Daily Limit Reached

You've used your 3 free lookups today. Try the Lory AI Pentester for autonomous AI penetration testing of your in-scope assets.

Try the Lory AI Pentester Book a Demo

Initializing lookup...

DNS is just the beginning

Test Your In-Scope Assets with AI

DNS records reveal your infrastructure. The Lory AI Pentester runs autonomous AI penetration testing of your in-scope assets, with AI-powered vulnerability analysis and automated alerting.

Try the Lory AI Pentester Book a Consultation

Usage-based pricing Human-reviewed findings No subscription

What We Check

Comprehensive DNS Analysis

Our tool queries all major DNS record types for a complete picture.

A & AAAA Records

IPv4 and IPv6 address records mapping your domain to hosting servers.

MX Records

Mail exchange records directing email to your mail servers.

NS Records

Nameserver records identifying authoritative DNS servers.

TXT Records

Text records for SPF, DKIM, DMARC, and domain verification.

SOA Records

Start of Authority with primary NS, admin contact, and timing.

CAA Records

Certificate Authority Authorization controlling SSL issuance.

How It Works

Lookup in 3 Simple Steps

Get complete DNS information in seconds.

Enter a Domain

Type any domain and select the record type, or choose ALL.

We Query DNS

Our tool queries authoritative DNS servers in under 5 seconds.

View Records

Get a clean breakdown of all DNS records with TTL values.

Frequently Asked Questions

What is a DNS lookup?

A DNS lookup queries the Domain Name System to retrieve records like IP addresses (A/AAAA), mail servers (MX), nameservers (NS), and text config (TXT). It translates domain names into machine-readable addresses.

What are the different DNS record types?

A = IPv4, AAAA = IPv6, MX = mail servers, NS = nameservers, TXT = text data, CNAME = aliases, SOA = zone authority, CAA = SSL certificate control, PTR = reverse DNS.

What is TTL in DNS records?

TTL (Time To Live) is how long a DNS record is cached. Lower TTL = faster propagation but more queries. Higher TTL = less load but slower updates. Common range: 300-86400 seconds.

Why are DNS records important for security?

DNS records reveal your infrastructure. Misconfigured DNS can lead to email spoofing (missing SPF/DKIM/DMARC), unauthorized SSL certs (missing CAA), subdomain takeover, and info disclosure.

Is this tool free?

Yes, completely free with no sign-up. 3 lookups per day. For autonomous AI penetration testing of your in-scope assets, check out the Lory AI Pentester.

See Beyond DNS. Test Your In-Scope Assets.

DNS records are one piece of the puzzle. The Lory AI Pentester runs autonomous AI penetration testing of your in-scope assets with AI-powered analysis.

Try the Lory AI Pentester Book Consultation

Usage-based — pay for what you run Prepaid credits, 1 credit = $1 No subscription