---
title: "Free DNS Lookup Tool - A, AAAA, MX, TXT, SPF, DMARC | WebPixie"
description: "Free DNS lookup for any domain. Query A, AAAA, CNAME, MX, NS, TXT, and 20+ record types, plus parsed SPF, DMARC, DNSSEC, and reverse DNS, all at once."
canonical: "https://webpixie.io/free-tools/dns-lookup"
source_path: "/free-tools/dns-lookup"
lang: "en"
generated_by: "scripts/generate-md.mjs"
---

1.  [Home](/index.md)
2.  [Free Tools](/free-tools.md)
3.  DNS Lookup

# DNS Lookup

Query A, AAAA, MX, TXT, NS, and 20+ DNS record types at once, with parsed SPF, DMARC, DNSSEC, and reverse DNS for any domain.

## What is a DNS lookup?

A DNS lookup asks the authoritative nameservers for the records published under a domain name. Those records tell clients where to send traffic and email, which certificate authorities may issue certificates, and how the domain is secured. This tool queries many record types in a single request and also parses the email authentication and reverse DNS records into a readable form. For ongoing visibility, pair it with [DNS monitoring](/features/dns-monitoring.md) .

## Record types you can query

-   **A and AAAA** The IPv4 and IPv6 addresses a hostname resolves to.
-   **CNAME** An alias that points one hostname at another canonical name.
-   **MX** The mail servers that accept email for the domain, each with a priority.
-   **NS and SOA** The authoritative nameservers and the zone serial that tracks changes.
-   **TXT** Free-form records used for domain verification and policies such as SPF.
-   **CAA** Which certificate authorities are allowed to issue certificates for the domain.
-   **SPF, DMARC, DNSSEC, and PTR** Parsed views of email authentication policy, signing status, and reverse DNS for the resolved addresses.

## How to read the result

-   **TTL** The time in seconds a resolver may cache the record before asking again. Low values propagate changes faster.
-   **MX priority** Lower numbers are preferred. Mail delivery tries the lowest priority host first and falls back to higher ones.
-   **Authoritative source** Results read directly from the zone's own nameservers rather than a cached resolver.
-   **DNSSEC status** Secure means the zone is signed and validated, unsigned means no DNSSEC is published, and bogus means validation failed.

## Explore WebPixie DNS Monitoring

Learn more about how WebPixie continuously monitors your DNS records, DNSSEC, and email authentication, then explore SSL, domain, and uptime monitoring together in a single dashboard.

[See DNS Monitoring](/features/dns-monitoring.md)

Looking for registration and ownership details instead of DNS records? Use the [Domain Lookup tool](/free-tools/domain-lookup.md) for WHOIS and RDAP data.

## Source Attribution

This file is automatically generated by WebPixie AI and summarizes publicly available content from WebPixie pages.
Authoritative details should always be verified from the original URLs.