Free DNS Lookup Tool

Query all DNS record types, check email security (SPF, DMARC), validate DNSSEC, and detect zone transfer vulnerabilities.

Querying DNS for ...

Daily scan limit reached

Sign up free to get 10 scans/day — or upgrade for unlimited access.

Redirecting to report...

Quick answer

A DNS lookup is a query to the Domain Name System that returns the records tied to a domain — its IP addresses (A/AAAA), mail servers (MX), nameservers (NS), and text records like SPF and DMARC. Secably's DNS lookup checks every record type, validates email security, and is free with no signup.

  • All records: A, AAAA, MX, NS, TXT, SOA, CNAME, CAA
  • Email security: SPF and DMARC validation
  • DNSSEC check + zone-transfer test
  • Free, no signup, instant results

What is a DNS lookup?

The Domain Name System is the internet's address book: it translates human-readable names like example.com into the IP addresses machines actually use, and stores the records that route your email, prove domain ownership, and protect against spoofing. A DNS lookup queries that system and returns every record a domain publishes.

Reading those records tells you where a domain points, which servers handle its mail, and whether its email and DNS security are configured correctly — all from public data, without touching the server itself.

Why DNS records matter for security

Misconfigured DNS is a quiet but serious risk. A missing or weak SPF/DMARC policy lets attackers send phishing email that appears to come from your domain. A dangling record pointing at a de-provisioned service invites a subdomain takeover. And a domain that allows zone transfers can hand an attacker its entire internal map in one request.

Checking your DNS regularly catches these before they're exploited — and confirms that changes (a migration, a new mail provider) actually took effect.

How a DNS lookup works

Secably queries the domain's authoritative nameservers for every record type, then analyzes the results for email and DNS security issues.

— Records

Full record query

Retrieves A, AAAA, MX, NS, TXT, SOA, CNAME, and CAA records so you see everything the domain publishes in one view.

— Email

SPF & DMARC analysis

Parses your SPF and DMARC policies and flags weak or missing configuration that would let others spoof your domain in email.

— Integrity

DNSSEC & zone transfer

Checks whether DNSSEC is enabled to prevent spoofing, and tests whether the domain leaks its full zone via an AXFR transfer.

How to run a DNS lookup in 3 steps

1

Enter a domain

Type a domain like example.com. No record type to pick — Secably fetches them all.

2

Run the lookup

Secably queries the authoritative nameservers and analyzes email and DNS security in one pass.

3

Read the records

Every record is grouped by type, with SPF/DMARC/DNSSEC flags highlighted. Save or export the report with a free account.

Who uses a DNS lookup

dev
Confirm changes actually propagated
Developers: after a migration or DNS edit, verify that A, CNAME, and MX records now point exactly where you expect.
ops
Fix email deliverability
Sysadmins & ops: audit SPF and DMARC so your mail lands in inboxes, not spam folders — and so no one else can spoof your domain.
sec
Catch spoofing and leaks
Security teams: spot missing DMARC, dangling records ripe for takeover, and domains that leak their full zone via transfer.

Frequently Asked Questions

What is a DNS lookup? +
A DNS lookup queries the Domain Name System to retrieve the records associated with a domain — A records (IPv4), AAAA (IPv6), MX (mail servers), TXT (verification and SPF), NS (nameservers), and more. It's essential for troubleshooting connectivity, email delivery, and security configuration.
What DNS records does this tool check? +
Secably checks A, AAAA, MX, TXT, NS, SOA, CNAME, and CAA records. It also validates SPF and DMARC for email security, checks DNSSEC status, and tests for zone transfer vulnerabilities.
Why is DMARC important? +
DMARC (Domain-based Message Authentication) prevents email spoofing by telling receiving servers how to handle messages that fail SPF or DKIM checks. Without DMARC, attackers can send phishing emails that appear to come from your domain.
What is DNSSEC? +
DNSSEC adds cryptographic signatures to DNS records to prevent DNS spoofing and cache-poisoning attacks. When it's enabled, resolvers can verify that DNS responses haven't been tampered with in transit.
What is a DNS zone transfer risk? +
A zone transfer (AXFR) lets one nameserver copy a domain's full set of records from another. If a domain allows transfers to anyone, an attacker can download its entire DNS map — every subdomain and host — in a single request. Secably tests whether your domain is exposed to this.
Is this DNS lookup tool free? +
Yes. Basic DNS lookups are completely free with no signup. Pro plans add unlimited lookups, DNS change monitoring with alerts, API access, and historical record tracking.

Related security tools