DNS Lookup
Enter any valid domain, a TLD zone (com, bd) or the DNS root (.), pick a DNS server and a record type (or ALL), then press Lookup DNS.
Change the DNS server or record type to compare answers and re-check instantly.
Free Online DNS Lookup - live records for any domain
Tools.BD's DNS Lookup queries the Domain Name System in real time and lists all DNS records of the domain you enter - A, AAAA, CNAME, MX, NS, PTR, SRV, SOA, TXT, CAA, DS and DNSKEY - exactly as a resolver on the internet would see them seconds ago. Choose which DNS server performs the query: Cloudflare, Google, OpenDNS, Quad9, Yandex, or the domain's own authoritative nameservers for the direct answer.
Why look up DNS records?
- Email delivery - verify MX records, SPF/DKIM/DMARC entries in TXT, and CAA restrictions before problems start.
- DNS migrations - after changing hosting or nameservers, compare answers between resolvers to track propagation.
- Web debugging - check A/AAAA/CNAME records when a site resolves to the wrong host.
- DNSSEC review - confirm DS, DNSKEY and the chain of trust (the AD flag) after enabling signing.
- Security audits - spot unexpected TXT verifications, rogue subdomain setup or dangling CNAME targets.
How the lookup works
- Enter the domain name (you can also use a subdomain such as mail.example.com).
- Choose the DNS server - Cloudflare, Google, OpenDNS, Quad9, Yandex, or Authoritative DNS.
- Select the record type - a single type like MX, or ALL to fetch every supported type at once.
- Press Lookup DNS - fresh DNS queries are sent the moment you press the button, so recent changes show up immediately.
Record type reference
| Type | What it contains |
|---|---|
| A | Points the domain (or a subdomain) to an IPv4 address. |
| AAAA | The IPv6 equivalent of the A record - a 128-bit address. |
| CNAME | Alias: points a hostname to another hostname instead of an address. |
| MX | Lists the mail servers that accept email for the domain, with a priority for each. |
| NS | Names the authoritative nameservers that publish the domain's zone. |
| PTR | Reverse lookup: maps an IP address back to a hostname. |
| SRV | Locates a service (host and port) such as XMPP, SIP or LDAP for the domain. |
| SOA | Zone settings: primary nameserver, admin contact, serial and refresh/retry/expire timers. |
| TXT | Free-form text - most commonly SPF, DKIM and domain-ownership verifications. |
| CAA | Restricts which certificate authorities may issue TLS certificates for the domain. |
| DS | DNSSEC chain-of-trust link from the parent zone to this zone's signing key. |
| DNSKEY | The DNSSEC public signing keys - Zone Signing Key (ZSK) and Key Signing Key (KSK). |
Tip: comparing servers catches propagation
If a record changed recently, picked resolvers may still serve the old answer from their cache until the record's TTL expires, while Authoritative DNS always reflects the live zone. Running the same lookup on two servers is a quick way to confirm what users worldwide actually receive right now.
Frequently Asked Questions
What does the DNS Lookup tool show?
It performs a real-time DNS query against the DNS server you pick and lists every record it returns: A, AAAA, CNAME, MX, NS, PTR, SRV, SOA, TXT, CAA, DS and DNSKEY. You can also select one specific record type instead of ALL.
Can I check DNS records on different servers?
Yes. Pick Cloudflare, Google, OpenDNS, Quad9, Yandex, or the domain's own Authoritative nameservers. Comparing the same record across different resolvers is a quick way to spot stale caches during DNS migrations or propagation.
Can I look up a TLD zone or the DNS root?
Yes. Enter just the TLD (like com or bd), or a single dot (.) for the root zone. The root nameservers answer NS, SOA and DNSSEC data for the root, and TLD servers answer NS/SOA/DS/DNSKEY for their zone - useful for delegation and DNSSEC debugging.
Why does each DNS server show different results?
Recursive resolvers cache answers for the record's TTL. A server that cached the record before your last change keeps answering the old value until the TTL expires, while the authoritative nameservers always hold the newest data.
Is the DNS lookup live or cached?
Every lookup runs fresh DNS queries the moment you press the button, so the answer reflects what the selected resolver responds right now - useful immediately after changing your DNS records.
What is the Authoritative DNS server option?
Instead of a public resolver, the tool finds the domain's own nameservers (from its NS records) and queries them directly. That shows the true current zone data with no caching layer in between.
What is a DS record?
A Delegation Signer record lives in the parent zone and points to the DNSKEY of the child zone - it is how the DNSSEC chain of trust is built. This tool shows the key tag, algorithm, digest type and digest.