AltF DomainOps

DNS lookup for any record type

Type a domain, pick a record type, and DomainOps asks Google Public DNS over HTTPS straight from your browser. You get every matching record with its TTL, whether the answer was DNSSEC-validated, and a plain-language note on what the record does. "All records" runs the common types in one go.

  • Free, no sign-up
  • Real DNS, RDAP and TLS data
  • Raw records shown
  • No affiliate links
Check a domain

Which record type do you need?

  • Website not loading: A and AAAA for the bare domain, CNAME for www.
  • Email not arriving: MX, then TXT for SPF and _dmarc for DMARC.
  • Moving DNS host: NS and SOA, to see who is answering and the zone serial.
  • Certificate will not issue: CAA, to see which authorities are allowed.
  • Site supports HTTP/3: HTTPS, which carries the ALPN list browsers read before connecting.

Reading the result

Each row shows the name that answered (CNAME chains show every hop), the type, the TTL in seconds and the data. A green DNSSEC badge means the resolver validated the signature chain. NXDOMAIN means the name does not exist at all; NOERROR with no rows means the name exists but has no record of that type.

Same as dig or nslookup?

It is the same question, asked of a public recursive resolver instead of your computer's. That makes it useful for checking what the rest of the internet sees, away from your local cache, VPN or office DNS. For the answer straight from the authoritative server, query its nameserver with dig @ns1.example.com.

DNS lookup: questions and answers

Why does DNS lookup show a different IP than my computer?

Your computer may be using a cached answer, a hosts-file entry, a VPN, or a resolver that returns a GeoDNS answer for your location. DomainOps shows what Google Public DNS returns. Use Resolver compare to see answers for six countries.

What does TTL mean in a DNS lookup?

Time to live, in seconds: how long a resolver may cache the answer. 300 means five minutes; 86400 is a day. Lower it a day before a planned change so the change spreads quickly.

Can I look up a subdomain or _dmarc record?

Yes. Type the full name, such as blog.example.com or _dmarc.example.com, and pick the type.

Focused checks and guides

Checks

Full domain health checkAll nine tools, the record glossary and how each check works.MX lookupFree MX record lookup: see a domain's mail servers in priority order, which email provider runs them, and whether SPF and DMARC are set.NS lookupFree nameserver lookup: see which nameservers answer for a domain, who the DNS host is, the SOA serial, and whether the zone is DNSSEC-signed.TXT record lookupFree TXT record lookup that labels each record: SPF, Google and Microsoft verification, Meta, Apple, Stripe and 25 more services, plus DMARC and DKIM.SSL certificate checkFree live SSL checker: connect to any site and see its certificate issuer, expiry date and days left, covered hostnames, chain trust and TLS version.Domain expiry checkCheck when a domain expires from the registry's own RDAP data: expiry date, days left, registrar, transfer lock and status codes in plain English.Reverse DNS lookupFree reverse DNS lookup for IPv4 and IPv6: find the PTR hostname of an IP address and the network owner from the regional internet registry.DNSSEC checkCheck whether a domain uses DNSSEC: DS record at the registry, DNSKEY in the zone and whether public resolvers validate the answers.CAA record checkLook up a domain's CAA records to see which certificate authorities may issue certificates, including wildcard and reporting rules, with fixes.

Guides

Domain launch checklistA 20-point checklist to launch a new domain: DNS records, www, HTTPS, email authentication, DNSSEC, CAA, registrar lock, with a free check for each step.Website migration DNS checklistMove a website or DNS to a new host without downtime: lower TTLs, copy records, switch nameservers, watch resolvers, handle DNSSEC and email.Email domain setup guideSet up email for your domain the right way: MX records, one SPF record under 10 lookups, DKIM keys, a DMARC rollout plan, MTA-STS and BIMI.

25 more free domain and DNS tools

Single-purpose AltFTool tools for one job each, grouped by what you are trying to do.

Lookups

One question, one answer.

Write records

Generate correct records before you paste them into your DNS host.

Certificates and HTTPS

Go deeper than the live certificate check.

See all 25 tools

AltFTool does not store the domains or addresses you check. DNS lookups in the DNS, compare, email and IP tools run from your browser; registration, report and certificate checks pass through AltFTool's server and keep nothing.