Best free DNS lookup tools

AdminKit is built by Netbase JSC. AdminKit is listed below; MXToolbox, Google, nslookup.io and intoDNS are independent and not affiliated with AdminKit.

What each tool’s own page confirms

MXToolbox’s DNS Lookup, read 2026-11-04, states it “will list DNS records for a domain in priority order,” run “directly against the domain’s authoritative name server” — a near-instant read of what a zone currently publishes, rather than whatever a public resolver has cached. Its broader SuperTool page lists A, AAAA, CNAME, MX, PTR, SOA, TXT and SPF as direct lookups, with DKIM, DMARC, BIMI, MTA-STS and TLSRPT handled as separate, dedicated checks rather than folded into the plain DNS lookup. Neither page states a login requirement or a lookup cap, and both load and return results without any sign-in prompt.

Google’s Admin Toolbox Dig, read 2026-11-04, is a Google-hosted web front end to the dig command. Its own page’s record-type selector lists A, AAAA, ANY, CAA, CNAME, DNSKEY, MX, NS, PTR, SOA, SRV and TXT, and includes a “Raw View” toggle for dig-style output — the only tool in this roundup confirmed to offer that. It loads with no login prompt; its own page does not state which resolver or nameserver a plain lookup queries by default.

nslookup.io, read 2026-11-04, states on its own page that you “can select from a range of DNS servers on the result page. These include popular public DNS servers, the authoritative DNS server for the given domain, and local DNS servers all around the world” — the widest resolver choice confirmed in this roundup. It shows A, AAAA, CNAME, TXT, NS, MX and SOA by default and states it supports “all the DNS record types that are known to be in active use.” The lookup form itself needs no login; a separate “Login / Sign up” link in its own navigation covers its monitoring and REST API products, whose pricing isn’t stated on the pages read for this comparison.

intoDNS, read 2026-11-04, is a different kind of tool: its own homepage states it “checks the health and configuration and provides DNS report and mail servers report,” with “suggestions to fix and improve them.” A sample report shows pass/warn/info checks against NS delegation, glue records, SOA timing values and MX configuration, citing specific record values rather than just a pass/fail badge. It loads with no login prompt. It isn’t a pick-a-record-type lookup the way the other three tools here are — it’s a fixed configuration audit.

What AdminKit’s own tool does

AdminKit’s DNS lookup tool queries Cloudflare’s public DNS-over-HTTPS resolver through an AdminKit Pages Function for nine record types — A, AAAA, MX, TXT, NS, CAA, PTR, SOA and CNAME — with each type explained in plain language next to the result, and no raw dig-style output. It does not let you choose a different resolver or query a nameserver directly, has no public API, and runs no configuration-health audit against RFC best practice the way intoDNS does.

The honest angle

These five tools don’t all answer the same question. If you need to query a domain’s authoritative nameserver directly, or want a choice of resolver location, MXToolbox’s DNS Lookup and nslookup.io’s own pages both confirm that; AdminKit’s tool always goes through one resolver. If you want raw dig-style output across a wide set of record types including DNSSEC-adjacent ones like DNSKEY, Google’s Admin Toolbox Dig is built for that; AdminKit’s tool returns a formatted, plain-language result instead. If what you actually want to know is whether a domain’s DNS is configured correctly — not just what one record currently says — intoDNS’s health report goes further than any plain lookup tool in this roundup, AdminKit included.

What AdminKit’s tool is for is the handful of record types most people need for everyday mail and DNS troubleshooting, always through one resolver, with each one explained rather than left as raw output — see how to read a DNS lookup result for what each field actually means, and why a lookup can return different answers from different resolvers for why a tool like nslookup.io’s multi-resolver choice can show you something a single-resolver tool like AdminKit’s cannot.

For a deeper single-tool comparison against a much wider raw-dig front end, see AdminKit’s DNS lookup tool vs Dig Web Interface; for email-authentication-focused checking rather than raw record lookups, see DNSChecker vs MxToolbox; for checking which resolver your own connection uses rather than what a domain publishes, see best free DNS leak test tools.

---

Trademarks belong to their respective owners; AdminKit is not affiliated with MXToolbox, Inc., Google LLC, nslookup.io, or intoDNS.