Records
Resolve any domain’s A, AAAA, MX, NS, TXT, CAA, SOA, CNAME, PTR, or SRV records straight from the authoritative chain. No sign-in, no client install — just a fast, free DNS lookup.
Use cases
Enter a domain and pick a record type to start.
An A-record lookup for example.com returns one or more IPv4 addresses with a TTL (time-to-live). The TTL tells downstream resolvers how long they may cache the answer before re-querying.
$ curl 'https://api.secdns.io/v1/tools/dns-lookup?name=example.com&type=A'
{
"name": "example.com",
"type": "A",
"duration_ms": 27,
"records": ["93.184.216.34"]
}A DNS lookup asks the Domain Name System for the records associated with a name — addresses (A, AAAA), mail servers (MX), name servers (NS), text records (TXT/SPF/DMARC), certificate-authority pinning (CAA), and zone metadata (SOA). SecDNS runs the query against authoritative servers and returns the answer in your browser.
A, AAAA, MX, NS, TXT, CAA, SOA, CNAME, PTR, and SRV. For DNSSEC chain checks use the DNSSEC Validator; for SPF/DMARC/DKIM use the dedicated email tools — they parse the records on top of the raw lookup.
Yes. Add the resolver IP via the ?server= parameter on the API or use the DNS Propagation tool which runs the same query in parallel against Cloudflare, Google, Quad9, OpenDNS, AdGuard, and SecDNS.
Every lookup is live. SecDNS does not cache responses on the public tool — you see whatever the upstream resolver returns at the moment of the request, including TTL.
Yes. Anonymous lookups are throttled per IP to keep the tool free for everyone. Signed-in customers get higher quotas through the SecDNS API.