DNS Lookup
Query DNS records for any domain — A, AAAA, MX, TXT, NS, CNAME, SOA, and CAA. Uses Cloudflare DNS-over-HTTPS for fast and private lookups without leaving your browser.
Enter a domain and click Lookup to query DNS records.
How to use
- 1 Enter any domain name (e.g. example.com) in the input field.
- 2 Select the DNS record types you want to query — A, AAAA, MX, TXT, NS, CNAME, SOA, CAA.
- 3 Click Lookup. Results appear grouped by record type with TTL values.
Key features
- Query 8 record types: A, AAAA, MX, TXT, NS, CNAME, SOA, CAA — select any combination
- Uses Cloudflare DNS-over-HTTPS (1.1.1.1) — fast, private, no server-side processing
- Results grouped by type with record data and TTL values clearly shown
- Strips protocol prefix automatically — paste a full URL or just the domain
- 100% client-side — no query data leaves your browser
What is DNS?
The Domain Name System (DNS) is the internet's phonebook. Every time you visit a website, send an email, or connect to an API, your device queries the DNS to translate a human-readable domain name (like example.com) into a machine-readable IP address (like 93.184.216.34).
DNS lookups pass through a chain of resolvers — from your device's local cache, to your ISP's resolver, to authoritative name servers. This tool queries Cloudflare's DNS-over-HTTPS (DoH) API at 1.1.1.1 directly from your browser, bypassing any intermediate resolver and giving you fast, accurate, private results without sending any data through a server we control.
Common Use Cases
Verify domain propagation
After updating DNS records at your registrar, query A or AAAA records to confirm the change has propagated from the authoritative server.
Debug email delivery issues
Check MX records to confirm your mail server is correctly listed. Query TXT records to verify SPF, DKIM, and DMARC policies.
Inspect TXT and SPF records
Retrieve all TXT records for a domain to verify ownership proofs (Google Search Console, Cloudflare), SPF policies, and DMARC rules.
Check CDN and proxy status
Look up A or CNAME records to see whether a domain points to a CDN edge (e.g. Cloudflare, Fastly) or directly to your origin IP.
Validate CAA records
Query CAA records to confirm which Certificate Authorities are authorized to issue TLS certificates for your domain.
Audit nameserver delegation
Fetch NS records to verify which nameservers are authoritative for a domain — useful when transferring domains between registrars.
DNS Record Types Reference
The 8 record types supported by this tool, and what each one does.
| Record | What it stores | Common use |
|---|---|---|
| A | IPv4 address | Points a domain to a server's IPv4 address |
| AAAA | IPv6 address | Points a domain to a server's IPv6 address |
| MX | Mail server hostname + priority | Directs email delivery for the domain |
| TXT | Arbitrary text string | SPF, DKIM, DMARC, and domain ownership proofs |
| NS | Nameserver hostname | Identifies authoritative DNS servers for the zone |
| CNAME | Canonical name (alias target) | Aliases one hostname to another (e.g. www → root) |
| SOA | Zone admin info + serial number | Primary NS, admin email, refresh/retry/expire timers |
| CAA | CA authorization policy | Restricts which CAs can issue TLS certificates |
Understanding TTL
Every DNS record has a Time To Live (TTL) value — the number of seconds that resolvers and browsers are allowed to cache the result before querying again. A TTL of 300 means the record is cached for 5 minutes; 86400 means 24 hours.
When you update a DNS record, changes can take up to the current TTL to fully propagate worldwide. Lowering the TTL to 60–300 seconds a few hours before a planned migration reduces downtime. After the migration, raise it back to 3600–86400 to reduce resolver load.