DNS lookup
Check the live DNS records for any domain — A, AAAA, MX, TXT, NS, CNAME, SOA, CAA, and SRV — straight from your browser over encrypted DNS-over-HTTPS. No install, nothing stored.
Reads live DNS records over encrypted DNS-over-HTTPS, straight from your browser. Pick a record type, or ALL for the common set. Nothing is stored.
Queries run in your browser via Cloudflare DNS-over-HTTPS. We don't log the domains you look up.
What a DNS lookup shows you
DNS lookup
A DNS lookup returns the records a domain publishes — its addresses, mail servers, text policies, and more — as answered by a DNS resolver. This tool runs the lookup in your browser and shows each record with its type, TTL, and value.
- A
- Maps a domain to an IPv4 address — the record most lookups resolve to.
- AAAA
- Maps a domain to an IPv6 address, used on IPv6-capable networks.
- MX
- Mail exchangers: which servers accept email for the domain, and in what priority order.
- TXT
- Free-form text records, used for SPF, domain verification, and other policies.
- NS
- The authoritative nameservers responsible for the domain's zone.
- CNAME
- An alias pointing one name at another canonical name.
- SOA
- Start of authority: the zone's primary nameserver, contact, and timing values.
- CAA
- Which certificate authorities are allowed to issue TLS certificates for the domain.
- SRV
- Service records that advertise the host and port for a specific service.
How the lookup works
When you enter a domain and choose a record type, your browser sends a query directly to a public DNS-over-HTTPS (DoH) resolver — Cloudflare by default, or another you pick — and displays the records it returns. The request is encrypted in transit, and because it goes straight from your browser to the resolver, we never see or store the domains you look up.
Seeing different answers from different resolvers usually means a recent change is still propagating. To compare several resolvers side by side, use the DNS propagation checker; to confirm a domain's records are cryptographically signed, use the DNSSEC checker.
DNS lookup — frequently asked questions
What is a DNS lookup?
A DNS lookup asks a resolver to return the DNS records published for a domain — for example its A record (IPv4 address), MX records (mail servers), or TXT records. This tool performs that lookup live from your browser and shows the raw records, including their TTL (how long they can be cached).
How is this different from the ping/command-line nslookup or dig?
It does the same job — querying DNS records — but runs in your browser over encrypted DNS-over-HTTPS instead of a terminal. You don't need to install anything, and the query is encrypted in transit. The records returned are the same ones dig or nslookup would show.
Why do different resolvers sometimes return different results?
DNS records are cached along the way, so right after a change one resolver may still serve the old value while another has the new one. That's called propagation. If you want to compare several resolvers at once, use the DNS propagation checker.
What does TTL mean in the results?
TTL (time to live) is how many seconds a resolver is allowed to cache the record before asking again. A low TTL means changes take effect quickly; a high TTL means the record can be served from cache for longer, which is efficient but slows propagation.
Do you store the domains I look up?
No. The lookup runs entirely in your browser and goes directly to a public DNS-over-HTTPS resolver. We don't proxy it through our servers and we don't log the domains you query.