DNS Record Lookup
Query DNS records (A, AAAA, CNAME, MX, TXT, NS, SOA, CAA, SRV, PTR) for any domain over DNS-over-HTTPS, with TTLs, NXDOMAIN status and DNSSEC flag.
What is DNS Lookup?
This DNS lookup tool resolves a domain name and shows its records with their TTLs, like dig or nslookup but in the browser. Pick one record type or "All common types"; entering an IP address performs a reverse (PTR) lookup automatically.
How to use DNS Lookup
- Enter a domain (
example.com, a full URL is also accepted) or an IP address for reverse DNS. - Choose a record type, or All common types to query A, AAAA, CNAME, MX, NS, TXT, SOA and CAA together.
- Press Look up and read each record's name, TTL, type and data; MX records are sorted by priority.
- Check the status badge (NOERROR or NXDOMAIN) and the DNSSEC validated badge.
Example
example.com, TXT
example.com TTL IN TXT v=spf1 -all
TTL values count down in the resolver's cache, so they vary between queries.
When to use DNS Lookup
Use it to verify a DNS change, check SPF/DKIM/DMARC TXT records, see which mail servers a domain uses or confirm CAA records before issuing a certificate. Results come from one recursive resolver, so a recent change may still be cached elsewhere; it does not query your local or internal DNS server.
How DNS Lookup works
Queries are sent from your browser to Cloudflare's public resolver using the DNS-over-HTTPS JSON API (cloudflare-dns.com/dns-query with accept: application/dns-json). The JSON answer is parsed locally: CNAME chain entries are kept, TXT strings split into quoted chunks are joined, and the AD flag is shown as "DNSSEC validated". IP addresses are converted to their in-addr.arpa or ip6.arpa name for PTR queries; internationalized domain names are converted to punycode first.
Common Use Cases
- Confirm that a new A record points to the right server after a migration.
- Read a domain's SPF and DMARC TXT records when debugging email delivery.
- List MX records in priority order to see who hosts a company's email.
- Check that CAA records allow your certificate authority.
- Find the hostname behind an IP with a reverse PTR lookup.
Security Note
The names you query are sent to Cloudflare DNS-over-HTTPS (cloudflare-dns.com).
FAQs
Why do I see an old IP after changing my DNS?
Resolvers cache answers for the record's TTL. Cloudflare's resolver may still hold the old value until the TTL expires.
What does NXDOMAIN mean?
The domain name does not exist in DNS – it is not registered, or the subdomain has no records at all.
What does the DNSSEC validated badge mean?
The resolver set the AD (authenticated data) flag: the answer was cryptographically validated through the DNSSEC chain of trust.
Can it look up internal hostnames?
No. Queries go to a public resolver on the internet, so names that only exist on your company's internal DNS will return NXDOMAIN.