DNS Lookup: check any record for any domain

A DNS lookup is a query sent to a DNS resolver asking it to return one or more records for a domain name. The most common is the A record, which returns the IPv4 address the domain points to. There are around ten commonly-used record types, each answering a different question: A and AAAA for addresses, MX for mail servers, TXT for SPF, DKIM and verification, NS for who runs the zone, CNAME for aliases, and so on. This tool lets you query any of them.

Queries are sent directly from your browser to a public DNS-over-HTTPS resolver, either Cloudflare (1.1.1.1) or Google (8.8.8.8), whichever you pick. There is no backend proxy, no account and no logging on our side. The resolver you choose returns the same data it would return to any other client. This is the same DNS the whole internet uses.

Both are public, free, and support DNS-over-HTTPS. Cloudflare tends to be slightly faster from most locations and does not log client IPs beyond a short retention window. Google has global presence and sometimes serves different cached records when propagation is uneven. When in doubt, query both. If they agree, the record is widely propagated. If they disagree, one is serving a cached answer and the change has not fully rolled out yet.

TTL stands for Time-To-Live and is measured in seconds. It tells every resolver in the world how long it may cache the record before asking the authoritative nameserver again. A TTL of 300 means the record can be cached for five minutes; 86400 means one day. Low TTLs mean changes propagate quickly but cause more DNS traffic. Most providers default to 300 to 3600. Before a migration, drop your TTL to 60 a day in advance so the change propagates almost instantly.

NXDOMAIN (Non-Existent Domain) means the resolver could not find the domain at all. The authoritative nameservers said it does not exist. This usually means the domain is misspelled, not registered, or its registration has expired. It is different from "the domain exists but has no record of this type". In that case you will see NOERROR with an empty answer section.

Three common reasons. First, different resolvers cache for different lengths of time, so a change made an hour ago might be visible on one resolver and not another. Second, many large sites use geo-aware DNS and return different answers based on where the resolver is located. Third, some sites use round-robin DNS and rotate between multiple A records on each query. Run the query twice and compare. If the answers rotate, it is round-robin.

When a resolver cannot find the record you asked for, it often returns information about the zone itself instead of a direct answer, usually the SOA record (which contains the zone serial number and contact details) or the NS records (who runs the zone). The authority section is where that information lives. It is useful for confirming that you are querying the right domain and for finding out which nameservers are authoritative.

AD stands for Authenticated Data. When a resolver validates DNSSEC and the response was cryptographically verified, it sets the AD bit on the answer. Seeing the badge means the domain DNSSEC configuration is working and the response can be trusted. Not seeing it either means the domain does not use DNSSEC, or that validation failed, usually the former.

Yes, using the PTR record type. Enter the IP address. The tool automatically converts it to the correct reverse-DNS format (in-addr.arpa for IPv4, ip6.arpa for IPv6) and sends the query. Not every IP has a PTR record. Many residential and cloud IPs return NXDOMAIN, which is normal.

Yes. SRV records have a special format: _service._proto.name. For example, _sip._tcp.example.com, or _ldap._tcp.example.com. Enter the full name including the underscores. The tool passes it through unchanged to the resolver, which will return the service location records if they exist.

Yes. DNS is a public system. Every record you can see is visible to every resolver on the internet. Looking up MX, TXT, NS or any other record for any domain is completely normal and legal. What matters is what you do with the information. Security audits, competitor research and verification are all fine. Using it to plan an attack on someone else infrastructure is not.

Completely free, no sign-up, no email, no ads blocking the input. The tool works on every modern browser, including Chrome, Safari, Firefox and Edge on iPhone and Android. Recent lookups are stored on your device only. Clear them with one tap, or clear all site data to reset.