DNS Lookup
About the DNS Lookup Tool
Look up the DNS records of any domain: A and AAAA (IP addresses), MX (mail servers), TXT (SPF, DMARC and verification codes), NS (nameservers), CNAME (aliases), SOA and CAA. Enter an IP address instead to see its reverse DNS (PTR) hostname. Queries are sent over encrypted DNS-over-HTTPS to Cloudflare (1.1.1.1) or Google (8.8.8.8) public resolvers. Use Compare both to check whether DNS changes have propagated to both — handy after moving a website or changing email providers.
To answer, this tool sends the domain or IP address you look up to public lookup services, so it needs an internet connection.
How to use it
- Enter a domain such as example.com (a full URL works too) or an IP address.
- Choose All, or pick a single record type.
- Optionally pick a resolver, or Compare both to spot propagation differences.
- Copy individual records, or copy everything in zone-file format.
Frequently asked questions
What is the difference between an A and a CNAME record?
An A record points a name directly to an IPv4 address. A CNAME makes a name an alias of another hostname, which then resolves to its own addresses. AAAA is the IPv6 equivalent of an A record.
Why do Cloudflare and Google show different results?
Each resolver caches records for the time set by the TTL. After you change a record, one resolver may still serve the old cached value until its TTL expires. Some services also return different IPs by location (geo-DNS or CDNs), which is normal.
What does TTL mean?
Time to live — how long resolvers may cache the record before asking again. A TTL of 1h means a change can take up to an hour to be seen everywhere. Lower the TTL before planned changes for faster propagation.
What does NXDOMAIN mean?
NXDOMAIN means the name does not exist in DNS. Either it is misspelled, the domain is not registered or has expired, or the subdomain simply has no records.
What does “DNSSEC validated” mean?
The resolver verified the records’ cryptographic signatures, proving they came from the domain’s real nameservers and were not tampered with in transit.