DNS Lookup
Enter a domain to query its DNS records over encrypted DNS-over-HTTPS. Check where a site points, which servers receive its mail, and whether its SPF and verification records are in place.
Enter a domain to see its DNS records.
About this tool
DNS turns names into addresses. A and AAAA records hold the IPv4 and IPv6 addresses of a host, CNAME points one name at another, MX lists the mail servers for a domain, NS names the authoritative servers, and TXT carries free text used for SPF, DKIM, DMARC and domain verification. The TTL is how many seconds resolvers may cache each answer.
The query goes to Cloudflare's public resolver over HTTPS, with Google's as a fallback, so nobody on the network can see or alter it. Answers reflect what the public internet sees right now; after you change a record at your registrar it can take up to the old TTL before every resolver notices.
Frequently asked questions
- Why do I see no records?
- The domain exists but has no record of that type. A domain served through a CNAME, for example, has no A record of its own.
- What does DNSSEC validated mean?
- The resolver checked the cryptographic signatures on the answer and they were valid, so the records cannot have been forged on the way.
- How long do DNS changes take?
- Until the previous TTL expires at every resolver, typically minutes to a few hours. A 48-hour wait is a myth from the days of long default TTLs.
- Can I look up an IP address?
- Reverse lookups need the special in-addr.arpa form. Enter the address reversed followed by .in-addr.arpa and choose PTR, or use the IP address checker for your own address.