This DNS lookup tool queries authoritative records for any domain directly from your browser using Cloudflare's DNS-over-HTTPS endpoint. Inspect A, AAAA, CNAME, MX, TXT, NS, SOA, and CAA records without installing dig or nslookup. Every query runs client-side, so your lookups never touch our servers — they travel encrypted to Cloudflare's 1.1.1.1 public resolver and back. Useful for debugging propagation issues, verifying SPF/DKIM/DMARC records, checking mail routing, auditing CAA policies, and confirming nameserver delegation during domain migrations or DNS provider switches.
Last updated: March 20261.1.1.1 / cloudflare-dns.com). Nothing is logged by this site. See Cloudflare's resolver privacy policy for their logging practices.
example.com) into machine-readable metadata — most commonly IP addresses for an A (IPv4) or AAAA (IPv6) record, but also mail servers (MX), text metadata (TXT — used for SPF, DKIM, DMARC, domain verification), authoritative name servers (NS), or certificate authority policy (CAA). Every time you load a web page, send an email, or open an app, a chain of DNS lookups happens behind the scenes before a single byte of application data is exchanged.fetch() request to https://cloudflare-dns.com/dns-query?name=DOMAIN&type=TYPE with the Accept: application/dns-json header. Cloudflare responds with a standard DoH JSON payload, which we parse to build the results table. Because the request goes straight from your browser to Cloudflare over HTTPS, neither this site nor any intermediate network can see the domain you looked up.1.1.1.1), Google (8.8.8.8), and Quad9 (9.9.9.9) all operate DoH endpoints. Browsers like Firefox and Chrome can be configured to use DoH for all lookups. This tool uses Cloudflare's because it returns a clean JSON response format that parses nicely in-browser.10 mail.example.com. — the number is the preference (lower = higher priority). TXT records are arbitrary strings shown in quotes; SPF records start with v=spf1, DMARC with v=DMARC1, and DKIM with v=DKIM1. SOA records contain seven fields: primary NS, admin email (with . in place of @), serial number, refresh, retry, expire, and minimum TTL. The serial number typically increments on every zone edit — useful for confirming a DNS change has been pushed.