DNS Lookup: A, AAAA, MX, TXT, NS, CNAME & more
Free in-browser DNS lookup. Resolve any record type via Google DNS or Cloudflare 1.1.1.1 over HTTPS (DoH), or run both side-by-side to compare. No signup, no proxy.
When to run a DNS lookup
Verify a website is live
Check that A and AAAA records resolve to the right IP after launching a site, switching CDN or migrating hosts.
Email deliverability
Pick the Mail health preset to fetch MX, SPF, DKIM and DMARC in one click — the four records every Gmail / Outlook deliverability test demands.
Audit CAA & DNSSEC
Inspect CAA records to lock down which CAs may issue certificates for you, and read the AD flag to confirm DNSSEC validation.
Propagation check
Compare answers from Google, Cloudflare, Quad9 and AdGuard side-by-side. A mismatch means a DNS change hasn't propagated yet or the domain has split-horizon DNS.
Reverse DNS (PTR)
Paste an IPv4 or IPv6 address and the tool auto-runs the reverse PTR query — useful for traceroute output, mail-server hostnames and abuse reports.
HTTPS & SVCB
Fetch the modern HTTPS / SVCB records that advertise ECH, HTTP/3 (h3) and alternative IPs — used by Apple Private Relay and Cloudflare.
How to use the DNS lookup tool
Enter a domain or IP
Type example.com or paste an IPv4 / IPv6 address — the tool detects the input and routes the right query.
Pick a record type
Choose a single type (A, AAAA, MX, TXT, NS, CNAME, SOA, CAA, SRV, PTR, HTTPS, SVCB, TLSA, DS, DNSKEY) or use All common types / Mail health for one-click bundles.
Choose a resolver
Run against Google 8.8.8.8, Cloudflare 1.1.1.1, Quad9, AdGuard — or all four in parallel to compare.
Read the answers
Each card shows the resolver, record type, RCODE, TTL and data. The header pill turns green when DNSSEC validation succeeds (AD flag set).
About DNS, DoH and the records this tool resolves
The Domain Name System (DNS) turns human-readable names like hcodx.com into IP addresses, mail-server hostnames, certificate-authority rules and dozens of other tiny pieces of metadata. This online DNS lookup queries the same public resolvers your operating system uses, via DNS-over-HTTPS (DoH) so every request is encrypted in transit and visible to your browser only.
A and AAAA — addresses
A records point a hostname at an IPv4 address; AAAA records do the same for IPv6. If a site loads in some browsers but not others, missing AAAA on an IPv6-only network is a classic culprit.
MX, SPF, DKIM, DMARC — mail
The Mail health preset bundles MX (where mail goes), the apex TXT with your SPF policy, the _dmarc TXT, and a sample DKIM record at default._domainkey. Together these are the four records every Gmail Postmaster Tools and Microsoft 365 deliverability audit looks for. Misconfigure any one and your mail starts landing in spam.
NS, SOA, CNAME — delegation & aliases
NS records list the authoritative name servers for a domain. SOA exposes the zone's serial, refresh / retry timers and the responsible email. CNAME aliases one name to another — used heavily by SaaS apps like Vercel, Netlify and Heroku to point custom domains at their app.
CAA, HTTPS, SVCB, TLSA, DS, DNSKEY — security & modern
CAA tells certificate authorities which of them may issue certs for your domain — a cheap defence against rogue issuance. HTTPS and SVCB (RFC 9460) are the next-gen records that bundle ALPN protocols, port numbers, ECH keys and IP-address hints into the very first DNS hop. TLSA records (DANE) pin a certificate to a hostname. DS and DNSKEY are the DNSSEC chain-of-trust records — when present and validated, the resolver sets the AD (Authenticated Data) flag in the answer.
Why query four resolvers?
Different resolvers cache for different durations and apply different filters. Quad9 blocks known-malware domains; AdGuard blocks ads and trackers. If Google answers but Quad9 returns NXDOMAIN, you've found a malicious host. If two resolvers disagree on a public domain, you're seeing DNS propagation lag — usually fully fixed within an hour.
How DoH works under the hood
Instead of sending raw DNS packets over UDP port 53 (which any ISP can read), this tool issues a regular GET request to each resolver's HTTPS endpoint with Accept: application/dns-json. The response is a JSON object with Status, Question, Answer, Authority and the AD flag. Nothing leaves your browser, no record is kept by this page.
DNS Lookup — frequently asked questions
It queries Google's or Cloudflare's DNS-over-HTTPS endpoints from your browser: dns.google/resolve and cloudflare-dns.com/dns-query. Both return JSON and support CORS.
DNS records are split by type. Pick "All common types" to fetch A, AAAA, MX, TXT, NS, CNAME and SOA in one pass.
This page logs nothing. Google and Cloudflare publish their own DoH privacy policies — Cloudflare's 1.1.1.1 commits to not retaining identifying logs.