DNS Lookup

Look up a domain's A, AAAA, CNAME, MX, TXT, NS, SOA and CAA records with TTLs, plus automatic SPF and DMARC checks.

✨ Features

  • Query A, AAAA, CNAME, MX, TXT, NS, SOA and CAA together, or one record type at a time
  • Every answer carries its TTL, so you can tell how long a stale value may linger
  • Pulls out the SPF record and automatically fetches DMARC from the _dmarc subdomain
  • The domain you looked up goes into the URL fragment, so the same view can be shared

🪄 Use cases

Confirm a server migration

Check whether the A record now points at the new IP, and how much TTL is left.

Debug mail delivery

Verify the MX hosts and whether SPF and DMARC are published correctly.

Verify a domain ownership TXT

See whether the TXT record a service asked for is visible in public DNS.

Find out who runs the DNS

Read the NS records to see which provider is authoritative right now.

🔒 Privacy

DNS queries go straight from your browser to Cloudflare's DNS over HTTPS resolver (1.1.1.1). They never pass through this site's server, so there is no record here of who looked up which domain. The domain you type is kept only in the URL fragment (the part after #, which browsers never send to a server) and in your browser's localStorage.

❓ FAQ

I changed my DNS but the old value keeps coming back

Every record carries a TTL in seconds, and resolvers are allowed to cache the old answer for that long. With a TTL of 3600 you may see the previous value for up to an hour; at 86400, up to a day. This tool asks Cloudflare's public resolver directly, so authoritative changes usually show up here quickly, but your ISP's resolver and your own device cache can lag further behind. If you are planning a migration, lower the TTL to around 300 seconds a few days beforehand.

What is the difference between SPF and DMARC?

SPF is a TXT record beginning with v=spf1 that lists which servers may send mail using your domain in the envelope sender. DMARC lives on _dmarc.<domain> and says what receivers should do when SPF and DKIM both fail — p=none only monitors, quarantine sends to spam, reject refuses the message — and where to send aggregate reports. SPF alone carries no enforcement, so publishing both is the usual baseline.

I added a CNAME but other records stopped resolving

By design, a name that has a CNAME cannot carry any other record type. A CNAME says "this name is just an alias, go look over there", and DNS delegates everything else to the target. That is why you cannot put a CNAME on the apex of a domain (example.com itself) — it would collide with the mandatory NS and any MX records. To point an apex at another host, use your provider's ALIAS, ANAME or CNAME-flattening feature instead.

What does the number in an MX record mean?

It is the preference value, and lower wins. With a 10 and a 20, mail normally goes to the host listed at 10 and only falls back to 20 when the first does not answer. Several hosts sharing the same number split the load between them. The absolute values carry no meaning — only their relative order — so people conventionally use round numbers like 10, 20 and 30 to leave room for inserting servers later.

🔗 Related tools

Look up a domain

You can paste a full URL (https://example.com/path) — only the host name is used.

Results

TTL is in seconds and tells you how long resolvers may cache the answer. Right after a DNS change, the old value can keep coming back for that long.

Email records

SPF (TXT)
-
DMARC (TXT on _dmarc)
-

SPF is a TXT record starting with v=spf1 that lists the servers allowed to send mail as this domain. A domain may publish only one.

DMARC lives in a TXT record on _dmarc.<domain> and says what to do with mail that fails SPF and DKIM (p=none, quarantine or reject) plus where to send reports.

DKIM cannot be checked automatically because it lives under a selector you have to know (for example default._domainkey.example.com). If you know the selector, type that full host name here and look up its TXT records.

How to read the records

  • A / AAAAthe IP address the name points to — A for IPv4, AAAA for IPv6.
  • CNAMEan alias for another name. A host with a CNAME cannot carry other record types.
  • MXthe mail servers that accept mail for the domain. The leading number is the preference — lower wins.
  • TXTfree-form text, used for SPF, DMARC and domain ownership verification.
  • NSthe name servers authoritative for the domain.
  • SOAzone administration data (primary name server, admin mailbox, serial and timers).
  • CAAwhich certificate authorities are allowed to issue certificates for the domain.