Micro Tools
Advertisement

DNS lookup

Query DNS records for any domain over HTTPS: A, AAAA, MX, TXT, CNAME and NS. See mail servers, name servers and verification tokens instantly.

DNS query

Enter a domain and pick a record type.

DNS records

Records appear here.

Advertisement

How DNS over HTTPS works

Traditional DNS is plaintext UDP on port 53, visible to your network. DNS over HTTPS wraps the same query in an encrypted HTTPS request to an endpoint like Cloudflare's, returning JSON instead of binary packets. Your browser does the whole exchange, so no server side is needed for this tool.

Reading the record types

A records map a domain to IPv4 addresses, AAAA to IPv6. MX records list mail servers with priorities, TXT holds SPF, DKIM and verification tokens as text, CNAME aliases one name to another, and NS shows which name servers are authoritative for the domain.

Related tools

JSON formatterFormat and validate JSON, privately. Regex testerTest regex live with highlighting. Base64 encoderBase64 encode and decode, plus URL encoder and JWT decoder.

DNS Lookup FAQs

Why does my domain show no MX records?
Then it cannot receive email at that domain. MX records are what sending servers look up; without them, mail bounces. Add them at your DNS provider when you set up Google Workspace or similar.
What is a TXT record used for?
Domain verification and email authentication: Google site verification tokens, SPF policies that list allowed senders, and DKIM public keys all live in TXT records. They are the most-queried type after A.
How long does DNS take to update?
Changes propagate as old cached entries expire, governed by the TTL value, commonly 5 minutes to 24 hours. If a record looks stale, wait out the TTL rather than re-saving it repeatedly.
CNAME versus A record: which should I use?
Use A records for root domains pointing at IPs, and CNAMEs for subdomains aliasing to another hostname, like www to your host. Never put a CNAME on the bare root domain; it breaks MX and NS resolution.
Is DNS over HTTPS private?
It encrypts the query content from your local network and ISP, but the DoH provider still sees which domains you look up. For this tool that tradeoff is fine: Cloudflare handles billions of such queries daily.
Advertisement