Free tool · Network
DNS lookup
Check the DNS records for any domain, or enter an IP address for a reverse (PTR) lookup. Results come from a public resolver, with DNSSEC status.
Query DNS
| Name | Type | TTL (s) | Value |
|---|
Common record types
| Type | What it holds |
|---|---|
| A / AAAA | IPv4 / IPv6 address for a name |
| CNAME | An alias pointing to another name |
| MX | Mail servers for the domain, with priority |
| NS | Authoritative name servers |
| TXT | Text such as SPF, DKIM, DMARC and ownership checks |
| SOA | Zone details: primary server, serial and timers |
| CAA | Which certificate authorities may issue certificates |
| SRV | Host and port for a service, such as SIP |
| PTR | The name for an IP address (reverse lookup) |
Frequently asked questions
Why do I get a different answer from my own network?
Your company may use split DNS, where internal servers answer differently from public DNS. Results can also differ while old records are still cached, until their TTL expires.
Why don’t internal names resolve?
This tool asks a public resolver, which can only see public DNS. Names that exist only on your internal DNS servers will return NXDOMAIN.
What does DNSSEC validated mean?
The resolver checked the records’ cryptographic signatures, so they were not altered in transit. Many domains are not signed, which is common and not an error.
Who answers the query?
Cloudflare’s public resolver (1.1.1.1), queried over HTTPS by our lookup service. Queries are not stored.