DNS Query Tool — A, MX, TXT, NS Records & NSLookup
Enter a domain to query DNS records using Cloudflare's DNS-over-HTTPS. See A, AAAA, MX, CNAME, TXT, NS, and SOA records with TTL values.
How to do a DNS lookup
- Enter a domain name and pick the record type (A, AAAA, MX, TXT, CNAME, NS, SOA).
- The tool queries a public DNS resolver and returns all matching records with TTLs.
- Compare the result against what you expect — missing records or mismatched IPs point to a misconfiguration.
- Use the TTL values to estimate how long a change will take to propagate globally.
Common use cases
- Verifying a DNS change actually propagated by querying a neutral public resolver.
- Debugging email delivery by inspecting MX, SPF (TXT) and DMARC (TXT) records.
- Checking whether a CNAME points to the correct CDN endpoint after a migration.
- Auditing the TTL settings of a production domain before scheduling a change.
Frequently asked questions
Why do I see stale records?
Your local ISP resolver may still be caching the old value. Use the public resolver option to bypass that cache and see the authoritative answer.
What is a TTL?
Time To Live in seconds. A record with TTL 300 says 'cache me for 5 minutes before re-asking'. Lower TTLs speed up propagation; higher TTLs reduce DNS traffic.
What does the SOA record tell me?
It identifies the primary nameserver, admin contact and propagation settings for the zone. Useful when debugging delegation or transfer issues.
Is my query logged?
No. Lookups run through the browser and results are not stored server-side.
DNS Query, NSLookup & DIG — A, MX, TXT Records
DNS translates domain names to IP addresses. This tool queries Cloudflare's public DNS resolver (1.1.1.1) via DNS-over-HTTPS for fast, private results.
- A, AAAA, MX, CNAME, TXT, NS, SOA records
- TTL display
- Powered by Cloudflare DNS-over-HTTPS
- No server needed — queries from your browser
- Fast and private
Free. No signup. Browser tools (subnet, JWT, password strength) run locally; lookup tools query public APIs (Cloudflare DoH, RDAP, certificate logs). Full per-tool breakdown at /methodology/.
Sources (3)
- Mockapetris, P. (1987). Domain Names — Implementation and Specification. RFC 1035, IETF.
- Hoffman, P., & McManus, P. (2018). DNS Queries over HTTPS (DoH). RFC 8484, IETF.
- Thomson, S., Huitema, C., Ksinant, V., & Souissi, M. (2003). DNS Extensions to Support IP Version 6. RFC 3596, IETF.
These are the IETF RFCs, NIST publications, and W3C standards the tool implements or queries. Locate them on the IETF Datatracker (datatracker.ietf.org) or the official standards body.
Related guides
- DNS Propagation — Why "Wait 48 Hours" Is Mostly WrongDNS changes do not propagate — caches expire. Here is how TTL, negative caching, and public resolvers actually work during a migration.
- Email Authentication — SPF, DKIM, and DMARC Explained ProperlyHow SPF, DKIM and DMARC actually work together to authenticate email, with the gotchas that break deliverability in production.
By Marco B. ·