DNS Lookup (A, AAAA, MX, TXT, NS, CNAME, SOA, CAA)

Look up A, AAAA, MX, TXT, NS, CNAME, SOA, CAA and SRV records for any domain from your browser via Cloudflare DNS-over-HTTPS. Shows rcode, TTL and parsed answers — free, no signup.


How to use it

  1. Enter a domain (or hostname) and tick the record types you want.
  2. Click Lookup. Queries go from your browser to Cloudflare public DNS-over-HTTPS; this site never sees the name.
  3. Read the rcode (NOERROR, NXDOMAIN, SERVFAIL), each answer's TTL, and type-specific fields (MX preference, SOA timers, CAA flags/tag/value, joined TXT strings).

Related email DNS tools

For mail-specific digs try MX Lookup, SPF Checker and DMARC Checker. To audit many domains at once, see the Bulk SPF / DMARC / MX Auditor on Apify.

FAQ

What is DNS-over-HTTPS (DoH)?

DoH sends DNS queries inside HTTPS so the lookup looks like ordinary web traffic. This page uses Cloudflare's public resolver at cloudflare-dns.com from your browser; the domain name never passes through this site.

What do the common record types mean?

A/AAAA map a name to IPv4/IPv6. MX lists mail servers (preference + host). TXT holds SPF, DMARC, verification strings and more. NS names the authoritative name servers. CNAME aliases one name to another. SOA holds zone metadata (serial, timers). CAA lists which CAs may issue certificates for the domain.

What is TTL?

Time to live: how many seconds a recursive resolver may cache that answer before asking again. Lower TTLs make changes show up faster; higher TTLs reduce query load.

Why Cloudflare DoH?

cloudflare-dns.com is a widely used public resolver with a simple JSON DoH API (application/dns-json) that works from the browser without plugins. Results reflect what Cloudflare's resolvers see, not a recursive lookup from your ISP.

How is this different from dig?

dig talks to a resolver you choose (often your LAN or ISP) over classic DNS/UDP. This tool always uses Cloudflare over HTTPS from your browser, so answers can differ from dig @8.8.8.8 or dig @your-DC, and it cannot set EDNS options or query private/internal zones.

Want the full kit?

Runbooks, checklists and helpdesk templates: IT Admin Packs on Gumroad.