Any DNS record for a domain, or all common types at once, with TTLs and decoded fields
Runs in your browser. Only the lookup you start is sent to cloudflare-dns.com or dns.google; nothing else leaves your device. Updated on 25 Oct 2026.A DNS lookup asks a resolver what records a name has. Type a domain, pick one of 17 record types or all 9 common ones, and each record comes back with its TTL and its fields labelled. The name is sent to Cloudflare or Google to answer it; nothing else leaves your device.
Choose a type in the Record type list, or pick All common types to ask for every common record at once.
Type the domain name, such as example.com, and press Look up.
Pick Cloudflare 1.1.1.1 or Google 8.8.8.8 under Resolver to have the other resolver answer; the lookup runs again.
Read each record in the Name, TTL and Data table, with its fields decoded and any alias chain shown above it.
Press Copy records to copy every answer as text.
This DNS lookup asks a public resolver, Cloudflare 1.1.1.1 or Google 8.8.8.8, the same question dig or nslookup would, and shows the answer in a table. Pick one record type, or "All common types" to ask for A, AAAA, CNAME, MX, NS, TXT, SOA, CAA and HTTPS together. Every record shows its TTL in seconds and in words, because the TTL is how long any copy of it may be cached.
The records that are hard to read by eye are split into labelled fields. An SOA becomes its primary server, the contact mailbox, the serial and four timers. A CAA record becomes flags, tag and value. An SRV record becomes priority, weight, port and target, with the service named from the record's own name. DS and DNSKEY records show the algorithm by name, and the key tag of each DNSKEY is worked out so you can match it against the DS record at the parent.
When a name is an alias, the CNAME chain is shown before the final records. The answer also says plainly when the name does not exist (NXDOMAIN), when the resolver could not get an answer (SERVFAIL), or when the name exists but has none of the type you asked for.
A browser cannot send DNS packets itself, so the page uses DNS over HTTPS. The name you type goes to the resolver you chose, which is how it gets an answer; nothing else about you or your other searches is sent. You see what that resolver has in its cache, which can lag a recent change by up to the record's TTL. To compare two resolvers side by side, use the DNS Propagation Checker.
The tool does not do zone transfers, query a domain's own name servers directly, or show records at names you do not type: DNS has no way to list every subdomain.
Yes. No signup and no limit on how many names you look up. Each lookup is one request from your browser to Cloudflare or Google, both of which run their public resolvers free of charge. The page is supported by a few ads shown outside the tool.
Only the name and the record type, sent from your browser to the resolver you chose: Cloudflare at cloudflare-dns.com or Google at dns.google. The resolver needs them to answer. Nothing else leaves your device, and this site never sees the names you type.
A resolver that already cached the old answer keeps it until its TTL runs out, then asks again. A name that did not exist is remembered as missing for the SOA record's last number of seconds. Wait that long, or compare both resolvers in the DNS Propagation Checker.
NXDOMAIN is the DNS answer for a name that does not exist at all, for any record type. Common causes are a typo, a subdomain that was never created, or a domain that has expired. A name that exists but lacks the type asked for gets a different answer: no records.
SERVFAIL means the resolver tried and could not get a trustworthy answer. Either the domain's own name servers did not reply, or the answer failed DNSSEC validation. The DNS Propagation Checker asks again with DNSSEC checking off, which shows which of the two it is.
No. DNS answers questions about names you already know; there is no query that lists every name in a zone, and zone transfers are refused by almost every public server. Certificate transparency logs are the usual way to discover subdomains, and this tool does not search them.
Still stuck? Ask about DNS Lookup and anybody who knows can answer. No account needed.
Same job, other tools: AS Number Lookup – Turn an AS number into the network name, registry and allocation date · IP to ASN Lookup – Map an IP address to the ASN that announces it, with the BGP prefix.
On the related tools: Open Port Checker – See if a port forwarded on your router is reachable from the internet.
Also works as: IPSECKEY Record Lookup · A Record Lookup.