About DNS Lookup
Queries DNS records for any domain using Cloudflare’s DNS-over-HTTPS (DoH) resolver. Supports A, AAAA, CNAME, MX, NS, TXT, SOA, CAA, and SRV records, plus reverse (PTR) lookups from an IPv4 or IPv6 address. The ALL mode fetches every common record type in one query, MX and SRV results are sorted by priority, SOA/SRV/CAA payloads are parsed into labelled fields, and a DNSSEC badge appears when the resolver returns authenticated data.
- Ten record types: A, AAAA, CNAME, MX, NS, TXT, SOA, CAA, SRV, and reverse PTR
- ALL mode queries A/AAAA/CNAME/MX/NS/TXT/SOA/CAA in parallel and merges the results
- Reverse PTR: enter an IPv4 or IPv6 address and it builds the in-addr.arpa / ip6.arpa pointer for you
- MX and SRV records are sorted by priority; SOA, SRV and CAA payloads are split into labelled fields
- Distinguishes NXDOMAIN, SERVFAIL, REFUSED and other RCODEs instead of a single generic error
- DNSSEC badge shows when the resolver cryptographically validated the answer (AD flag)
- Queries Cloudflare’s 1.1.1.1 DoH endpoint over HTTPS — no plaintext DNS; Copy all exports TSV
Frequently Asked Questions
- What is the ALL option?
- ALL queries the common record types (A, AAAA, CNAME, MX, NS, TXT, SOA, CAA) in parallel and merges them into one priority-sorted list, so you see a domain’s full DNS footprint without switching types and re-querying.
- How does reverse (PTR) lookup work?
- Select PTR and enter an IP address instead of a domain. The tool builds the reverse pointer name (8.8.8.8 → 8.8.8.8.in-addr.arpa, or the ip6.arpa nibble form for IPv6) and resolves it to the hostname.
- What does the DNSSEC badge mean?
- It appears when Cloudflare returns the Authenticated Data (AD) flag, meaning the resolver cryptographically validated the response chain. No badge means the zone is unsigned or validation was not performed — not necessarily that anything is wrong.
- Can I query a resolver other than Cloudflare?
- Not yet — queries use Cloudflare’s DoH endpoint. For comparing resolvers or checking propagation across them, a command-line tool like dig (dig @8.8.8.8 example.com) is still the right call.
More Networking & IT Tools
All Networking & IT toolsNetwork Diagnostics
Analyze your network connection with DNS speed tests, latency measurement, WebRTC detection, and browser capability checks.
SSL Certificate Checker
Check the live SSL/TLS certificate for any domain — see validity, issuer, TLS version, cipher suite, and the full certificate chain.
CIDR Aggregator
Summarize a list of IPv4 addresses and CIDR blocks into the minimal set of aggregated CIDR routes.
Hosting Checker
Identify the web hosting provider, CDN, DNS, and email service for any domain.