DNS Lookup
Look up any DNS record type (A, AAAA, MX, NS, CNAME, TXT, SOA) for any domain — powered by Cloudflare DNS.
Did this tool work for you?
How to use this calculator
- 1
Enter the domain name you want to look up (e.g. google.com).
- 2
Select the DNS record type from the dropdown.
- 3
Click "Check Now" to query Cloudflare's DNS resolvers.
- 4
Results show all matching records with their TTL values.
Frequently asked questions
Where do the answers come from?
From a single resolver: the page asks Cloudflare’s public DNS-over-HTTPS service for the record type you picked and prints what it returns. It does not query your domain’s nameservers directly, and it does not compare resolvers. Because the answer comes from a caching resolver, the TTL shown can be lower than the value configured at your DNS host, and a recent change may not appear yet.
What do the Status values mean?
The first line shows the response code. NOERROR means the name exists and the query worked, even if there are no records of that type. NXDOMAIN means the name does not exist at all and is shown in red. SERVFAIL, REFUSED and the rest are shown as warnings and usually point to a problem at the authoritative servers or with DNSSEC validation. After a NOERROR with no data you will see "No <type> records found".
Why is the Type column a number?
The table prints the numeric record type exactly as the resolver returns it, not the name. The ones you will meet: 1 is A, 2 is NS, 5 is CNAME, 6 is SOA, 12 is PTR, 15 is MX, 16 is TXT, 28 is AAAA, 33 is SRV and 257 is CAA. If you ask for a CNAME-aliased name, rows with type 5 may appear even though you asked for A.
How do I do a reverse (PTR) lookup?
Enter the reversed address under in-addr.arpa yourself. For IPv4 address 203.0.113.5 the name is 5.113.0.203.in-addr.arpa. Typing a plain IP address does not do this conversion for you, and the tool will not find a PTR record for it. IPv6 reverse names use ip6.arpa with one hexadecimal digit per label.
What do I type for SRV and CAA lookups?
Use the full owner name. SRV records live under names of the form _service._protocol.domain, for example _sip._tcp.example.com, and querying only example.com returns nothing. CAA records are published on the domain itself and list which certificate authorities may issue certificates for it.
Can I paste a full URL?
Yes. The domain box accepts https:// addresses and paths, keeps only the host name, lowercases it and removes a trailing dot. It does not strip a leading www, so www.example.com and example.com are looked up as the different names they are.
Is this a propagation checker?
No. It queries one resolver, so it can show that your change is visible to that resolver but not that the rest of the world has it. To compare several resolvers, use the DNS Propagation Checker.
What does it not show?
It does not show DNSSEC details, response times, which authoritative server answered, the zone’s full contents or the history of a record. Ten record types are offered, and querying anything else, such as DS or HTTPS records, is not possible here.
Querying DNS records for a domain name
What a lookup returns
Enter a name, pick one of ten record types and the page sends that question to Cloudflare’s public resolver, then prints a Status line and a table of Name, Type, TTL and Value. The TTL is the number of seconds an answer may be cached. Because a recursive resolver counts the TTL down as it holds an answer, the figure you see can be smaller than the one set at the DNS host. The Type column shows the numeric type code returned by the resolver.
| Type | Code | What it holds |
|---|---|---|
| A | 1 | IPv4 address |
| AAAA | 28 | IPv6 address |
| MX | 15 | Mail server and priority |
| NS | 2 | Authoritative name servers |
| CNAME | 5 | Alias to another name |
| TXT | 16 | Free text: SPF, DKIM, verification tokens |
| SOA | 6 | Zone administration data |
| PTR | 12 | Name for an IP address (reverse) |
| CAA | 257 | Certificate authorities allowed to issue |
| SRV | 33 | Host and port for a named service |
Example inputs and what to look for
For an A lookup of example.com, a healthy result has Status NOERROR and one or more rows whose Value is a dotted IPv4 address; a name that does not exist shows NXDOMAIN in red, and a name with only an AAAA record shows NOERROR with "No A records found". For MX, each Value reads priority then host, such as "10 mail.example.com."; the lowest number is tried first. For TXT, look for values beginning v=spf1. For a reverse lookup of 203.0.113.5, type 5.113.0.203.in-addr.arpa with PTR selected. These describe the shape of results rather than quoting a real domain, because answers depend on live DNS.
Reading the Status line
NOERROR with rows means the record exists. NOERROR with no rows means the name exists but has no record of that type, which is normal, for instance, when you ask for CNAME on a domain that uses A records. NXDOMAIN means the name itself does not exist, so check spelling or whether the record was created at the right level. Any other code, such as SERVFAIL or REFUSED, appears as a warning and indicates the resolver could not get a usable answer.
Choosing the right type for the problem
Site not loading: check A and AAAA, and CNAME if the host is an alias. Email not arriving: MX, then the TXT records for SPF. Moved DNS provider: NS. Certificate issuance refused: CAA. A service such as VoIP or chat not found: SRV with the underscore name. Each lookup asks for one type at a time, so run several to build the full picture of a name.
Limits of a single-resolver check
The tool consults one public resolver and shows whatever that resolver has cached or can fetch. It does not go to your authoritative servers, so it cannot confirm a change is live everywhere, and it does not display DNSSEC data. Results can be cached briefly by the web service itself, which sends a 60-second cache header, so retrying within a minute may show the same answer. For a change that was just made, wait for the old TTL to expire before concluding anything.
Learn more from an authoritative source:
MDN Web DocsMX Lookup
Check the mail exchange (MX) records for any domain to see which mail servers receive email for it.
NS Lookup
Find the authoritative nameservers (NS records) for any domain to see who controls its DNS.
CNAME Lookup
Check CNAME (canonical name) records for any domain to see where it is aliased to.
TXT Record Lookup
View all TXT DNS records for a domain — including SPF, DKIM, DMARC, domain verification, and ownership tokens.
SPF Record Checker
Validate the SPF (Sender Policy Framework) record for any domain and understand its email authentication policy.
DKIM Record Checker
Look up and validate the DKIM (DomainKeys Identified Mail) public key record for a domain and selector.
Results are estimates for informational purposes only and do not constitute professional financial, medical, legal, or technical advice. Read full disclaimer →