DNS Lookup
Look up the DNS records of any domain (A, AAAA, CNAME, MX, NS, TXT, SOA and CAA) with TTL, compare the Cloudflare and Google answers to check propagation, and see whether the domain uses DNSSEC.
How to useDNS records for any domain
Queries are made over DNS over HTTPS to Cloudflare (1.1.1.1) and Google (8.8.8.8), straight from your browser.
Available in: 
DNS Lookup: what it is for
Enter a domain and see every DNS record published for it, with the TTL of each: the site's IPs (A and AAAA), aliases (CNAME), mail servers (MX), name servers (NS), verification texts (TXT), the zone (SOA) and the authorities allowed to issue certificates (CAA). The query runs on two public resolvers, Cloudflare and Google, and the tool warns when the answers differ, a sign that a change is still propagating. It also shows whether the domain uses DNSSEC.
Queries use DNS over HTTPS, straight from your browser.
How to use
- Enter the domain.
- Pick a record type or see all of them.
- Check the values, the TTL and propagation.
When to use it
- Check whether a DNS change has propagated.
- Find the Google or Microsoft TXT verification record.
- Find out a domain's name servers.
Frequently asked questions
What is a DNS lookup?
DNS is the internet's address book: it turns a name like example.com into the server address (A or AAAA record) and stores other information, such as mail servers (MX), name servers (NS) and verification texts (TXT). The lookup shows what is published for the domain right now.
How do I know if DNS has propagated?
The tool asks two public resolvers, Cloudflare (1.1.1.1) and Google (8.8.8.8), and flags whether their answers match. If they differ, the change is still spreading: wait for the old TTL and check again.
What is TTL?
It is the time, in seconds, that resolvers keep an answer in cache before asking again. A TTL of 3600 means a change can take up to 1 hour to reach everyone.
What does DNSSEC enabled mean?
That the domain's answers are digitally signed and the resolver was able to validate the signature, which stops anyone from forging the site's address along the way.