About the DNS Lookup Tool

What it does, how it protects your privacy, and how to read the results with confidence.

Open Tool
This tool retrieves DNS records for a domain and presents them in a clean, readable way. You can select record types, run the query, then copy values for documentation or troubleshooting. Everything renders locally in your browser and the query is sent over HTTPS to a public DNS resolver.

Why DNS Records Matter

Domain Name System records describe where services for a domain live. They direct web traffic, route email, point to aliases, and reveal the authoritative servers for a zone. When something breaks on a website or in email delivery, DNS is often the first place to check.

A and AAAA

Map a hostname to an IP address. A uses IPv4, AAAA uses IPv6.

MX

Identifies mail servers that accept email for the domain. Priority numbers decide which server receives mail first.

TXT

Carries text values, commonly SPF and DKIM, as well as verification tokens for services.

CNAME

Creates an alias from one hostname to another, which simplifies changes.

NS

Declares the authoritative name servers that answer for the zone.

SOA

Contains zone metadata, the primary nameserver, an administrative contact, and timing values for caching.

How the Tool Works

The page builds a DNS-over-HTTPS request and sends it to a public resolver. The response contains records for the types you selected, with time to live values and data fields. The page does not send analytics and it does not include third party trackers.

Query transport
HTTPS to a public resolver endpoint for DNS-over-HTTPS.
Rendering
All results render in your browser using safe text nodes, which prevents script injection from unusual record content.
Copy actions
Copy buttons use the Clipboard API and never upload the values anywhere.
Tip, DNS changes need time to propagate. Caches respect TTL values, so you may see older answers for a while after an update.

Privacy and Security Notes

The query contains the domain name you enter. It goes to the resolver you see documented in the tool. There is no referrer header and no credentials, which keeps requests minimal. If you want additional privacy, use a reputable VPN or a resolver that you trust.

Interpreting Results

Multiple A or AAAA records
This can indicate load balancing or anycast. It is normal to see more than one value.
MX priority
Lower numbers have higher priority. A value of 10 beats 20 when servers are both available.
TXT for email authentication
Look for SPF, DKIM, and DMARC. These help prevent spoofing and improve deliverability.
Unexpected CNAME
Aliases that point to unfamiliar domains can break services. Confirm that the target is intended.
Authoritative mismatch
If NS records do not match your registrar or provider, there may be an active change or a misconfiguration.

Troubleshooting

Helpful References