DNS Lookup
Query every common DNS record type for any domain at once, with TTLs, resolved through Cloudflare's public DNS-over-HTTPS resolver.
A DNS lookup queries the records that map a domain to its servers. This tool fetches A, AAAA, CNAME, MX, NS, TXT and SOA records in parallel through Cloudflare's DNS-over-HTTPS resolver and shows each value with its TTL.
One live lookup · no signup · results cached, never stored · updated 2026-08-29
How to use it
- 1.Enter a domain name.
- 2.We query A, AAAA, CNAME, MX, NS, TXT and SOA records in parallel.
- 3.Read the values and TTLs - a low TTL means a recent or planned change.
Frequently asked questions
What is a TTL?
Time to live, in seconds - how long resolvers may cache the record. Lower it to 300 a day before a migration so the change propagates quickly, then raise it back.
Why do I see different records than my registrar shows?
You are seeing what public resolvers currently have cached. Immediately after a change, the old value can persist for up to the previous TTL.
A record or CNAME for the apex?
The DNS spec does not allow a CNAME at the apex alongside other records. Use an A record, or your provider's ALIAS/ANAME flattening if you need to point the apex at a hostname.
What are the TXT records for?
Domain verification, SPF, DKIM and DMARC. If your email is landing in spam, the SPF and DMARC TXT records are the first place to look.
How long does DNS propagation take?
Up to the previous TTL of the record, which is why you lower it to 300 seconds a day before a change. There is no global propagation queue - each resolver simply holds its cached copy until it expires.
What is an SOA record for?
It names the primary nameserver and holds the zone's serial number and refresh timers. A serial that never changes is a sign the zone is not being updated where you think it is.
Why do MX records have numbers in front?
That is the priority. Lower wins. Mail servers try the lowest-numbered host first and fall back to higher ones, so two records at the same priority load-balance.
How do I check DNS from a terminal?
dig +short example.com A, or dig example.com MX for mail. Add @1.1.1.1 to query a specific resolver and bypass your local cache.
The guide behind this tool
3 min readSubnetting explained: CIDR, masks and host counts
What a /24 actually means, how to split a network without a calculator, why two addresses per subnet are unusable, and how IPv6 changes the exercise.
3 min readDNS records explained: A, AAAA, CNAME, MX, TXT and the rest
What each DNS record type does, when to use A versus CNAME at the apex, how TTLs work, and the records that decide whether your email lands in spam.
3 min readSSL certificate errors and what each one actually means
The five certificate errors browsers show, what causes each, and how to check a certificate's expiry, chain and hostname coverage before users do.
Tools that pair with this one
Domain & DNSWHOIS Lookup
Look up any domain's registrar, registration date, expiry, status codes and nameservers using live RDAP registry data.
Domain & DNSDomain Age Checker
Find out exactly how old a domain is, when it was registered, when it was last changed and when it expires.
Domain & DNSDomain Popularity Checker
Check how popular any domain is on a 0-100 score built from the Tranco top-million ranking, with its raw rank and 30-day movement.
Domain & DNSBulk Domain Popularity
Score up to twenty-five domains at once against the Tranco top-million ranking and sort them, so you can triage a link prospect list in one pass.
Built something?
RankCert is a weekly launch board where products rank on domain control we verify ourselves - not upvotes. Listing is free and the link is dofollow whether or not you display our badge.