DNS lookup
Look up any DNS record for a domain — A, AAAA, CNAME, MX, NS, TXT, SOA, and CAA — with the TTL on every answer, straight from a public resolver.
Related tools: A record lookup · CNAME lookup · NS lookup · TXT record lookup · CAA record lookup · Reverse DNS lookup · DNS propagation checker · All free tools
Every record a resolver returns for a name
A DNS lookup asks a resolver for the records published under a name and returns exactly what came back: each record's type, its value, and the TTL that tells caches how long to keep it. This tool sends the query over DNS-over-HTTPS to Cloudflare's 1.1.1.1 resolver from outside your network, so what you see is what a visitor's resolver sees right now, not whatever your own machine cached earlier.
This is one lookup at one moment. Records get edited by mistake, hijacked at a registrar, or left pointing at a server that was decommissioned, and nobody notices until the site is gone. For the version that notices, Upcheck re-resolves every website every 6 hours and alerts your team when a record changes.
Three steps, no signup
- 01
Enter a domain name
A bare name like example.com or a subdomain like app.example.com. Pick one record type, or leave it on all common records.
- 02
We query a public resolver
The lookup goes to Cloudflare's 1.1.1.1 over DNS-over-HTTPS from Cloudflare's network, with no cache of our own in between.
- 03
Every record comes back with its TTL
Grouped by type, sorted, with the resolver's remaining TTL on each, usually well under a second.
Frequently asked questions
What does a DNS lookup show?
The records a resolver returns for the name you enter, one group per type. A and AAAA records are the IPv4 and IPv6 addresses the name resolves to. CNAME says the name is an alias for another name. MX lists the mail servers for the domain, NS the nameservers that are authoritative for it, TXT any free-text records such as SPF or verification strings, SOA the zone's authority record, and CAA the certificate authorities allowed to issue certificates for it. Each record also carries a TTL: how many seconds a cache may keep serving that answer before asking again.
Why does this show a different answer from my own computer?
Caching. Your machine, your router, and your ISP's resolver each keep answers for as long as the TTL allows, so after a DNS change they can serve the old value for minutes or hours. This tool asks Cloudflare's public resolver from outside your network, which may hold a different cached copy, or a fresher one. If the two disagree, the change is still propagating; to see the spread across many resolvers at once, use the DNS propagation checker.
What is a TTL and why does it keep changing?
TTL is time-to-live: the number of seconds a resolver is allowed to cache a record before it must ask the authoritative nameserver again. The value you see here is the resolver's remaining TTL, counting down from the value the zone publishes, so two lookups a minute apart show numbers about sixty seconds apart. When it reaches zero the resolver re-fetches and the TTL jumps back up to the published value.
What does NXDOMAIN mean?
Non-existent domain: the authoritative nameservers say there is no such name at all, in any record type. That is different from a name that exists but has no record of the type you asked for, which comes back as NOERROR with an empty answer. NXDOMAIN on a name that should exist usually means a typo, a zone that was never published, or a delegation pointing at nameservers that don't carry the zone.
Is this an authoritative lookup?
No. It shows the answer a recursive public resolver gives, which is what almost every visitor's device gets, cached copy and all. To see what the authoritative nameservers themselves are serving, query one of them directly with dig @ns1.example.com example.com A on a machine of your own. Use the NS lookup here to find which nameservers to ask.
Is this DNS lookup tool free?
Yes. Look up as many names as you like, no account needed. Scripted use is rate limited to keep the tool responsive for people using it by hand. The paid product is the ongoing version: Upcheck re-resolves every website you monitor every 6 hours and alerts your team when the name stops resolving or an A, AAAA, NS, or MX record changes.
One lookup shows the record now. Monitoring shows the change.
Add your websites to Upcheck and get alerted by email, Slack, Discord, Teams, or webhook the moment a DNS record moves or the name stops resolving.