DNS Record Lookup

Free DNS-over-HTTPS lookup tool. Query A, AAAA, MX, TXT, and CNAME records across Cloudflare, Google, and Quad9 with live propagation comparison.

Loading tool...

Notice unexpected behavior or calculation inaccuracy?Report an issue

Client-side processing + external lookupDirect client queries to external network endpoints for network data.

Client-Side Utility EngineFast in-memory processing optimized for daily digital tasks.

Direct Output & ExportInstant clipboard copy or formatted output ready for your workflow.

In-Depth Technical Guide

DNS Records, Lookups, Propagation, and Email Security Architecture

Comprehensive guide to the Domain Name System. Learn A, AAAA, CNAME, MX, and TXT record configurations, SPF/DKIM/DMARC authentication, and DNS propagation troubleshooting.

Read Full Guide (8 min read)

Technical Overview: How DNS Record Lookup Works

The DNS Record Lookup queries Domain Name System (DNS) servers to inspect A, AAAA, CNAME, MX, TXT, NS, SOA, CAA, SRV, DNSKEY, and PTR records. Features include "ALL COMMON" multi-query, side-by-side resolver comparison (Cloudflare, Google, Quad9), DNSSEC validation flags, and response latency benchmarks.

Executes encrypted RFC 8484 DNS-over-HTTPS (DoH) requests directly from the client browser using standard application/dns-json endpoints. Parses DNS header status codes (NOERROR, NXDOMAIN, SERVFAIL), analyzes the DNSSEC Authenticated Data (AD) flag, measures per-resolver roundtrip latency, and formats resource records with full TTL values.

Practical Examples & Usage

Querying Mail Exchange (MX) and SPF Records

Input:Domain: outlivo.tech, Record Type: MX / TXT

Output:MX: 10 mail.example.com (TTL 300) | TXT: "v=spf1 include:_spf.google.com ~all"

Inspects active email routing priorities and verifies authorized sender IP networks across DNS resolvers.

Real-World Applications & Use Cases

Verifying domain ownership records for Google Workspace, Microsoft 365, GitHub, and SSL/TLS certificate issuance.
Checking and validating email security policies including SPF (v=spf1...), DKIM, and DMARC records.
Comparing DNS propagation and cache TTL consistency across multiple global resolvers (Cloudflare 1.1.1.1, Google 8.8.8.8, Quad9 9.9.9.9).
Diagnosing DNSSEC configuration issues and inspecting CAA records to prevent unauthorized SSL certificate generation.

How to use DNS Record Lookup

Enter any valid domain name (e.g. outlivo.tech or github.com) into the search input.
Select a specific record type (A, AAAA, MX, TXT, CNAME, NS, SOA, CAA, SRV) or choose "ALL COMMON".
Toggle between Cloudflare (1.1.1.1), Google (8.8.8.8), and Quad9 (9.9.9.9) DoH resolvers.
Switch to "Compare Resolvers" mode to test DNS propagation side-by-side across major providers.
Click "Lookup DNS" to execute the real-time query and inspect TTLs, status codes, and DNSSEC flags.

Edge Cases & Limitations

•Queries are executed against global public DoH resolvers and may reflect regional cache TTLs before local ISP DNS updates.
•Internal intranet domains (e.g., .internal, .local, corporate split-horizon zones) cannot be resolved over public DoH endpoints.
•DNS propagation can take between 5 minutes and 48 hours depending on previously cached record TTL values.

Recommended Best Practices

•Lower TTL values to 300 seconds (5 minutes) at least 24 hours prior to migrating hosting providers or changing IP addresses.
•Always configure DKIM, SPF, and DMARC together with strict enforcement to protect your domain reputation and ensure high inbox delivery rates.
•Deploy DNSSEC signatures and verify the Authenticated Data (AD) flag to protect against DNS cache poisoning and spoofing.

Data Handling Profile

Client-side processing + external lookup

Processing Runtime: Resolves DNS records directly from your browser by querying public RFC 8484 DNS-over-HTTPS (DoH) resolvers operated by Cloudflare, Google, or Quad9 (depending on your selected resolver).
Memory & Storage: Queried domains and resolved records exist solely in your active browser session memory and are discarded when you close or reload the tab.
Network Transmission: Transmits encrypted DNS queries (DoH over HTTPS) from your browser directly to Cloudflare (cloudflare-dns.com), Google (dns.google), or Quad9 (dns.quad9.net). Queries are not routed through or stored on Outlivo backend servers.

Frequently Asked Questions

How does this DNS lookup operate without a backend server?

This tool connects directly from your web browser to public RFC 8484 DNS-over-HTTPS (DoH) endpoints operated by Cloudflare, Google, and Quad9 with zero intermediary proxy logging.

Why compare DNS answers across different resolvers?

Different global resolvers maintain separate TTL caches. Comparing Cloudflare, Google, and Quad9 side-by-side reveals whether your DNS changes have fully propagated worldwide.

What does the DNSSEC Authenticated Data (AD) flag mean?

The AD flag indicates that the resolver cryptographically verified the DNS records using DNSSEC digital signatures against authoritative zone keys, confirming data integrity.

Subnet Calculator

Free IPv4 and IPv6 subnet calculator. Calculate CIDR prefixes, usable host ranges, AWS subnets, and binary netmasks with instant client-side processing.

My Network & WebRTC Diagnostics

On-demand browser network diagnostics. Check IPv4 and IPv6 availability, WebRTC mDNS IP leaks, browser connection bandwidth, and multi-CDN latency.

URL & Query String Inspector

Free URL parser and query parameter inspector. Inspect URL components, protocol, host, path, parameters, and hash fragments with instant live editing.