DNS Record Lookup

Free DNS-over-HTTPS lookup tool. Query A, AAAA, MX, TXT, and CNAME records across Cloudflare, Google, and Quad9 with live propagation comparison.

Loading tool...

Direct DNS-over-HTTPS (DoH) QueriesDirect client-side encrypted queries with zero Outlivo backend proxying.

Instant Real-Time ExecutionZero latency data manipulation powered by Web APIs.

Free & UnrestrictedNo accounts, subscriptions, or daily usage limits.

In-Depth Technical Guide

DNS Records, Lookups, Propagation, and Email Security Architecture

Comprehensive guide to the Domain Name System. Learn A, AAAA, CNAME, MX, and TXT record configurations, SPF/DKIM/DMARC authentication, and DNS propagation troubleshooting.

Read Full Guide (8 min read)

Technical Definition

What is DNS over HTTPS (DoH)?

A secure way to look up website addresses that prevents spying and tampering.

View Glossary Definition

Technical Overview: How DNS Record Lookup Works

The DNS Record Lookup queries Domain Name System (DNS) servers to inspect A, AAAA, CNAME, MX, TXT, NS, SOA, CAA, SRV, DNSKEY, and PTR records. Features include "ALL COMMON" multi-query, side-by-side resolver comparison (Cloudflare, Google, Quad9), DNSSEC validation flags, and response latency benchmarks.

Executes encrypted RFC 8484 DNS-over-HTTPS (DoH) requests directly from the client browser using standard application/dns-json endpoints. Parses DNS header status codes (NOERROR, NXDOMAIN, SERVFAIL), analyzes the DNSSEC Authenticated Data (AD) flag, measures per-resolver roundtrip latency, and formats resource records with full TTL values.

Practical Examples & Usage

Querying Mail Exchange (MX) and SPF Records

Input:Domain: outlivo.tech, Record Type: MX / TXT

Output:MX: 10 mail.example.com (TTL 300) | TXT: "v=spf1 include:_spf.google.com ~all"

Inspects active email routing priorities and verifies authorized sender IP networks across DNS resolvers.

Real-World Applications & Use Cases

Verifying domain ownership records for Google Workspace, Microsoft 365, GitHub, and SSL/TLS certificate issuance.
Checking and validating email security policies including SPF (v=spf1...), DKIM, and DMARC records.
Comparing DNS propagation and cache TTL consistency across multiple global resolvers (Cloudflare 1.1.1.1, Google 8.8.8.8, Quad9 9.9.9.9).
Diagnosing DNSSEC configuration issues and inspecting CAA records to prevent unauthorized SSL certificate generation.

How to use DNS Record Lookup

Enter any valid domain name (e.g. outlivo.tech or github.com) into the search input.
Select a specific record type (A, AAAA, MX, TXT, CNAME, NS, SOA, CAA, SRV) or choose "ALL COMMON".
Toggle between Cloudflare (1.1.1.1), Google (8.8.8.8), and Quad9 (9.9.9.9) DoH resolvers.
Switch to "Compare Resolvers" mode to test DNS propagation side-by-side across major providers.
Click "Lookup DNS" to execute the real-time query and inspect TTLs, status codes, and DNSSEC flags.

Edge Cases & Limitations

•Queries are executed against global public DoH resolvers and may reflect regional cache TTLs before local ISP DNS updates.
•Internal intranet domains (e.g., .internal, .local, corporate split-horizon zones) cannot be resolved over public DoH endpoints.
•DNS propagation can take between 5 minutes and 48 hours depending on previously cached record TTL values.

Recommended Best Practices

•Lower TTL values to 300 seconds (5 minutes) at least 24 hours prior to migrating hosting providers or changing IP addresses.
•Always configure DKIM, SPF, and DMARC together with strict enforcement to protect your domain reputation and ensure high inbox delivery rates.
•Deploy DNSSEC signatures and verify the Authenticated Data (AD) flag to protect against DNS cache poisoning and spoofing.

Privacy & Data Handling: How DNS Record Lookup Treats Your Inputs

Processing Runtime

Queries domain DNS records directly from your browser to public RFC 8484 DNS-over-HTTPS resolvers operated by Cloudflare, Google, or Quad9 (depending on your selected resolver).

Memory & Storage

Domain queries and resolved records exist solely in your active browser session memory and are never written to Outlivo servers or databases.

Network Transmission

Transmits standard encrypted DNS queries (DoH over HTTPS) from your device directly to Cloudflare (cloudflare-dns.com), Google (dns.google), or Quad9 (dns.quad9.net). Zero data is routed through Outlivo backend proxy servers.

For complete transparency on data isolation and client sandboxing, visit our Privacy Policy or contact us via the Contact Center.

Frequently Asked Questions

How does this DNS lookup operate without a backend server?

This tool connects directly from your web browser to public RFC 8484 DNS-over-HTTPS (DoH) endpoints operated by Cloudflare, Google, and Quad9 with zero intermediary proxy logging.

Why compare DNS answers across different resolvers?

Different global resolvers maintain separate TTL caches. Comparing Cloudflare, Google, and Quad9 side-by-side reveals whether your DNS changes have fully propagated worldwide.

What does the DNSSEC Authenticated Data (AD) flag mean?

The AD flag indicates that the resolver cryptographically verified the DNS records using DNSSEC digital signatures against authoritative zone keys, confirming data integrity.

Subnet Calculator

Free IPv4 and IPv6 subnet calculator. Calculate CIDR prefixes, usable host ranges, VLSM allocations, and binary masks with 100% client-side privacy.

My Network & WebRTC Diagnostics

On-demand browser network diagnostics. Check IPv4 and IPv6 availability, WebRTC mDNS IP leaks, browser connection bandwidth, and multi-CDN latency.

URL & Query String Inspector

Interactive URL parser and query parameter editor. Inspect components, edit query parameters in real time, normalize URLs, and check security flags.