What is DNS over HTTPS (DoH)?

DNS over HTTPS (DoH) is a protocol that sends DNS queries over an encrypted HTTPS connection instead of the traditional plaintext UDP port 53. This prevents eavesdropping and tampering with DNS responses. Cloudflare and Google both offer public DoH resolvers accessible from any browser.

Which DNS record type should I look up?

Use A for IPv4 addresses, AAAA for IPv6, MX to find mail servers for a domain, TXT to read SPF, DKIM, or DMARC records, CNAME to follow aliases, and NS to find the authoritative name servers for a domain.

Does this tool store or log my DNS queries?

This page does not store or log anything. The query goes directly from your browser to the chosen DoH resolver (Cloudflare or Google). Each provider has its own privacy policy governing how long they retain query data. This site receives no copy of the query or response.

Network

DNS Lookup

Enter any hostname and pick a record type to query DNS over HTTPS via Cloudflare or Google and see live results in your browser.

DNS over HTTPS
No sign-up
Free

DNS lookup

A, AAAA, MX, TXT and more

Live network query: the hostname is sent to the selected DoH resolver.

Queries are sent to a public DNS-over-HTTPS resolver. No other data is collected.

About this tool

This tool queries live DNS records for any hostname using the DNS over HTTPS (DoH) protocol. DoH sends queries over an encrypted HTTPS connection so they cannot be intercepted or tampered with in transit.

Supported record types: A (IPv4 address), AAAA (IPv6), CNAME (alias), MX (mail exchange), TXT (text records including SPF/DKIM/DMARC), and NS (name servers). Results include the record name, type, TTL (time to live in seconds), and data.

How to use

Enter a hostname in the Hostname field, e.g. example.com or mail.google.com.
Pick the record type you want to look up from the dropdown.
Choose a resolver: Cloudflare (cloudflare-dns.com) or Google (dns.google).
Click Look up. Results appear in a table with Name, Type, TTL, and Data columns.
Use Copy results to copy all records as tab-separated text.

The response status (NOERROR, NXDOMAIN, etc.) is shown above the table. NXDOMAIN means the hostname does not exist in DNS.

Privacy

Unlike the other tools on this site, the DNS Lookup tool sends a live network request to perform its function. The hostname you type is sent directly from your browser to the DoH resolver you choose (Cloudflare or Google) to perform the lookup.

This site does not receive, log, or store your queries. However, each resolver has its own data retention practices. Cloudflare's privacy policy is at cloudflare.com/privacypolicy and Google's is at policies.google.com/privacy.

No data from this tool is retained by this site.

About the DNS Lookup Tool

DNS (Domain Name System) is the internet's phonebook. When you type a domain name into a browser, a DNS resolver translates it to an IP address your device can connect to. This tool lets you query DNS records directly from your browser using DNS over HTTPS, so you can inspect what a domain resolves to, find mail servers, verify TXT records, and more without installing any software.

Record types explained

Different record types carry different information. A records map a hostname to an IPv4 address. AAAA records do the same for IPv6. CNAME records are aliases pointing one hostname to another. MX records list the mail servers responsible for accepting email for a domain, along with a priority number. TXT records hold arbitrary text and are commonly used for domain ownership verification, SPF anti-spoofing policy, DKIM signing keys, and DMARC policy. NS records identify the authoritative name servers for a zone.

TTL and caching

The TTL (time to live) column shows how long, in seconds, a resolver may cache the record before fetching a fresh copy. A TTL of 300 means the record can be cached for up to five minutes. During a DNS change or migration, operators typically lower TTLs in advance so the cut-over propagates quickly. Higher TTLs reduce resolver load but slow propagation of changes.

Reading the status code

The RCODE (response code) in a DNS reply indicates the overall outcome. NOERROR means the query succeeded (though there may still be no matching records). NXDOMAIN means the domain does not exist. SERVFAIL indicates the resolver encountered an error. REFUSED means the resolver declined to answer the query. This tool shows the text name of the RCODE above the results table.

Frequently asked questions

What is TTL in DNS?

TTL stands for Time to Live. It is the number of seconds a resolver or browser may cache a DNS record before it must fetch a fresh copy from the authoritative server. A low TTL (60 to 300 seconds) is useful during DNS migrations because changes propagate quickly. A high TTL (3600 or more) reduces DNS query load but means changes take longer to reach all clients.

Why do I see multiple A records for the same domain?

Many high-traffic services use multiple A records to distribute load across several IP addresses. The practice is called round-robin DNS. Each client that queries the domain may receive the records in a different order, causing connections to spread across the available servers. This is a simple but effective form of load balancing that requires no dedicated hardware.

What does NXDOMAIN mean?

NXDOMAIN (Non-Existent Domain) is the DNS response code indicating that the queried name does not exist in DNS at all. It means no authoritative server has a record for that name. It is different from receiving an empty answer, which means the name exists but has no records of the requested type.

What is the difference between Cloudflare and Google DoH?

Both Cloudflare (1.1.1.1) and Google (8.8.8.8) operate free public DNS resolvers that support DNS over HTTPS. Their responses should be identical for most queries since they both return authoritative data. The main differences are in their privacy policies, anycast network locations, and latency depending on where you are located. Cloudflare emphasizes privacy and claims not to sell query data. Google integrates its resolver with its broader network infrastructure.