Where your data goes

your browser queries DNS records directly at Cloudflare's DNS (cloudflare-dns.com). For registration data, your browser queries the RDAP services of the suffix's registry and of the registrar directly. If that registry does not accept queries from web pages, our server queries it instead and does not store the domain.

What this tool shows

Enter a domain and the page queries eight record types at the same time: A, AAAA, CNAME, MX, NS, TXT, CAA and SOA, grouped by type in one table. The TTL on the right of each record is how long the resolver will keep its cached copy, in s, m, h or d. Addresses in A and AAAA records are links that open in IP Lookup, where you can see who the address is registered to and which AS announces it.

Two cards sit above the table. Name servers lists the domain's NS records and names the DNS host from the hostnames: *.ns.cloudflare.com is Cloudflare, awsdns-* is Amazon Route 53. When the name servers at the registry are not the same set as the ones in the zone, the card shows the registry's set at the bottom; that is what happens when a move to a new DNS host was done on one side only. Mail shows the highest-priority mail server (MX), SPF (the TXT record that starts with v=spf1) and DMARC, read from the _dmarc subdomain, with its policy p=none, quarantine or reject. A line above the records gives the registrar, expiry date and creation date, and marks the day count when fewer than 30 days are left.

How to use it

Paste whatever you have: https://www.example.com/path, [email protected] and example.com. with a trailing dot all become the domain before the query. Internationalized names are converted to the xn-- form and both spellings are shown. If you paste an IP address, the page gives you a link to look it up in IP Lookup.

On a subdomain such as www.example.com, MX and NS are usually empty because they live at the top of the zone. The header names the zone the name belongs to; click it to query that level. Copy puts every record on the clipboard in zone file format, one per line, ready for a ticket or for rebuilding the zone at another DNS provider. The page address ends in ?d=, so the link opens the same lookup for whoever you send it to.

Where the data comes from

Records come straight from the browser to Cloudflare's public resolver (1.1.1.1, DNS over HTTPS) and show what that resolver sees right now. It does not pass your network prefix to authoritative servers (no EDNS Client Subnet), so for a CDN that answers by region, the A records here can differ from what nslookup returns on your machine.

Registration data comes from the RDAP service of the registry for the domain's suffix. Every ICANN-managed generic suffix (.com, .net, .org and the new gTLDs) must run RDAP, and RDAP replaced WHOIS for them in January 2025; country-code suffixes may not, and the card says so when that happens. The lookup starts with the full name and drops the leftmost label each time, three levels at most; the first level the registry has a record for is the registered domain.

Frequently asked questions

I changed a record. Why does this page still show the old one?

Resolvers keep a record until its TTL runs out. The TTL next to each record is the time left in the cache, and the new record is fetched when it reaches zero. Lowering the TTL before a change makes the switch much faster.

Why are MX and NS empty for a www name?

MX, NS and CAA are normally set at the top of the zone. The zone shown in the header is that level; click it to see its mail and delegation records.

Why is there no registration data?

The card names which of three cases it is: the suffix's registry has no public RDAP service, the registry has no record of the domain (usually because it is not registered), or the registry did not answer this time.

The A record here differs from the one on my computer. Which one is right?

Possibly both. CDNs and region-based DNS give people in different places different addresses; this page shows the answer Cloudflare's resolver got.

Where is the domain I look up sent?

Records are queried by your browser directly at cloudflare-dns.com. For registration data, your browser queries the RDAP services of the suffix's registry and of the registrar directly. If that registry does not accept queries from web pages, our server queries it instead and does not store the domain.

More Network Tools

2 tools →

IP LookupShow your public IP and look up who owns any address

JSON FormatterFormat, validate and minify, with exact error position

Password GeneratorGenerate random passwords; length, symbols, digits, entropy

Unix Timestamp ConverterConvert epoch seconds or milliseconds to dates and back

Base64 Encode / DecodeEncode text or files to Base64 and back; UTF-8, URL-safe

Simplified ⇄ Traditional ChineseConvert Simplified to Traditional (Taiwan, HK) and back