SysAdmin Tools

A DNS lookup lets you query the Domain Name System to retrieve the DNS records attached to any domain name. Whether you are troubleshooting email delivery, verifying a recent DNS change, or auditing a domain's configuration, a fast and accurate DNS record lookup is an essential tool for every sysadmin and DevOps engineer.

The Domain Name System is the internet's distributed phonebook. When a browser, mail server, or any network client needs to reach a domain, it sends a DNS query to a resolver, which then traces the hierarchy from root nameservers through the authoritative nameserver until it finds the correct answer. Our online DNS lookup tool performs that same query in real time using Cloudflare's global DNS-over-HTTPS resolver, so you always get current, propagated data rather than stale cached results.

With SysAdmin Tools you can check DNS records for all major record types — A, AAAA, MX, TXT, NS, CNAME, SOA, and CAA — in a single interface. You can also run an ALL query to retrieve every record type at once. Each result shows the record value and TTL (time to live), giving you a complete picture of how a domain is configured at this moment.

Whether you are checking that a new server's A record has propagated, verifying that an SPF TXT record is present, or inspecting nameserver delegations after a domain transfer, this tool saves you from opening a terminal and running dig or nslookup by hand.

How to Use the DNS Lookup Tool

  1. 1

    Enter the domain name

    Type or paste the domain you want to query — for example, google.com or mail.example.com. You can include or omit the www prefix; the tool normalises it automatically.

  2. 2

    Select a record type

    Choose the DNS record type you need from the tab bar: A, AAAA, MX, TXT, NS, CNAME, SOA, CAA, or ALL. Select ALL to retrieve every record type in one query.

  3. 3

    Click Lookup

    Press the Lookup button. Results appear within seconds showing each record's value and TTL. The query is sent to Cloudflare's authoritative-aware resolver so results reflect the live DNS state.

  4. 4

    Copy or share results

    Each record value has a copy button for quick clipboard access. Use the Share button to generate a shareable link with the domain and record type pre-filled.

Understanding DNS Lookup Results

Each DNS record returned by a lookup contains several fields. The Name column shows the fully qualified domain name (FQDN) the record belongs to. The TTL (Time to Live) is the number of seconds resolvers are allowed to cache this record before re-querying — a low TTL like 300 means changes propagate quickly, while a high TTL like 86400 (24 hours) means cached copies persist longer. The Value column contains the actual record data, which varies by type: an IP address for A/AAAA records, a hostname for CNAME and NS records, or text data for TXT records. For MX records you also see a Priority value — lower numbers have higher preference. For SOA records the output breaks down the primary nameserver, responsible admin email, serial number, and refresh intervals. Understanding these fields lets you quickly verify configuration, diagnose misconfigurations, and confirm that DNS changes have taken effect.
FieldDescription
NameThe fully qualified domain name (FQDN) the record belongs to.
TTLTime to Live in seconds — how long resolvers cache this record before re-querying.
Value / DataThe record payload: IP address, hostname, text string, or structured data depending on record type.
PriorityMX and SRV records only — lower numbers mean higher preference for that mail or service server.
Query TimeRound-trip time in milliseconds for the DNS query, shown per record type.

Common DNS Lookup Use Cases

Verify a new DNS record after a change

After updating an A record, CNAME, or TXT record in your DNS zone, use the DNS lookup tool to confirm the new value is visible from Cloudflare's resolver. If the old value still appears, the TTL window has not expired yet.

Troubleshoot email delivery failures

Email problems often trace back to missing or misconfigured MX, SPF, or DKIM TXT records. A quick DNS record lookup across multiple record types pinpoints exactly what is published versus what your mail provider expects.

Audit a domain before a transfer or migration

Before migrating a domain to a new registrar or moving infrastructure to a new provider, export a full DNS snapshot using the ALL query type. This documents every record so nothing is lost during the transition.

Confirm nameserver delegation

After pointing a domain to a new DNS hosting provider, check NS records to confirm the delegation has updated. SOA records show which nameserver is authoritative, confirming the change completed correctly.

DNS Lookup — Frequently Asked Questions

What is DNS lookup?
A DNS lookup is the process of querying the Domain Name System to retrieve records associated with a domain name. When you type a domain into a browser, your operating system performs a DNS lookup to find the IP address that domain points to. An online DNS lookup tool lets you manually query any record type — A, MX, TXT, NS and more — to inspect or troubleshoot a domain's DNS configuration.
How do I check DNS records of a domain?
Enter the domain name in the search box above, choose your record type (or select ALL), and click Lookup. Results appear within seconds. Alternatively, you can use the dig command in a terminal: dig example.com A. Our online tool is faster for quick checks and does not require installing any software.
What is the difference between A and AAAA records?
An A record maps a domain to an IPv4 address (e.g. 93.184.216.34). An AAAA record maps a domain to an IPv6 address (e.g. 2606:2800:220:1:248:1893:25c8:1946). Modern websites publish both so clients can connect over either protocol. If you are troubleshooting IPv6 connectivity issues, checking AAAA records is the first step.
What does TTL mean in DNS?
TTL stands for Time to Live. It is a value in seconds that tells DNS resolvers how long they may cache a record before fetching a fresh copy from the authoritative nameserver. A TTL of 300 means 5 minutes; 86400 means 24 hours. Lowering TTL before a planned migration lets changes propagate more quickly once you make them.
How long does DNS take to update?
DNS propagation time depends on the previous TTL of the record. If the old record had a TTL of 3600 seconds (1 hour), it can take up to one hour for all resolvers worldwide to see the new value. To minimise propagation time, reduce the TTL to 300 seconds at least 24 hours before making a DNS change, then restore it after the change is confirmed.
What is an authoritative nameserver?
An authoritative nameserver is the DNS server that holds the original, definitive records for a domain. When a recursive resolver (like your ISP's DNS server or Cloudflare 1.1.1.1) receives a query, it ultimately contacts the authoritative nameserver to get the real answer. You can find a domain's authoritative nameservers by checking its NS records.
Why are there multiple A records for one domain?
Multiple A records implement a simple form of load balancing called round-robin DNS. Each A record points to a different server IP. DNS resolvers return all IPs in rotation, distributing incoming traffic across multiple servers. This also provides redundancy — if one server goes down, clients may connect to another IP in the set.
What is a CNAME record used for?
A CNAME (Canonical Name) record creates an alias from one domain name to another. For example, www.example.com might CNAME to example.com, meaning they resolve to the same IP. CNAMEs are commonly used for subdomains and CDN configurations. You cannot put a CNAME on the root domain (apex) — use an A record or a ALIAS/ANAME record there instead.
How do I find the nameservers of a domain?
Select NS from the record type tabs and click Lookup. The results list the domain's nameservers — the servers responsible for answering DNS queries for that zone. Nameservers are set at your domain registrar and typically look like ns1.provider.com. After a domain transfer or DNS hosting migration, verifying NS records confirms the delegation is correct.
What is a SOA record in DNS?
SOA stands for Start of Authority. Every DNS zone has exactly one SOA record that identifies the primary authoritative nameserver for the zone, the responsible admin's email address, the zone's serial number (incremented on each change), and timing parameters like Refresh, Retry, and Expire intervals that secondary nameservers use to synchronise. The serial number is useful for verifying a zone transfer completed successfully.

Related Tools

SSL Checker

Verify the HTTPS certificate for the domain you just looked up.

MX Lookup

Check mail server records to diagnose email delivery issues.

WHOIS Lookup

Find domain registration details and expiry date alongside DNS data.