Free network tool

DNS record lookup

Look up A, AAAA, CNAME, MX, TXT, NS, CAA, SRV, SOA, and PTR records after a fresh Turnstile check through one fixed Cloudflare DNS resolver.

Live DNS lookup

Inspect public DNS records

User-triggered query
Enter a public DNS name. Service labels such as _sip._tcp.example.com are supported; the lookup does not visit a website.
Record types
Human verificationA fresh challenge is required for every lookup.
Why is Turnstile required?

These tools contact selected systems from shared Cloudflare-hosted infrastructure, not directly from your device's IP address. Every protected request needs a fresh challenge. Cloudflare processes the verification traffic; this application keeps no request history.

Your DNS answers will appear here

Select the record types, complete the verification, and run a lookup.

◎ No query history or browser storageTurnstile loads on this page; DNS runs only after Lookup

About this tool

What dns record lookup does

Resolve selected public DNS record types for one hostname and review normalized names, TTLs, values, and structured MX, SRV, SOA, or CAA details.

How it works

After a fresh Turnstile challenge and your Lookup click, the page posts only the hostname, selected record types, and one-time token to same-origin /dns-api. The Worker builds bounded DNS wire requests and sends them only to Cloudflare DNS-over-HTTPS, then returns normalized answers without storing query history.

Common uses

When to use it

  • Check current address and alias records for a public hostname
  • Review mail routing, nameserver, and TXT answers during DNS changes
  • Inspect structured CAA, SRV, and SOA fields without visiting the hostname

Scope

Limits to know

  • Every submission requires a fresh Turnstile challenge and network access
  • The resolver is fixed to Cloudflare; you cannot choose an authoritative nameserver or compare resolver caches
  • A lookup reports DNS answers, not whether a website or service is reachable, secure, or correctly configured

Worked example

Example input and result

Enter a public hostname, select one or more record types, and complete the fresh anti-abuse check before each lookup.

Input
odmin.biz
Result
odmin.biz · A · TTL 300 · 192.0.2.10
odmin.biz · MX · TTL 300 · priority 10 · mail.odmin.biz

Quick answers

DNS record lookup FAQ

What data leaves my browser?

After you complete Turnstile and click Lookup, the hostname, selected record types, and one-time token go to same-origin /dns-api. DNS query and answer packets then transit Cloudflare's fixed DNS-over-HTTPS resolver. The application keeps no query history and does not cache, persist, or intentionally log the payload.

Which DNS record types can I request?

The closed list is A, AAAA, CNAME, MX, TXT, NS, CAA, SRV, SOA, and PTR. The endpoint rejects other types and extra request fields.

Can I choose a resolver or nameserver?

No. The Worker can contact only Cloudflare's fixed DNS-over-HTTPS endpoint. It does not accept a URL, resolver, nameserver, or raw DNS packet from the browser.

Does the lookup visit the hostname?

No. It asks for DNS records only; it does not make an HTTP request to the hostname, scan it, or prove that a service is reachable.

Why must I complete Turnstile each time?

A fresh challenge is an abuse control for every lookup. The token is consumed and reset after each submission attempt, including failures.