DNS Checker
Free DNS lookup tool for A, AAAA, MX, TXT, CNAME, NS, and CAA records. Compare answers from Cloudflare (1.1.1.1) and Google (8.8.8.8) to verify DNS propagation instantly.
What each record type is for
A quick reference for the records this tool can look up.
Maps a hostname to an IPv4 address — the most common record on the web.
Maps a hostname to an IPv6 address.
Aliases one hostname to another, e.g. pointing www to the root domain.
Routes email for the domain to one or more mail servers, with a priority.
Free-form text. Used by SPF, DKIM, DMARC, and domain-verification tokens.
Lists the authoritative name servers responsible for the zone.
Start of Authority — zone metadata, serial number, and default TTLs.
Restricts which Certificate Authorities can issue SSL certificates for the domain.
Advertises the host and port for a specific service, like SIP or XMPP.
Reverse-maps an IP address back to a hostname.
How the lookup works
Three steps, no account, nothing leaves your browser.
Enter a domain
Paste a hostname like example.com. URLs and ports are stripped automatically.
Pick a record type
Choose from A, AAAA, MX, TXT, CNAME and more depending on what you’re checking.
Read the answers
See TTLs, status codes, DNSSEC validation, and a side-by-side comparison.
DNS Checker FAQ
Common questions about DNS records, propagation, and this tool.
How does this checker work?
Lookups run directly from your browser to Cloudflare’s and Google’s public DNS-over-HTTPS endpoints. We never proxy your queries, and the domains you check never touch our servers.
What is DNS propagation, and why does it take time?
When you change a DNS record, the new value has to reach every caching resolver on the internet. Each resolver holds the previous answer until its TTL expires — usually minutes, occasionally up to 48 hours. Until then, different visitors will see different answers depending on which resolver they use.
Why do Cloudflare and Google sometimes return different answers?
Most often it is propagation: one resolver has refreshed its cache and the other is still serving the old record. It can also happen with split-horizon DNS (different answers based on the requester), geo-routed records, or when authoritative name servers are out of sync. Compare mode flags these mismatches automatically.
What does the DNSSEC badge mean?
The AD ("Authenticated Data") flag is set when the resolver validated the answer against DNSSEC and the chain of trust is intact. A missing badge does not mean the answer is wrong — most zones are not signed yet.
What do the status codes mean?
NOERROR is a successful lookup. NXDOMAIN means the authoritative name server confirmed the domain does not exist. SERVFAIL means the resolver could not complete the query. REFUSED means it declined to answer. FORMERR and NOTIMP point to malformed or unsupported queries.
My DNS changes are not showing up here — why?
The resolver you queried is probably still caching the previous value. Check the TTL next to each record to see how long the cached answer will live. If the change still has not appeared after 24–48 hours, verify it at your registrar or DNS host.
Which record types are supported?
A, AAAA, CNAME, MX, TXT, NS, SOA, CAA, SRV, and PTR. Together these cover the vast majority of day-to-day lookups for web hosting, email deliverability, and certificate issuance.
Can I use this to debug email or SSL setup?
Yes. Use MX and TXT to verify mail routing and SPF/DKIM/DMARC, NS to confirm your domain is delegated to the right name servers, and CAA to check which authorities are allowed to issue certificates for the domain.
How is this different from running dig on my machine?
dig queries your local resolver (often your ISP) which may have its own cache. This tool queries Cloudflare and Google directly over HTTPS, giving you a more global view and an instant comparison between two large public resolvers.
How do I purge the DNS cache on Cloudflare or Google?
If you have made a DNS change and want it to take effect on these resolvers immediately, both Cloudflare and Google publish a free public flush tool. Open Cloudflare’s purge tool or Google’s flush cache tool, enter your domain, pick the record type, and submit — the resolver drops its cached answer and refetches from the authoritative name server on the next lookup. Re-run the check here to confirm the new value is being served.