DNS Lookup Tool
Look up A, AAAA, MX, TXT, CNAME, NS, SOA or CAA records for any domain. Queries run directly from your browser to Cloudflare's public DNS resolver (1.1.1.1) — nothing passes through CalcLoop's servers.
Live check — queried directly from Cloudflare's 1.1.1.1 DNS over HTTPS resolver at request time, not a cached or static answer. See the full methodology page.
How this works — and why it's private
This tool queries Cloudflare's DNS over HTTPS (DoH) API directly from your browser using JavaScript's fetch(). The domain you look up never touches CalcLoop's server — the request goes straight from your browser to Cloudflare's resolver at cloudflare-dns.com and the answer comes straight back.
Reading the record types
MX shows mail server priority and hostname — lower priority number is tried first. TXT commonly holds SPF records (start with v=spf1), domain verification strings, or DMARC policy (at _dmarc.yourdomain.com). NS shows which nameservers are authoritative for the domain. SOA shows zone metadata including the serial number, useful for confirming whether a zone file has actually been reloaded after an edit.
Why does my domain show no records for a type I know exists?
Double-check you're querying the exact subdomain the record is on — for example, DMARC records live at _dmarc.example.com, not example.com itself, and DKIM records live at a selector-specific subdomain like selector1._domainkey.example.com.
Does this show DNSSEC validation status?
Not directly in this view, but the underlying Cloudflare DoH response includes an AD (Authenticated Data) flag indicating whether DNSSEC validation passed — a future version of this tool may surface that explicitly.
Why do results sometimes differ from what my own DNS server shows?
This tool queries Cloudflare's public resolver, which may have different cached TTL state than your ISP's or internal DNS server. If you recently changed a record, see the DNS Propagation & TTL Calculator to estimate when caches elsewhere should catch up.