UFOZoo

DNS Lookup — Free All 16 Record Types (A, AAAA, MX, SRV)

Free DNS lookup supporting 16 record types (A, AAAA, MX, SRV, HTTPS, etc.) via Cloudflare, Google, or AliDNS DoH. All queries run in your browser — no server.

Features

  • ✓Query 16 DNS record types: A, AAAA, CNAME, MX, NS, TXT, SOA, CAA, PTR, SRV, HTTPS, SVCB, DS, DNSKEY, TLSA, and NAPTR
  • ✓Choose between Cloudflare (1.1.1.1), Google (8.8.8.8), and AliDNS (223.5.5.5) DNS-over-HTTPS providers
  • ✓Real-time response time measurement to evaluate DNS resolution speed
  • ✓Human-readable TTL formatting (e.g., 1h 30m instead of 5400 seconds)
  • ✓Clear error messages for NXDOMAIN, network issues, and unexpected responses
  • ✓Copy individual record values or the full result table to clipboard
  • ✓Useful for DNS troubleshooting, domain migration verification, and DNS propagation checking
  • ✓All DNS queries are made directly from your browser to public DNS providers — no intermediary server
  • ✓Detect DNSSEC validation status for domains that support DNSSEC-signed zones via DS and DNSKEY record types
  • ✓Punycode/IDN support — automatically converts internationalized domain names to ASCII-compatible encoding for accurate lookups
  • ✓Bulk domain comparison — query the same record type across multiple providers simultaneously to spot propagation delays and DNS inconsistencies between Cloudflare, Google, and AliDNS
  • ✓Export result table — copy the complete DNS result table as formatted text including all records, TTLs, and response times for documentation or sharing with your team

How to Use

  1. 1Enter a domain name (e.g., example.com) in the input field.
  2. 2Select from 16 DNS record types: A, AAAA, CNAME, MX, NS, TXT, SOA, CAA, PTR, SRV, HTTPS, SVCB, DS, DNSKEY, TLSA, or NAPTR.
  3. 3Optionally switch between Cloudflare or Google DNS provider to compare results.
  4. 4Select "All Providers" to query every supported DNS resolver simultaneously — differences are highlighted in amber.
  5. 5Click Lookup to perform the DNS query — results appear instantly with response time.
  6. 6Review the record table showing name, type, value, and TTL for each returned record.
  7. 7Click on any record value to copy it to clipboard.
  8. 8Recent queries are saved locally — click a history entry to re-run it quickly.
  9. 9Use the All Types option to query all 16 record types at once and review the full DNS configuration in one pass
  10. 10Notice the colored latency indicator — green (<50ms), yellow (50-200ms), red (>200ms) helps quickly assess DNS performance across providers
  11. 11Use the All Providers comparison to check DNS propagation after making changes — if all resolvers return the same result, your DNS changes have likely propagated globally
  12. 12When troubleshooting email delivery issues, query the MX record and compare with your configured mail server — mismatched MX records are a common cause of email routing failures

Frequently Asked Questions

What is a DNS lookup and why would I need one?

∨
A DNS lookup queries the Domain Name System to translate a domain name into IP addresses or other DNS records. You might need it to verify your domain's DNS configuration after changing hosting providers, setting up email services, adding CDN endpoints, or troubleshooting why your website isn't loading. It's a fundamental tool for anyone managing domains.

What is the difference between A, AAAA, CNAME, MX, NS, TXT, SOA, and CAA records?

∨
A records map a domain to an IPv4 address. AAAA records map to IPv6. CNAME records alias one domain to another. MX records specify mail servers. NS records delegate DNS authority to name servers. TXT records store arbitrary text (often for verification or SPF/DKIM). SOA records contain administrative info about the zone. CAA records specify which Certificate Authorities can issue SSL certificates.

How is this DNS lookup performed?

∨
This tool uses DNS-over-HTTPS (DoH) — a modern protocol that sends DNS queries over HTTPS to public resolvers. It supports Cloudflare (1.1.1.1), Google (8.8.8.8), and AliDNS (223.5.5.5). The queries are made directly from your browser to these providers. No data passes through our server.

What does NXDOMAIN mean?

∨
NXDOMAIN (Non-Existent Domain) means the queried domain name does not exist in the DNS. This could mean the domain is not registered, the DNS configuration is incomplete, or there's a typo in the domain name. If you just registered a domain, it may take a few minutes to hours for DNS records to propagate.

What is TTL and why does it matter?

∨
TTL (Time To Live) tells DNS resolvers how long to cache a record before checking for updates. Shorter TTLs (e.g., 60 seconds) mean changes propagate faster but increase query load. Longer TTLs (e.g., 86400 seconds = 1 day) reduce load but delay updates. Before making DNS changes, many administrators lower TTLs to speed up propagation.

Why do different DNS providers sometimes return different results?

∨
DNS propagation is not instantaneous. When you update DNS records, changes propagate gradually across the internet as DNS caches expire. Different providers (Cloudflare, Google, AliDNS, etc.) may use different upstream resolvers or have different cache states, which can temporarily show different results. This tool lets you compare results from multiple providers side by side.

Can this tool check DNS propagation?

∨
Yes, indirectly. By comparing results between Cloudflare, Google, and AliDNS providers simultaneously, you can see if DNS changes have propagated to all. If all return the same result, the change has likely propagated globally. If any differ, propagation is still in progress. For a comprehensive propagation check, you would need to query multiple geographic locations.

Is there any privacy concern with DNS-over-HTTPS?

∨
DNS-over-HTTPS encrypts your DNS queries, preventing eavesdropping on your network. However, the DNS provider (Cloudflare, Google, or AliDNS) can see which domains you're querying. Cloudflare's 1.1.1.1 promises not to log your IP, and this tool does not log or store any queries. For maximum privacy, consider using a VPN or a dedicated encrypted DNS resolver.

What is the difference between DNS-over-HTTPS (DoH) and traditional DNS?

∨
Traditional DNS sends queries in plain text over UDP port 53, which can be intercepted or spoofed. DoH encrypts the query inside HTTPS traffic, preventing eavesdropping and manipulation. DoH also makes DNS traffic indistinguishable from regular web traffic, which helps bypass restrictive network policies but can complicate content filtering for network administrators.

How do I check my domain's DNS configuration after changing hosting providers?

∨
After migrating to a new hosting provider, use this tool to verify that A/AAAA records point to the new server IP, MX records are configured for your email provider, and NS records reflect your nameservers. Check TTL values to understand how quickly changes will propagate. Run the All Providers comparison to confirm global propagation before making the final switch.

What is a reverse DNS (PTR) lookup used for?

∨
A PTR (Pointer) record maps an IP address back to a domain name — the reverse of an A record. PTR records are primarily used for email server validation (many mail servers reject email from IPs without matching PTR records), network troubleshooting (identifying which domain is associated with an IP), and security logging.

What are DNSSEC records (DS, DNSKEY) and why do they matter?

∨
DNSSEC (DNS Security Extensions) adds cryptographic signatures to DNS records to prevent spoofing and cache poisoning attacks. DS (Delegation Signer) records link the chain of trust from parent to child zones. DNSKEY records contain the public keys used to verify DNS responses. When DNSSEC is properly configured, users can be confident they're reaching the legitimate server and not a fake copy.

Related Tools

HTTP Headers Viewer — Analyze & Audit Response Headers

Paste raw HTTP response headers to analyze cache, security, CORS, and server headers. Detect missing security headers like HSTS, CSP, and X-Frame-Options.

SSL/TLS Certificate Checker — Free Verify & Analyze

Upload certificate files or paste openssl output to check SSL/TLS details. Verify expiry, issuer, key strength, and security. All processing in your browser.