DNS Checker

What this tool does

DNS (the Domain Name System) is the directory that maps domain names to servers, aliases, mail hosts and other records. Browsers do not expose raw DNS queries, so this page asks Cloudflare's public DNS-over-HTTPS service for one record type at a time and shows the records that come back.

It is useful for checking what a public resolver currently returns for a domain. It is not a DNS propagation checker and it is not a management console: you cannot edit records here.

How to use it

1. Enter a domain such as example.com. A full URL is accepted and reduced to its hostname.
2. Choose A, AAAA, CNAME, TXT, MX, NS or SOA.
3. Select Check DNS and read the name, type, TTL and value of each returned record. Use Copy results if you need the list.

Reading the result

The status line comes from the DNS response. NOERROR means the query was handled, but it does not guarantee that an answer exists for the type you requested. NXDOMAIN means the resolver says the domain does not exist. SERVFAIL usually points to a resolver or authoritative-server problem.

The table lists each returned record by name, type, TTL and value. TTL is the number of seconds the record may be cached. For MX records, the value includes the priority and the mail host. If the status line says DNSSEC validated, Cloudflare reports that the response passed DNSSEC validation.

Record types

Type	What it usually holds
A	An IPv4 address for the hostname.
AAAA	An IPv6 address for the hostname.
CNAME	An alias pointing one hostname to another. Often queried on a subdomain rather than the root.
TXT	Arbitrary text, commonly used for domain verification and email policies such as SPF and DMARC.
MX	The mail servers that accept email for the domain, with priorities.
NS	The authoritative name servers for the zone.
SOA	The zone's start of authority: primary name server, contact mailbox, serial number and timing values.

Why a result may differ from what you expect

DNS answers are cached according to their TTL. A recent change may not have reached Cloudflare's resolver yet, and different resolvers can hold different cached answers. The query also goes to one network location, so it is not a survey of every country or every ISP.

If you are checking a mail or verification record, make sure you chose the right type and the exact hostname. TXT records can contain several quoted strings; the result shows them as one value.

Privacy and limits

When you run a lookup, your browser sends the domain and record type directly to Cloudflare's DNS-over-HTTPS endpoint. Cloudflare also receives standard request information such as your IP address. NelcByte does not receive or log the query. Cloudflare's own privacy policy applies to that request.

The tool depends on Cloudflare's service and your network. A content blocker, firewall, DNS setting or offline connection can prevent the lookup from completing.