DNS Lookup

Look up the DNS records for any domain: A, AAAA, CNAME, MX, NS, TXT, SOA, CAA and more, answered live by Cloudflare's DNS-over-HTTPS resolver.

DNS records for badssl.com

A records

1 found
NameTypeTTLValue
badssl.comA300104.154.89.105

AAAA records

NOERROR – no AAAA records

CNAME records

NOERROR – no CNAME records

MX records

5 found
NameTypeTTLValue
badssl.comMX36005 gmr-smtp-in.l.google.com.
badssl.comMX360030 alt3.gmr-smtp-in.l.google.com.
badssl.comMX360010 alt1.gmr-smtp-in.l.google.com.
badssl.comMX360040 alt4.gmr-smtp-in.l.google.com.
badssl.comMX360020 alt2.gmr-smtp-in.l.google.com.

NS records

4 found
NameTypeTTLValue
badssl.comNS21600ns-cloud-c2.googledomains.com.
badssl.comNS21600ns-cloud-c1.googledomains.com.
badssl.comNS21600ns-cloud-c4.googledomains.com.
badssl.comNS21600ns-cloud-c3.googledomains.com.

TXT records

1 found
NameTypeTTLValue
badssl.comTXT300_4wahjzefs6if6al9ai0ukockra7wb9c

SOA records

1 found
NameTypeTTLValue
badssl.comSOA21600ns-cloud-c1.googledomains.com. cloud-dns-hostmaster.google.com. 2 21600 3600 259200 300

CAA records

NOERROR – no CAA records

HTTPS records

NOERROR – no HTTPS records

How to use the DNS lookup tool

Enter a domain name such as example.com and choose a record type, or leave it on All common to query A, AAAA, CNAME, MX, NS, TXT, SOA, CAA and HTTPS records at once. You can paste a full URL and we will extract the hostname. To look up a PTR record, enter an IP address and choose PTR, or use our reverse DNS tool.

Queries are sent over encrypted DNS-over-HTTPS to Cloudflare's public resolver (1.1.1.1), so you see what most of the internet sees, not a cached copy from your own ISP. TTL values are the remaining cache time in seconds.

DNS record types at a glance

TypeWhat it doesExample value
AMaps a name to an IPv4 address192.0.2.10
AAAAMaps a name to an IPv6 address2001:db8::10
CNAMEAlias pointing one name at anotherwww → example.com
MXMail servers for the domain, with priority10 mail.example.com
NSAuthoritative name serversns1.example.net
TXTFree text: SPF, DMARC, domain verificationv=spf1 -all
SOAZone metadata: primary server, serial, timersns1.example.net. admin.example.com. 2026101301 …
CAAWhich certificate authorities may issue TLS certificates0 issue "ca.example.net"
SRVLocation of a service (host and port)10 5 5060 sip.example.com
PTRReverse mapping from IP to namehost.example.com
DS / DNSKEYDNSSEC keys and delegation signer—
HTTPSConnection hints such as HTTP/3 and ECH1 . alpn="h3,h2"

For a deeper explanation with zone file examples, read DNS record types explained.

Troubleshooting with DNS lookups

  • Website not loading after a move? Check the A/AAAA records point at the new server, then use the propagation checker to see if resolvers worldwide have caught up.
  • Email bouncing? Confirm the MX records and test SPF and DMARC with the email security checker.
  • NXDOMAIN? The name does not exist: check the spelling, whether the domain has expired (WHOIS), and whether NS records are set at the registrar.
  • SERVFAIL? Often a broken DNSSEC signature or unreachable authoritative servers.

Frequently asked questions

Why do I see different results from my own computer?

Your computer may use your ISP's resolver, which can hold an older cached answer until the TTL expires. You can also have overrides in your hosts file.

Why are there no CNAME records for my root domain?

The DNS standard forbids a CNAME at the zone apex because it would conflict with the required SOA and NS records. Many DNS hosts offer ALIAS or "CNAME flattening" instead.

How do I look up DNS from the command line?

Use nslookup -type=MX example.com on Windows or dig example.com MX +short on macOS and Linux.

Copied to clipboard