What is this tool?
This DNS lookup tool shows the DNS records for a domain, hostname or IP address. Use it to check a new website, set up email, or confirm a change has propagated. Pick a record type (A, AAAA, CNAME, MX, NS, TXT, SOA, CAA, SRV, PTR, HTTPS, SVCB, TLSA, DS, DNSKEY or ANY for the common set) and press Lookup DNS. Typing an IP address looks up its PTR (reverse DNS) record, and international domain names are converted to punycode. Turn on Compare resolvers to ask Cloudflare, Google and Quad9 at the same time; answers that differ are highlighted. Add an expected value to get a clear match or no-match result. With ANY or TXT the tool also checks DMARC, MTA-STS, TLS-RPT, BIMI and common DKIM selectors. A DNSSEC badge shows when the resolver validated the answer. Every row has a Copy button, Copy share link creates a link that re-runs the same lookup, and Copy dig-style gives dig-format output. Queries go from your browser straight to the resolvers, not through a Wivrix server.
How to Use
- Type a domain, hostname or IP address. A pasted URL is trimmed down to the host name.
- Choose a Record type, or keep ANY to query the common types at once.
- Optionally tick Compare resolvers and enter an Expected value, such as the IP or TXT value you just published.
- Press Lookup DNS or Enter.
- Read the records table, the resolver comparison and the email cards; copy single rows, the dig-style output or a share link.
Frequently Asked Questions
Which DNS servers does this tool use?
By default it sends DNS-over-HTTPS queries from your browser to Cloudflare's public resolver (1.1.1.1). With Compare resolvers on, the same question also goes to Google Public DNS (8.8.8.8) and Quad9 (9.9.9.9), and differences between their answers are highlighted. This helps spot changes that have not propagated everywhere yet.
What does ANY query?
Real ANY queries are often refused by resolvers, so the tool runs separate lookups for A, AAAA, CNAME, MX, NS, TXT, SOA and CAA and combines the results. Other types such as HTTPS, SRV, PTR, TLSA, DS or DNSKEY are queried on their own.
How do I check DMARC, DKIM or MTA-STS?
Look up the domain with ANY or TXT. The tool also checks _dmarc, _mta-sts, _smtp._tls, default._bimi and common DKIM selectors (google, selector1, selector2, default, k1, s1, s2, dkim, mail). If your provider uses another selector, enter it under Email checks.
What does the DNSSEC badge mean?
It appears when the resolver reports that it validated the answer with DNSSEC (the AD flag). No badge means the zone is unsigned or the answer was not validated.
How do I look up reverse DNS for an IP?
Type the IP address. The tool builds the in-addr.arpa or ip6.arpa name and looks up its PTR record.
Other tools
There are more calculators, converters and editors on Wivrix. If something is missing, tell us.