DNS lookup tool.
Look up the public DNS records for a domain or host. Read the answer, follow aliases, and see how long each record can be cached.
Checking sends your DNS name and IP address directly to Cloudflare’s public resolver. Results stay in page memory; Clear removes them.
A question, then the answer.
DNS records are declarations returned by one public resolver. Their presence or count is not a site-health score.
- Question name
The lookup follows any returned CNAME links and shows the requested address or record answers.
- Returned answer
Record counts describe this resolver response only; zero is not a health score.
Find the record.
Limits and privacy
Public DNS names only; IP addresses, local names, credentials, and custom URL ports are not accepted. Each DNS response is limited to 32 KiB, each submission has an eight-second shared deadline, and this tab allows six new submissions per rolling minute. Cloudflare receives the DNS name you ask about and your IP address. No query is sent to Bare.io’s server or database. DNS answers vary by resolver, location, and time.
How to use the DNS lookup.
- Enter a public domain or host name. A website URL is also accepted; its path and query are ignored.
- Choose a record type, or check the eight common types together.
- Review each record’s value and TTL. A missing record is different from a DNS lookup failure.
This browser based lookup asks Cloudflare DNS directly. Answers can vary across resolvers and locations. For email-specific help, see the email DNS checker; you can also check SSL certificates and inspect HTTP headers. To connect the DNS clues to a likely web host, try the free hosting checker and speed test.
What does “no records” mean?
The resolver returned NOERROR, but the requested record type was absent at the name. Other record types may still exist.
What is an NXDOMAIN response?
NXDOMAIN means the resolver says the queried name does not exist. A failed resolver request is shown separately and does not mean a record is missing.
Does this confirm DNSSEC is secure?
The tool reports the resolver’s authenticated-data flag. “Not asserted” is not a claim that DNSSEC is insecure or absent.