DNS Lookup

How to Use DNS Lookup

1. Enter Domain: Type any domain or hostname (e.g., "google.com", "mail.example.org", "cdn.shopify.com") into the domain field.
2. Select Record Type: Choose the DNS record type to query — A (IPv4), AAAA (IPv6), MX (mail servers), TXT (text records), NS (nameservers), CNAME (aliases), SOA (zone info), or ANY (all available).
3. Lookup: Click "Lookup" or press Enter. Results appear in a table showing Type, TTL (time-to-live in seconds), and the record data.
4. Copy Results: Click "Copy Results" to copy all records in tab-separated format — ready to paste into spreadsheets or documentation.

Technical Overview & Use Cases

This tool uses Cloudflare's DNS over HTTPS (DoH) API at cloudflare-dns.com/dns-query — one of the fastest and most reliable public DNS resolvers globally (1.1.1.1). It sends queries using the application/dns-json wire format, which returns structured JSON with record type codes, TTL values, and record data. This is the same infrastructure that resolves billions of DNS queries daily for Cloudflare's global network, ensuring authoritative and fast responses.

Real-world use cases:

• Domain troubleshooting: Verify that DNS changes (nameserver updates, A record modifications, CNAME additions) have propagated correctly through Cloudflare's resolver.
• Security reconnaissance: During OSINT investigations, enumerate a target's DNS infrastructure — nameservers, mail servers, SPF records, and associated services.
• CDN & load balancing analysis: Query A records to discover which CDN IPs a domain resolves to, verify CNAME chains to CDN providers, and check TTL values for caching behavior.

Privacy & Security Guarantee

This tool is part of the FAK LAB ecosystem, founded by Faizan Ahmad Khan Khichi. DNS queries are routed through Cloudflare's privacy-first 1.1.1.1 resolver, which purges query logs within 25 hours and never sells data to advertisers. Only the domain name is sent in the query — no personal information, browser fingerprint, or usage context is transmitted.

Frequently Asked Questions

What does TTL mean in DNS results?

TTL (Time To Live) is measured in seconds and tells resolvers how long to cache this record before re-querying the authoritative server. A TTL of 300 means the record is cached for 5 minutes. Low TTLs (60-300s) allow fast propagation of changes; high TTLs (86400s = 24h) reduce resolver load but slow down updates.

Why does "ANY" not return all record types?

Many DNS servers and resolvers (including Cloudflare) have deprecated or limited the ANY query type for security reasons — it was commonly abused in DNS amplification DDoS attacks. You may get incomplete results with ANY. Instead, query each specific record type (A, MX, TXT, etc.) individually for reliable, complete results.

How is this different from the DNS Checker tool?

DNS Lookup lets you query a specific record type using Cloudflare's DoH resolver and shows detailed TTL and type-code information. DNS Checker queries a custom backend that retrieves all record types simultaneously from authoritative servers. Use Lookup for targeted, fast queries; use Checker for a comprehensive overview of all records at once.