DNS Lookup

Inspect public DNS records, TTL, resolver status and authority, with TXT, MX, CAA and JSON export.

Inspect DNS records and TTLs from Google Public DNS. One resolver snapshot, not a worldwide propagation test.

The DNS name goes to Toolvore and Google Public DNS. We request no client subnet forwarding. This does not contact the domain’s website. Avoid private DNS names; normal server/provider logs may contain your query.

The DNS name goes to Toolvore and Google Public DNS. The website itself is not fetched. Client-subnet forwarding is disabled, but normal server and provider logs can contain the query. Reports are generated in this browser.

Look up DNS record values, TTLs and per-query status from Google Public DNS, including DMARC/DKIM names; copy or download a dated snapshot.

How to use it

1Enter a domain, website URL or full DNS record name.
2Choose all eight common types or a specific type, then look up DNS.
3Read status, answers and returned authority records; copy or download the report.

What happens to your data

The name goes to Toolvore and Google Public DNS. Client-subnet forwarding is explicitly disabled in the request, but normal provider/server logs can contain the name. The website itself is not fetched; this is one recursive-resolver snapshot, not a worldwide propagation or independent DNSSEC validation test.

Last updated October 2026

Check the DNS answer for a domain, website URL or record name such as _dmarc.example.com. See the actual record value, record name and remaining TTL in seconds. All eight common types queries A, AAAA, MX, TXT, CNAME, NS, SOA and CAA separately; you can also choose an individual type, including SRV or PTR. Copy or download the complete snapshot for a hosting or email support ticket.

Use the result to investigate an old hosting address, a mail server priority, an SPF declaration or a nameserver change. One recursive resolver reports one snapshot. This tool does not measure worldwide propagation, check mailbox delivery, validate SPF/DMARC syntax or establish whether a domain is registered.

How it works

Toolvore sends the normalized DNS name to the fixed Google Public DNS JSON API over HTTPS. Website URLs are reduced to their hostname, international names are converted to their ASCII DNS form and a trailing root dot is accepted. Underscores are supported for DMARC, DKIM and SRV names. Each label is limited to 63 characters and the full name to 253. Local single-label names and IP literals are rejected. For a PTR query, supply the reverse DNS name, such as 8.8.8.8.in-addr.arpa.

The status belongs to each query. NOERROR with an empty answer is different from NXDOMAIN, and SERVFAIL, refusal or timeout are not proof that a domain is absent. Answers can contain a CNAME chain and other record types; the displayed type is the resolver's actual type. The authority section is preserved when the resolver returns it. TTL is the remaining cache lifetime in this snapshot, not a promise that every resolver will update at that moment.

Queries have an eight-second deadline and a bounded response size. A failure for one type does not hide successful answers for other types. DNSSEC checking is enabled at Google; the tool reports Google's AD flag and does not independently validate signatures. AD false alone does not establish a broken domain.

The domain goes to Toolvore and Google Public DNS. Toolvore requests edns_client_subnet=0.0.0.0/0 so Google does not receive a request to forward a client subnet to authoritative nameservers. This is not anonymity: normal server and provider logs may contain the query. No request is sent to the domain's website. Editing the name or record type cancels old results, and no history is saved by the widget.

Common use cases

Check A and AAAA answers after a host migration
Compare MX priorities before changing mail providers
Read SPF at the domain and DMARC at _dmarc.example.com
Inspect a DKIM selector without removing its underscore
Record CAA certificate-authority declarations
Read SOA and negative-answer authority details for support

Frequently asked questions

Why does a DNS answer differ from my laptop?＋

Your laptop and Google Public DNS can use different caches and network locations. Geo-routing, different query times and remaining TTLs can legitimately produce different answers. This tool does not query multiple geographic locations or your own local resolver.

Does a zero TTL mean DNS is globally updated?＋

No. It describes the returned record's cache lifetime at this resolver. Other resolvers may have different cached answers, and an authoritative provider may answer differently by location. DNS changes are not pushed into every cache.

Can I check DMARC or DKIM?＋

Choose TXT and enter the exact name, for example _dmarc.example.com or selector._domainkey.example.com. The tool returns the published TXT text and TTL; it does not validate the policy, cryptographic key or actual mail signing.

What is the difference between NXDOMAIN and no answer?＋

NXDOMAIN says this resolver reports that the DNS name does not exist. NOERROR with no answer says the query completed without that DNS error but returned no answer records for this type. Neither response proves domain registration status.

What does the AD flag prove?＋

It reports whether Google's response is marked authenticated by its DNSSEC validation. Toolvore does not independently validate the signatures. A false AD flag can occur for an unsigned zone and is not by itself a failure.

Why are TXT values quoted?＋

Google's JSON API retains DNS presentation text, including quoted chunks and escapes. The tool preserves that returned representation rather than guessing how to concatenate or reinterpret a key or policy.

Can I export the result?＋

Copy report or Download report includes the normalized name, resolver, observation time, per-type status, answer records, TTLs and any returned authority records. The report is a snapshot, not a monitoring subscription.