DNS Record Lookup & Dig Tool
/inspect/DNS-over-HTTPS (DoH) · A, AAAA, MX, TXT, CNAME, NS, SOA · Millisecond Timings
What is DNS and How Does Encrypted DNS-over-HTTPS (DoH) Work?
The Domain Name System (DNS) is the global directory of the internet, translating human-friendly domain names (like github.com) into machine-routable IP addresses (like 140.82.121.4). Without DNS resolution, web browsers would be unable to locate servers, route email, or establish secure TLS handshakes.
Traditional DNS queries travel over unencrypted UDP port 53, leaving them vulnerable to ISP snooping, man-in-the-middle tampering, and cache poisoning. DNS-over-HTTPS (DoH, RFC 8484) encapsulates DNS lookups inside modern TLS-encrypted HTTPS sessions. LocalDevTools queries authoritative Anycast DoH resolvers hosted by Cloudflare (1.1.1.1) and Google Public DNS (8.8.8.8) directly from your browser.
Inspect all core resource record types in real-time: A (IPv4 address), AAAA (IPv6 address), MX (Mail Exchange mail servers with priority weights), TXT (SPF, DKIM, DMARC security tokens, and Google/Microsoft verification tags), CNAME (canonical domain aliases), NS (authoritative nameservers), SOA (zone authority metadata), and CAA (allowed SSL Certificate Authorities).
How to Use This DNS Record Lookup & Dig Tool
- Enter a domain name: Type your target domain (e.g.
github.comorgoogle.com), or click any quick-test domain pill. - Select DNS Record Type: Choose ALL to simultaneously query all standard records, or isolate specific records like MX for email or TXT for SPF/DMARC.
- Choose your DoH resolver: Toggle between Cloudflare (1.1.1.1) or Google Public DNS (8.8.8.8).
- Inspect & copy: View live TTL cache lifetimes, click copy on any individual record, or click Copy Dig Output for a terminal-ready BIND format dump.
Frequently Asked Questions (FAQ)
What is TTL (Time to Live) in DNS records? ↓
TTL indicates how many seconds intermediate DNS recursive resolvers (ISPs, local routers) are allowed to cache a record before querying the authoritative nameserver again. A TTL of 300 means records are refreshed every 5 minutes.
How do I verify email SPF, DKIM, and DMARC records? ↓
Select TXT in the Record Type dropdown and enter your domain. Look for records starting with v=spf1 for SPF authorization, or query _dmarc.yourdomain.com to verify your DMARC alignment policy.
What does an NXDOMAIN response status mean? ↓
NXDOMAIN (Non-Existent Domain) indicates that the queried domain name does not exist according to the authoritative root nameservers. It usually signifies a typo, an expired domain, or missing DNS zone delegation.
Does LocalDevTools log or monitor the domains I query? ↓
No. All DNS requests are dispatched over encrypted HTTPS directly from your client browser to the chosen DoH provider (Cloudflare or Google). Zero query logs or telemetry are captured by LocalDevTools.