Is this the same as dig on my computer?

The layout is similar, but the query goes to public DoH. @server and +trace are not reproduced.

What are QUESTION and ANSWER?

QUESTION is what was asked. ANSWER is what came back. An empty ANSWER can simply mean that type is absent.

Which types can I choose?

A, AAAA, NS, CNAME, MX, TXT, SOA, PTR and CAA. Leave the field empty for the common six types.

Where is the query sent?

Public DNS over HTTPS. The host name becomes the question name.

Does this expose personal data?

Only the host name you enter is queried. Registrant address or phone is not shown here.

How do I find a hostname from an IP?

Select PTR and enter a public IPv4 or IPv6 address. We construct its reverse name and query public DNS. Private IPs are excluded. Missing PTR records do not necessarily indicate a web connection problem.

dig format

See the question and answers in a dig-style layout.

Instructions, guides and related tools

Recent DNS queries Saving off

Optional. Save up to 20 host/IP and record-type pairs on this site's browser storage. Entries older than 30 days are removed when you next open a DNS tool. DNS answers are not saved in this history. Other people using this browser may see it. Turning saving off removes this history; it does not erase browser navigation history or diagnostic service records.

Saved query

Result

Results will appear here Enter a host name to see the response as QUESTION and ANSWER.

Related checks and services

Explore a domain for your next website or business email. Check available names and registration terms on the domain search page.

Find a domain Create a One account

What this tool does

Inspect public DNS in a dig-style QUESTION / ANSWER layout, including returned AUTHORITY, ADDITIONAL, response codes and flags. If a Google query falls back to Cloudflare, each attempt keeps its own result, timestamp and elapsed time.

How to read the result

QUERY SENT is our request; QUESTION is what the resolver returned. Answer rows contain name, TTL seconds, IN, type and data. NXDOMAIN means no such name; NOERROR without the requested records is NODATA; SERVFAIL is a lookup failure. AD=false alone does not prove a DNSSEC misconfiguration. Elapsed time includes HTTPS transport.

Glossary

QUESTION: The FQDN and record type that were queried.
ANSWER: The record lines returned for that question.
TTL: How many seconds that line may be cached.
IN: The Internet class. Answers on this page are class IN.

FAQ

Is this the same as dig on my computer?: The layout is similar, but the query goes to public DoH. @server and +trace are not reproduced.
What are QUESTION and ANSWER?: QUESTION is what was asked. ANSWER is what came back. An empty ANSWER can simply mean that type is absent.
Which types can I choose?: A, AAAA, NS, CNAME, MX, TXT, SOA, PTR and CAA. Leave the field empty for the common six types.
Where is the query sent?: Public DNS over HTTPS. The host name becomes the question name.
Does this expose personal data?: Only the host name you enter is queried. Registrant address or phone is not shown here.
How do I find a hostname from an IP?: Select PTR and enter a public IPv4 or IPv6 address. We construct its reverse name and query public DNS. Private IPs are excluded. Missing PTR records do not necessarily indicate a web connection problem.

Updated: 2026-09-16

Check from your own device

Use dig on macOS or Linux, or nslookup on Windows. Each command queries one record type. Your device uses its own DNS settings and cache, so its results may differ from this page.

dig example.com A

nslookup -type=A example.com

When expected records are missing

Check the exact name and type. A www host and the zone apex are different names; reverse DNS uses PTR.
Check the delegated name servers with NS, then inspect records in the corresponding control panel. The SOA serial helps compare zone revisions.
After a change, caches may retain data for the previous TTL. TTL does not guarantee a worldwide completion time.
SERVFAIL and transport failures do not mean a record is absent. Investigate delegation, DNSSEC and resolver availability.

Response details and sources

Details come from DNS-over-HTTPS JSON responses. Omitted sections and flags are marked as not reported. AD reports the resolver's DNSSEC validation; these are not direct connections from your browser to an authoritative DNS server.