dig (Domain Information Groper) is the standard command-line tool for querying DNS. It asks a resolver for a specific record type on a name — for example dig TXT example.com — and prints the answer with its TTL. This page is a browser-based equivalent: same queries, no terminal needed.

How does this tool resolve DNS from the browser?

It uses DNS-over-HTTPS (DoH). Your browser sends the query as an HTTPS request to a public resolver — Google Public DNS (8.8.8.8) or Cloudflare (1.1.1.1) — which returns the answer as JSON. Nothing passes through Winnr's servers and nothing is logged by Winnr.

Which record types matter for cold email?

MX (where your inbound mail goes), TXT at the root (your SPF record), TXT at selector._domainkey (your DKIM key), TXT at _dmarc (your DMARC policy), and NS (who controls the zone). If any of those are missing or wrong, deliverability suffers immediately.

Can I share a lookup result?

Yes. The URL updates as you query — for example /tools/dns-lookup.html?name=example.com&type=TXT — so you can paste it into a ticket or chat and the recipient sees the same live lookup. Google-dig-style links (#TXT/example.com) also work.

Why do Google and Cloudflare sometimes return different answers?

Caching. Each resolver caches answers up to the record's TTL, so right after a DNS change one resolver may still serve the old value while the other has the new one. Querying both is a quick propagation check.

Free DNS Lookup Tool — dig Any Record Type Online (2026)

Q: What does NXDOMAIN mean?

The domain name does not exist at all — no records of any type. If you expected records, check for a typo, or that the domain is registered and delegated (has NS records at its registrar).

Query any DNS record for any name, straight from your browser — a web version of dig. Lookups go over DNS-over-HTTPS to Google Public DNS or Cloudflare; results include TTLs, DNSSEC validation status, and a shareable URL.

Name (domain, hostname, or IP for PTR):

Record type:

Resolver:

Queries go directly from your browser to Google Public DNS or Cloudflare DNS via DNS-over-HTTPS. Nothing is logged by Winnr.

How it works

This page speaks DNS-over-HTTPS (DoH): your browser sends the query as a normal HTTPS request to a public resolver's JSON API (dns.google/resolve or cloudflare-dns.com/dns-query) and renders the answer. That's the same answer dig would give you against 8.8.8.8 or 1.1.1.1 — including TTLs and the DNSSEC AD (authenticated data) flag — with two practical bonuses: it works on any device without a terminal, and every result has a shareable URL.

URL formats supported: ?name=example.com&type=TXT query parameters, or the Google-dig-style hash #TXT/example.com. Both auto-run the lookup on page load.

The five lookups that matter for cold email

MX on your domain — where inbound mail (and your replies) land. No MX, no replies.
TXT at the root — your SPF record. Exactly one v=spf1 record, under 10 DNS lookups.
TXT at selector._domainkey.yourdomain.com — your DKIM public key.
TXT at _dmarc.yourdomain.com — your DMARC policy.
NS on your domain — who actually controls the zone. If these point somewhere unexpected, every other record is suspect.

Every domain provisioned through Winnr gets all five configured automatically — this tool is how you spot-check any domain, including ones you don't own.

FAQ

What does NXDOMAIN mean?

The name doesn't exist — no records of any type. Check for typos, or that the domain is registered and delegated.

Why do the two resolvers disagree right after I change a record?

Caching. Each resolver serves its cached copy until the record's TTL expires. Flipping between Google and Cloudflare here is a quick propagation check.

What's the AD badge?

AD (Authenticated Data) means the resolver validated the answer with DNSSEC. Most domains aren't DNSSEC-signed, so no badge is normal.

Can I look up an IP address?

Yes — select PTR and enter the IP. The tool converts it to the in-addr.arpa / ip6.arpa form automatically and returns the reverse DNS (rDNS) hostname, which matters for SMTP: sending IPs without matching forward-confirmed rDNS get penalized.

DNS Lookup