Query any DNS record for any name, straight from your browser: a web version of dig. Lookups go over DNS-over-HTTPS to Google Public DNS or Cloudflare; results include TTLs, DNSSEC validation status, and a shareable URL.

Record type:
Resolver:

Queries go directly from your browser to Google Public DNS or Cloudflare DNS via DNS-over-HTTPS. Nothing is logged by Winnr.

How it works

This page speaks DNS-over-HTTPS (DoH): your browser sends the query as a normal HTTPS request to a public resolver's JSON API (dns.google/resolve or cloudflare-dns.com/dns-query) and renders the answer. That's the same answer dig would give you against 8.8.8.8 or 1.1.1.1 (including TTLs and the DNSSEC AD authenticated-data flag), with two practical bonuses: it works on any device without a terminal, and every result has a shareable URL.

URL formats supported: ?name=example.com&type=TXT query parameters, or the Google-dig-style hash #TXT/example.com. Both auto-run the lookup on page load.

The five lookups that matter for cold email

Every domain where Winnr hosts DNS gets all five configured automatically (see Winnr's SMTP mailboxes for cold email). Use this tool to spot-check any domain, including ones you don't own, or run all of the email checks at once with the Domain Health Checker.

Related tools: SPF Record Generator · DKIM Record Generator · DMARC Record Generator · Domain Health Checker · Cold Email Calculator.

Frequently Asked Questions

What is dig?

dig (Domain Information Groper) is the standard command-line tool for querying DNS. It asks a resolver for a specific record type on a name, for example dig TXT example.com, and prints the answer with its TTL. This page is a browser-based equivalent: same queries, no terminal needed.

How does this tool resolve DNS from the browser?

It uses DNS-over-HTTPS (DoH). Your browser sends the query as an HTTPS request to a public resolver, Google Public DNS (8.8.8.8) or Cloudflare (1.1.1.1), which returns the answer as JSON. If the selected resolver can't be reached, the tool retries with the other one. Nothing passes through Winnr's servers and nothing is logged by Winnr.

Which record types matter for cold email?

MX (where your inbound mail and replies go), TXT at the root (your SPF record), TXT at selector._domainkey (your DKIM key), TXT at _dmarc (your DMARC policy), and NS (who controls the zone). If any of those are missing or wrong, deliverability suffers right away. The Domain Health Checker runs all of these checks at once.

Can I share a lookup result?

Yes. The URL updates as you query, for example /tools/dns-lookup.html?name=example.com&type=TXT, so you can paste it into a ticket or chat and the recipient sees the same live lookup. Google-dig-style links (#TXT/example.com) also work.

Why do Google and Cloudflare sometimes return different answers?

Caching. Each resolver caches answers up to the record's TTL, so right after a DNS change one resolver may still serve the old value while the other has the new one. Switching between the two resolvers here is a quick propagation check.

What does NXDOMAIN mean?

The name does not exist at all: no records of any type. If you expected records, check for a typo, and check that the domain is registered and delegated (has NS records at its registrar).

What's the AD badge?

AD (Authenticated Data) means the resolver validated the answer with DNSSEC. Most domains aren't DNSSEC-signed, so no badge is normal.

Can I look up an IP address?

Yes. Select PTR and enter the IP. The tool converts it to the in-addr.arpa or ip6.arpa form automatically and returns the reverse DNS (rDNS) hostname. That matters for email: receivers expect a sending IP's reverse DNS hostname to resolve back to the same IP (forward-confirmed rDNS) and treat mail from IPs without it with suspicion.