DiG DNS Lookup
Run dig from our servers for any record type and read both the parsed answer section and the raw output, exactly as the command prints it.
- Runs on our servers
- Free to use
About this tool
The DiG DNS Lookup gives you dig without a terminal. Pick a record type, enter a name and the query runs from our servers against a public resolver; the answer section is turned into a table (name, type, TTL, data) and the complete raw output, including header flags and status, is shown underneath. It is the tool to reach for when a site "sometimes works", when mail bounces or when a certificate validation fails and you need to see the exact records in play.
Dedicated pages exist for the most common questions: MX, NS, TXT, AAAA, DMARC and DNSSEC records.
This is what a result looks like (trimmed):
$ dig one.one.one.one A
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 51223
;; flags: qr rd ra; QUERY: 1, ANSWER: 2, AUTHORITY: 0, ADDITIONAL: 1
;; ANSWER SECTION:
one.one.one.one. 300 IN A 1.1.1.1
one.one.one.one. 300 IN A 1.0.0.1
;; Query time: 12 msec
;; SERVER: 8.8.8.8#53(8.8.8.8)How to use it — quick steps
- 01
Enter the domain or hostname
Type or paste the domain or hostname in the field above, for example example.com. Use Ctrl + V to paste.
- 02
Adjust the options
Pick the settings that fit your case; the defaults work for most people. They apply on the next run.
- 03
Press "Run dig"
Press "Run dig" or Ctrl + Enter. The result appears below in a few seconds. Results can be copied.
Key features of this tool
External lookups
The lookup runs from our infrastructure, so you see what the public internet sees without exposing your own IP address or network.
Fast and cached
Results come back in seconds; identical lookups are cached for a few minutes to keep the service fast and responsive for everyone.
Easy to reuse
Every result block can be copied with one click or downloaded as a text file, and tables can also be saved as CSV for your reports.
Frequently asked questions
What is dig?
The standard DNS query tool shipped with BIND. It shows the question, the answer section, flags and timing, which makes it the reference for troubleshooting DNS problems.
ANY returns almost nothing
Many authoritative servers (and all of Cloudflare) refuse ANY queries since RFC 8482 to prevent amplification abuse. You should query the specific types such as A, TXT or NS instead.
What is the "ad" flag?
Authenticated data: the resolver validated the answer with DNSSEC. Use the DNSSEC Verifier for a full chain check.
Which resolver is used?
Google Public DNS (8.8.8.8) from our servers. Compare it with other locations using the DNS Propagation Checker.