FREE ONLINE DNS TOOL

DNS Lookup

Check a domain’s DNS records in seconds.

Try

Advanced options

Tool

Record type

Resolver

Queries go directly to the selected providers when you run a lookup. How these tools use data.

Enter a domain to see its address, mail and nameserver records.

VVPN · CONNECTION PRIVACY

Browse with more privacy.

Connect to VVPN before you browse. For traffic routed through the VPN, websites see the VPN server’s IP and your connection to that server is encrypted.

Keep your home IP private
Protect traffic on shared Wi-Fi
Reduce local network visibility

Get VVPN on your phone

Install. Connect. Browse.

Check your IP before & after connecting ↗

Android & iPhone · See the app for plans and availability.

Security recommendations for this lookup

What these results tell you

DNS records describe a domain’s configuration. This lookup does not scan its website, check its HTTPS certificate, or test your VPN connection.

Use the VPN to keep your connection IP private

Connect before opening the site. Traffic using the tunnel reaches websites from the VPN server’s IP. Signing in, cookies and browser fingerprints can still identify you.
Add privacy on public and shared Wi-Fi

The VPN encrypts traffic between your device and its server, reducing what the Wi-Fi operator or your internet provider can observe about destinations. HTTPS already protects the contents of most web traffic. You still need to trust your VPN provider.
Keep DNS inside the protected connection

Use DNS settings compatible with your VPN and check for DNS leaks after connecting. Browser DNS settings and split tunneling can affect routing. This tool sends its own queries over HTTPS to the selected resolver; these results do not show whether your device’s normal DNS is protected.
Check the connection stays active

Confirm the VPN is connected before sensitive browsing. Where supported, enable your device’s always-on VPN and block connections without VPN. Review split-tunneling exclusions. Our IP comparison can show an address change, but is not a complete leak test.
Keep HTTPS and browser protection enabled

Check the exact domain before signing in, use HTTPS, and respect certificate and phishing warnings. Keep your browser updated and use strong, unique passwords with multi-factor authentication. A VPN does not make a phishing site safe or remove malware.
If you own the domain, review its DNS security separately

Check DNSSEC with your DNS provider and registrar. Review SPF, DKIM and DMARC for email, and CAA for certificate issuance policy. Missing records in this lookup alone are not a full audit; some policies live at other names. A VPN cannot repair these domain settings.

Learn more: EFF’s VPN guide · Google’s DNSSEC response documentation

READ THE RECORDS

What do DNS records mean?

A & AAAA

The IPv4 and IPv6 addresses for a hostname. Multiple answers can distribute traffic across servers.

MX

Mail servers for the domain. Lower priority numbers are normally preferred by sending mail servers.

NS & SOA

Nameservers identify who answers for a DNS zone. SOA includes administrative information such as its serial and refresh timers.

CNAME

An alias that points one hostname to another. Follow the target to find its address records.

TXT & CAA

TXT carries text used for verification and email policies. CAA identifies which certificate authorities may issue certificates.

TTL & DNSSEC

TTL is a cache lifetime in seconds. A resolver’s authenticated-data flag indicates that it validated the returned DNS data; its absence alone does not prove a problem.

A LITTLE CLARITY

Frequently asked questions

How do I run an online nslookup?

Enter a public domain or paste an HTTP(S) URL and select “Look up”. The tool checks common records by default and uses only the hostname from a URL. Choose a record shortcut or open Advanced options for other types and resolvers. Use Compare for Google and Cloudflare side by side.

Why is a DNS answer empty?

An existing name may have no records of the selected type. NXDOMAIN means the resolver reports that the name does not exist. SERVFAIL means the query failed, which may involve DNSSEC validation, unreachable servers, or other DNS configuration issues.

Does this use my computer’s DNS settings?

No. Record lookups use the public resolver you select. Geographic checks use the DNS resolver available to each remote probe. These results do not identify your browser’s normal DNS resolver.

Can I share DNS results?

Copy query link shares the domain and selected settings. Opening the link does not automatically run it; the recipient runs a fresh query. Download JSON saves the current results and check time.

FREE NETWORK TOOLS

A clearer view of the internet.

Quick answers for the curious.
Useful detail for the technical.

Understand your VPN connection

VPN GUIDES

DNS vs VPN: what changes when you connect?

DNS finds records for domain names; a VPN routes network traffic. Understand their different jobs and why a DNS lookup is not a VPN leak test.

2026-09-15 · VVPN

All VPN guides →