DNS Lookup

Query authoritative and cached DNS records via Google Public DNS-over-HTTPS (DoH). Inspect TTL values, response codes, and authenticated data flags.

DNS Lookup

Best solution

Network diagnostic: DNS Lookup; Time-to-Live (TTL) & Header Flags.

Query one Google Public DNS resolver. This is not a worldwide propagation check.

Query sends this name to Google Public DNS. Client-subnet sharing is disabled; Google still receives your request address.

Kepo
Kepo · Desktop Widgets

Keep fast calculators and daily tools pinned right to your desktop.

Install Desktop Widget

Methodology & calculation rule

Sends RFC 8484 DNS-over-HTTPS queries to Google Public DNS (8.8.8.8) with EDNS client subnet privacy flags disabled.

Network observations execute bounded requests to public measurement backends (ipify, Google Public DNS, Globalping, or Cloudflare). Measurements distinguish local client configuration from external internet reachability.

No browsing history, private tokens, or credentials are captured. Results are snapshots of external probe vantage points at the recorded observation timestamp.

Real-World Context & Technical Standards

RFC 1035 Standard

Core Resource Record Semantics

DNS translates human-readable hostnames into network primitives: A records (32-bit IPv4), AAAA records (128-bit IPv6), MX records (mail exchangers), and TXT records (SPF, DKIM, and site verification).

Caching & TTL

Time-to-Live Expiration Horizons

Recursive resolvers cache DNS responses strictly according to the record's Time-to-Live (TTL) field. Changes made at authoritative nameservers will not propagate until existing recursive TTL timers reach zero.

DNSSEC Integrity

Cryptographic Authenticated Data (AD)

DNS Security Extensions (DNSSEC) attach cryptographic RRSIG digital signatures to record sets, allowing resolvers to verify that DNS responses were not intercepted or poisoned in transit.

Related network tools and diagnostics
ToolMetricScope
What Is My IP Address? Diagnosticwhat is my ip address
IP Address Lookup Diagnosticip address lookup
Remote Ping Test Diagnosticping test
Is It Down? Diagnosticis it down
Packet Loss Test Diagnosticpacket loss test

Frequently Asked Questions

What is the difference between an A record and an AAAA record?

An A record maps a domain name to a 32-bit IPv4 address (e.g., 93.184.216.34), whereas an AAAA record maps it to a 128-bit IPv6 address (e.g., 2606:2800:220:1:248:1893:25c8:1946).

What does Time-to-Live (TTL) represent in DNS?

TTL is the number of seconds intermediate recursive DNS resolvers and client operating systems may cache a DNS record before querying authoritative nameservers again.

What does the NXDOMAIN status code mean?

Non-Existent Domain (NXDOMAIN) signifies that the queried domain name does not exist within the authoritative zone.