Network5 min

How to Do a DNS Lookup in the Browser (A, AAAA, MX, TXT, SOA)

Query every DNS record type — A, AAAA, MX, TXT, NS, SOA, CNAME, CAA, SRV, DNSKEY, PTR — from any browser using DNS-over-HTTPS. No dig, no nslookup.

Zro7 DNS Lookup queries Cloudflare's DNS-over-HTTPS resolver (1.1.1.1). Only the queried domain leaves your browser — no files, no accounts.

To do a full DNS lookup in a browser, open Zro7 DNS Lookup, type a domain, and click All records. Zro7 queries every common record type in parallel over DNS-over-HTTPS (Cloudflare's 1.1.1.1) and returns the answers: A, AAAA, MX, TXT, NS, SOA, CNAME, CAA, SRV, DNSKEY, and reverse PTR — same data as dig +noall +answer, no terminal required.

Record types, in plain English

  • A — IPv4 address. Where a browser connects to the site.
  • AAAA — IPv6 address. Preferred when both exist.
  • MX — mail exchange. See MX record diagnosis.
  • TXT — arbitrary strings. Where SPF, DKIM, DMARC, domain-verification tokens live.
  • NS — authoritative name servers for the domain.
  • SOA — start of authority: primary NS, admin email, serial, TTLs.
  • CNAME — alias to another name. Common for www → apex.
  • CAA — which CAs may issue TLS certificates.
  • SRV — service records (SIP, XMPP, autodiscover).
  • DNSKEY / DS — DNSSEC signing keys. Use DNSSEC Check for chain validation.
  • PTR — reverse DNS. Use Reverse DNS.

How DoH works

DNS-over-HTTPS wraps a normal DNS query in an HTTPS POST or GET. Zro7 uses Cloudflare's /dns-query endpoint at 1.1.1.1 with Accept: application/dns-json. The browser gets a JSON response with status, answers, and TTLs — same information as dig, but reachable from any tab and any OS.

What Zro7 doesn't send

The only data leaving your browser is the domain name and record type — required to answer the query at all. No user account, no file, no IP identifier beyond what any HTTP request already reveals.

Steps

  1. Open DNS Lookup.
  2. Enter a domain (e.g. example.com).
  3. Pick a single record type or click All records.

Frequently asked questions

Which resolver does Zro7 use?

Cloudflare 1.1.1.1 over DoH. It's globally anycast and doesn't log queries beyond 24 hours per Cloudflare's policy.

Can I query a specific authoritative server?

Not yet — DoH resolvers are recursive. For authoritative-specific queries use <code>dig @ns1.example.com</code> from a shell.

Does it show DNSSEC?

The DNSSEC AD flag is surfaced; for full chain validation use <a href="/dnssec-check">DNSSEC Check</a>.

IDN / punycode support?

Yes — Unicode names are converted to punycode before query.

Any upload?

Only the domain and record type. No files.

Related posts

← Back to blog