WhoisBolt
Look up every DNS record for a domain — or reverse-look-up an IP — over encrypted DNS. It tells a name that does not exist apart from one that simply has no records of that type, shows the DNSSEC flag, and can ask three independent resolvers the same question so you can tell whether a change has propagated. The query goes from your browser straight to the resolver you pick; nothing passes through our servers.
See how it worksHow it works
1Type a domain or an IP
A URL is trimmed down to its host, and an IPv4 address is turned into a reverse lookup.
2Read every record type
A, AAAA, CNAME, MX, NS, TXT, SOA, CAA, SRV and HTTPS, each with its TTL.
3Check it has propagated
Ask three resolvers the same question and see whether they still disagree.
4See if it is signed
The resolver says whether the answer was validated with DNSSEC, and that badge is shown.
What it actually does
Ten record types
Including CAA, which says who may issue certificates for the domain, and HTTPS/SVCB records.
Tells a typo from a gap
A name that does not exist is reported as NXDOMAIN, not quietly shown as "no records".
Propagation check
Three independent resolvers, side by side, so you can see a change spreading.
DNSSEC badge
Shows the resolver's authenticated-data flag instead of throwing it away.
You pick the resolver
Google, Cloudflare or DNS.SB, each named with its operator so the choice is informed.
Honest about the network
DNS cannot be answered offline. The query goes straight from your browser to the resolver you chose, with no server of ours in between.
Frequently Asked Questions
Is my query sent to a server?+
Yes — it has to be. DNS lives on the network, so the name you type goes over HTTPS to the public resolver you picked: Google, Cloudflare or DNS.SB. What does not happen is any server of ours seeing it: the request goes straight from your browser to that resolver, and nothing is stored here. The rest of the tools on this site really are offline; this one cannot be, and says so.
Why does the same domain give different answers?+
Because resolvers cache, and a record you changed recently reaches them at different times. That is exactly what the propagation check is for: it asks all three the same question and tells you whether they still disagree.
What is the difference between "no records" and NXDOMAIN?+
NXDOMAIN means the name itself does not exist — usually a typo or an expired domain. "No records" means the name exists but has nothing of that type, for instance a domain with no MX because it does not receive mail. The old version showed both the same way, which made a typo look like a configuration choice.
What does the DNSSEC badge mean?+
It reflects the resolver's authenticated-data flag: the answer was cryptographically validated up the chain of trust. Its absence is not proof of tampering — most domains simply are not signed — but its presence is a real signal.
Can I look up an IP address?+
Yes. Paste an IPv4 address and it is turned into an in-addr.arpa reverse lookup, which returns the PTR record: the hostname the address claims to belong to.