DNS lookup
Look up any record from public DNS. Works with names like _dmarc.yourdomain.com and with IP addresses for reverse lookups.
Record types at a glance
| Type | What it does |
|---|---|
A / AAAA | The IPv4 / IPv6 address of a name, such as your website. |
MX | The mail servers that receive email for the domain. |
TXT | Free text. Holds SPF, DMARC, DKIM keys and ownership verification codes. |
CNAME | An alias that points one name at another. Used for many DKIM keys. |
NS | The name servers that hold the domain’s records. |
SOA | Administrative details for the zone, including the primary name server and serial number. |
PTR | Reverse DNS: the name an IP address points back to. |
CAA | Which certificate authorities may issue HTTPS certificates for the domain. |
SRV | Service locations, such as Microsoft Teams or calendar autodiscovery. |
DS / DNSKEY | DNSSEC signing records. |
Useful lookups for email
yourdomain, type TXT: your SPF record and verification codes._dmarc.yourdomain, type TXT: your DMARC policy.selector1._domainkey.yourdomain, type CNAME or TXT: a Microsoft 365 DKIM key._mta-sts.yourdomain, type TXT: your MTA-STS policy record.
For a full picture of your email setup in one go, run the email health check.
Which record should I look up?
For email, check MX (mail servers) and TXT (SPF and verification records). For DMARC, look up the TXT record at _dmarc.yourdomain. For DKIM, try selector1._domainkey.yourdomain.
Why don’t I see my change yet?
DNS answers are cached for the TTL shown, in seconds. A change can take that long to appear everywhere, sometimes longer.
Where do the answers come from?
Straight from Google Public DNS (or Cloudflare DNS as a backup), queried by your browser. These are the same answers most of the internet receives.
What does “validated” mean?
The answer was signed with DNSSEC and the signature checked out, so it can’t have been tampered with on the way.