DNS lookup
See the public DNS records of any domain, and whether its email is protected against spoofing with SPF and DMARC.
What DNS records do
DNS turns a domain name into the addresses of its website and mail servers. A and AAAA records point to the website, MX records to the mail servers, NS records to the servers that hold the zone, and TXT records carry verification codes and email policies.
Why SPF and DMARC matter
Without SPF and DMARC, anyone can send email that appears to come from your domain. SPF lists the servers allowed to send your mail; DMARC tells receiving servers what to do with mail that fails the checks. Since February 2024, Gmail and Yahoo require SPF, DKIM and a DMARC record from anyone sending them bulk email.
Questions
- How long do DNS changes take to show?
Each record has a TTL (time to live) in seconds, shown next to it. Resolvers may keep the old value until the TTL runs out, so a change can take from a few minutes to a day to reach everyone.
- Why does this show different records than my host?
This lookup asks public DNS servers, the same ones visitors use. If your provider shows a change that is not here yet, it has not propagated, or it was made in a zone that is not the active one for the domain.
- Does this check DKIM?
No. DKIM keys sit under a selector name chosen by your email provider (for example selector._domainkey.example.com), which cannot be guessed reliably. Your email provider shows the selector to check.