DNS Lookup & SPF/DMARC Checker
Enter a domain to see its DNS records and an email security check for SPF, DMARC and DKIM. Useful when you move hosting, set up Google Workspace or your emails start landing in spam. Switch to Bulk to check SPF, DMARC, MX, A and NS for up to 50 domains in one table.
DNS lookup & email security check
| Domain | SPF | DMARC | MX (mail) | A (IP) | NS |
|---|
Email security
DNS records
How to use the DNS lookup
- Enter your domain without https:// or www, such as example.com.
- Optionally add your DKIM selector to check DKIM as well.
- Read the email security section first. Fix anything marked with a red cross.
- Scroll down for every DNS record with its TTL.
DNS records explained
| Record | What it does |
|---|---|
| A / AAAA | Points your domain to the server’s IPv4 / IPv6 address. Change it when you move hosting. |
| CNAME | Points a subdomain to another name, often used for www and third-party services. |
| MX | Tells the world which servers receive email for your domain. |
| NS | The name servers that control your DNS, such as your registrar, hosting or Cloudflare. |
| TXT | Text records for SPF, domain verification (Google, Meta) and more. |
| SOA | Technical details about the DNS zone. |
| CAA | Limits which certificate authorities can issue SSL certificates for your domain. |
Common email setup mistakes
- Two separate SPF records after adding a new email tool. Merge them into one.
- SPF with more than 10 lookups because of too many include: entries.
- No DMARC record, or leaving it at p=none forever.
- Sending from a new tool (CRM, email marketing, WhatsApp provider) without adding its DKIM records.
Frequently asked questions
Where does the DNS data come from?
Your browser asks Google Public DNS (and Cloudflare as a backup) over a secure HTTPS connection. The results are the same public records any computer sees. Your domain is sent to that DNS service, not to our server.
Can I check many domains at once?
Yes. Choose Bulk and paste up to 100 domains. You get one table with SPF, DMARC, MX, A and NS for each, plus a CSV download. It’s handy for agencies checking client domains before an email campaign.
What are SPF, DKIM and DMARC?
SPF lists the servers allowed to send email for your domain. DKIM adds a digital signature to your emails. DMARC tells receiving servers what to do when SPF or DKIM checks fail, and sends you reports. Together they stop spoofing and help your emails reach the inbox.
Do I really need DMARC?
Gmail and Yahoo have required SPF, DKIM and DMARC for bulk senders since 2024, and a DMARC record helps every business protect its domain from being spoofed. Start with p=none to monitor, then move to quarantine or reject.
What is my DKIM selector?
It is set by your email provider. Google Workspace usually uses “google” and Microsoft 365 uses “selector1” and “selector2”. Zoho, Mailchimp and others show it in their domain authentication settings.
I changed a record. Why don’t I see it?
DNS changes take time to spread. Each record has a TTL (time to live) in seconds; old values can be cached until it runs out.
More free tools
Free growth audit
Emails and WhatsApp follow-ups not reaching customers?
We set up email and WhatsApp automation properly, including SPF, DKIM and DMARC, so your follow-ups land in the inbox. Get a free 30-minute review.