Free DNS Lookup Tool
See the live DNS records for any domain, grouped by type, and check SPF, DMARC and DKIM so your email reaches the inbox.
DNS Lookup Tool: See the live DNS records for any domain, grouped by type, and check SPF, DMARC and DKIM so your email reaches the inbox. It is free, needs no sign-up and runs in your browser. How to use it: 1) enter a domain name, such as example.com; 2) keep email records ticked and add your DKIM selector if you know it, such as google or selector1; 3) review the records and the email authentication results, then copy them or download a CSV. DNS is the address book of the internet. It tells browsers which server hosts your website and tells other mail servers where to deliver your email.
How the DNS lookup works
DNS is the address book of the internet. It tells browsers which server hosts your website and tells other mail servers where to deliver your email. When you run a lookup, our server asks the public DNS system for each record type and returns what it finds, with the time to live (TTL) for each record.
Record types checked
- A and AAAA: the IPv4 and IPv6 address of the site.
- CNAME: an alias that points to another name.
- MX: the mail servers, sorted by priority.
- NS and SOA: the name servers and zone details.
- TXT: SPF, verification codes and other text.
- CAA: which certificate authorities may issue SSL.
Email authentication
With email records ticked, the tool also queries _dmarc.yourdomain and, if you enter a DKIM selector, selector._domainkey.yourdomain. It then checks for exactly one SPF record with a safe ending, a DMARC policy of none, quarantine or reject with a report address, and a DKIM public key and its approximate size. It also spots your email provider from the MX records and suggests its usual DKIM selector.
Limitations
DKIM can only be checked when you know the selector, because DNS has no list of selectors. If you enter a subdomain such as www, email records are checked on the main domain. Results come from our server’s resolver and may be cached, so a change you just made can take up to the TTL time to appear. This check needs an internet connection.
DNS Lookup FAQs
How do I check the DNS records of a domain?
Enter the domain in the box and click Look up DNS. The tool queries public DNS for A, AAAA, CNAME, MX, NS, TXT, SOA and CAA records and groups the results by type. You can copy all records at once or download them as a CSV file for your notes or a site move.
Why are my new DNS records not showing yet?
DNS servers cache answers for the TTL time set on each record, often from five minutes to one day. A change to name servers can take up to 48 hours to spread. Lower the TTL before planned changes, wait, and run the lookup again later to confirm the new values.
How do I know if my SPF record is correct?
You should have exactly one TXT record that starts with v=spf1, lists every service that sends email for you, and ends with ~all or -all. The tool warns if SPF is missing, duplicated or ends in +all. Too many include entries can also break SPF, since only 10 lookups are allowed.
Can this tool check DMARC and DKIM?
Yes. Keep the email records option ticked and the tool also reads _dmarc for your domain and shows the policy, report address and next step. For DKIM, enter the selector from your email provider, such as google for Google Workspace or selector1 for Microsoft 365, and the tool checks that the key exists and is strong enough.
Want our experts to implement these improvements?
Get professional support from Hayyat Networks. Request a free consultation.