DNS Lookup

Look up a domain’s DNS records and email authentication — A, AAAA, MX, TXT, NS, SOA, CAA, plus SPF and DMARC — with issues and fixes for common misconfigurations.

What this tool checks

Address records — A (IPv4), AAAA (IPv6) and CNAME.
Mail routing — MX records, sorted by priority.
Infrastructure — NS (nameservers), SOA and CAA (certificate authority authorisation).
Email authentication — SPF (with a 10-lookup-limit count) and DMARC (with policy strength).

Common problems and fixes

Two SPF records

RFC 7208 allows exactly one. A second record makes SPF fail (PERMERROR) for all your mail. Merge every sending source into one v=spf1 record.

SPF over 10 lookups

Each include:, a, mx and redirect= costs a lookup; over ten, SPF errors out. Flatten or prune.

DMARC set to p=none

p=none only monitors. After reviewing your aggregate (rua) reports, move top=quarantine then p=reject to actually stop spoofing.

FAQ

Which resolver do you use?

The server’s system resolver with a short timeout. Multi-resolver propagation comparison is on the roadmap.

Can I paste an email address or URL?

Yes — we extract the domain from an email address or URL automatically.

Related tools

AI Readiness Checker — how LLMs and AI agents read the site on this domain.
AI robots.txt Generator — control which AI crawlers may read it.

Last reviewed: 2026-07-09.

Frequently asked questions

▸ Which DNS records does this show?

A, AAAA, CNAME, MX, TXT, NS, SOA and CAA, plus parsed SPF and DMARC, DNSSEC status and the HTTPS/SVCB record.

▸ How long do DNS changes take to appear?

It depends on each record's TTL. With a low TTL (e.g. 300s) changes show within minutes; a high TTL can take up to a day. Lower the TTL before a planned change.