DNS Lookup
See the DNS records for any domain: where its website points (A/AAAA), which servers receive its email (MX), its verification and email-security records (TXT), name servers (NS), aliases (CNAME) and which certificate authorities may issue certificates for it (CAA).
What to check for security
TXT: look for an SPF record (v=spf1) and a DMARC record on _dmarc.yourdomain — together they stop attackers sending email as you. Our SPF/DKIM/DMARC checker grades them for you.
CAA: limits which certificate authorities can issue HTTPS certificates for your domain. NS: unexpected name servers can be a sign of a hijacked domain.
Frequently asked questions
Why are my DNS changes not showing?
Resolvers cache records for the TTL shown (in seconds). After a change, old answers can persist until the TTL expires.
What is DNS-over-HTTPS?
A way of sending DNS lookups inside encrypted HTTPS, so networks between you and the resolver cannot read or tamper with them.
Can I look up subdomains?
Yes — enter the full name, for example mail.example.com or _dmarc.example.com.
More free security tools
Advertisement