Free DNS lookup
Type a domain. We read its public DNS records and explain each one: where the website and email go, who runs the DNS, which email rules are set, and whether a DKIM key is published.
What you get
- A and AAAA: where the website answers.
- MX: where email is delivered, and which provider that is.
- NS: who runs the DNS, so you know where to change any record.
- TXT, SPF and DMARC: ownership proofs and the email rules that stop spoofing.
- CAA: which certificate authorities may issue certificates.
- DKIM: keys under the common selectors, plus a check for the selector your provider gave you.
Common questions
I changed a record but the lookup shows the old one.
DNS answers are cached for the time-to-live the record had, often an hour and sometimes a day. Wait that long and look again; we ask public resolvers each time.
Where do I change these records?
Where your nameservers (NS) point: the result names the provider when it recognises it (Cloudflare, your registrar, your web host). Changing records anywhere else has no effect.
What is a DKIM selector?
The name your mail provider publishes its signing key under, as in selector._domainkey.yourdomain. Microsoft 365 uses selector1 and selector2, Google uses google; others give you their own in the setup screen.
Get told when it changes
Add the site to a free account and we check it every five minutes, with certificate, domain and email security alerts in plain English.