ip
ipku.in

DNS Lookup

See every DNS record of a domain at once, then check its health: nameservers, mail servers, SPF, DKIM, DMARC, and DNSSEC. Enter an IP to see its reverse DNS.

$ dig
Try:google.comjetorbit.comdetik.com8.8.8.8
DNS records
json ↗
typevaluettl
A203.190.242.211284s
103.49.221.211284s
AAAA2402:a000:103::2115m
2402:a000:203::2115m
MX10 ASPMX.L.GOOGLE.com1h
20 ALT1.ASPMX.L.GOOGLE.com1h
20 ALT2.ASPMX.L.GOOGLE.com1h
30 ASPMX4.GOOGLEMAIL.com1h
30 ASPMX2.GOOGLEMAIL.com1h
30 ASPMX3.GOOGLEMAIL.com1h
30 ASPMX5.GOOGLEMAIL.com1h
NSns.detik.com3h
ns.detik.net.id3h
ns2.detik.com3h
ns1.detik.net.id3h
ns1.detik.com3h
ns2.detik.net.id3h
TXTgoogle-site-verification: toO-M7z8N9pd_-UGprreuoB14NgBpIj2JnRXT-5UT3g1d
2zlvj3qlmgmy1tp35t8mryy5x96xt1fj1d
90ss34317hs9n5f9prw45ggcmn1w5mmt1d
lpm5klkcdwmcd5z2bpn9jchr4fqfskd21d
v=spf1 a ip4:203.190.240.0/22 ip4:203.190.244.0/23 ip4:103.49.220.0/23 ip4:182.160.55.217/32 ip4:182.160.54.155/32 ip6:2402:a000::/32 include:_spf.google.com include:amazonses.com ~all1d
ndw94prn3lpx1yxx2l4zpwdwtgkmq3ym1d
google-site-verification=-JbnbEStef0dyGFhKTpLegi5eVJzx7qU1MPTQkXRzc01d
amazonses:p53imiFLhMG+5TWsV1PSka93lnPln9hGsd8w7bPuPSs=1d
adobe-idp-site-verification=dc356b49491855c57347a075993d2c428096e98dc8f3c41d62dac7a41c2c087b1d
SOAns.detik.com sysnet.detik.com 2026092301 1200 300 1209600 36003h
Mail servers
priorityhostipptr
10ASPMX.L.GOOGLE.com74.125.24.26, 2404:6800:4003:c01::1asf-in-f26.1e100.net
20ALT1.ASPMX.L.GOOGLE.com192.178.230.26, 2404:6800:400b:c01b::1ayunrtab-in-f26.1e100.net
20ALT2.ASPMX.L.GOOGLE.com192.179.26.26, 2607:f8b0:400e:c20::1ayudlszf-in-f26.1e100.net
30ASPMX4.GOOGLEMAIL.com172.217.78.27, 2607:f8b0:4023:1c05::1ayurnoyc-in-f27.1e100.net
30ASPMX2.GOOGLEMAIL.com192.178.230.27, 2404:6800:400b:c01b::1ayunrtab-in-f27.1e100.net
SPF3 of 10 lookups
v=spf1 a ip4:203.190.240.0/22 ip4:203.190.244.0/23 ip4:103.49.220.0/23 ip4:182.160.55.217/32 ip4:182.160.54.155/32 ip6:2402:a000::/32 include:_spf.google.com include:amazonses.com ~all
DMARCat _dmarc.detik.com
v=DMARC1; p=quarantine; rua=mailto:[email protected]; aspf=s; fo=0
Checks
12 pass
  • ✓
    Nameservers6 nameservers listed.
  • ✓
    SOASOA record present, serial 2026092301.
  • i
    DNSSECThis domain is not signed with DNSSEC.
  • ✓
    Web address (A/AAAA)4 IP addresses.
  • ✓
    IPv6Has AAAA records, so it is reachable over IPv6.
  • ✓
    Mail servers (MX)7 mail servers.
  • ✓
    MX hostsEvery MX host has an IP address.
  • ✓
    Mail server reverse DNSThe mail server IPs have PTR records.
  • ✓
    SPFOne SPF record.
  • ✓
    SPF policyEnds in ~all: mail from other servers is marked as suspicious.
  • ✓
    SPF lookup limit3 of 10 DNS lookups.
  • ✓
    DMARCPolicy p=quarantine: spoofed mail is quarantined.
  • ✓
    DKIMDKIM key found at selector default, google, mail.
  • i
    CAANo CAA records, so any CA may issue SSL certificates.
Whois for this domain →Check DNS propagation →Check blacklists →

Queried over DNS-over-HTTPS from Cloudflare (Google as a fallback), so answers can be cached for up to their TTL.

01 / faq

DNS and email, briefly.

What is a DNS record?

▼

DNS turns domain names into addresses and services. A and AAAA records hold a site's IPv4 and IPv6 addresses, MX its mail servers, NS its nameservers, TXT free text like SPF and verification codes, and CNAME makes one name an alias of another.

What are SPF, DKIM, and DMARC?

▼

All three protect a domain from spoofed email. SPF (v=spf1 in TXT) lists the servers allowed to send its mail, DKIM signs mail with a key published in DNS, and DMARC (_dmarc) decides what happens to mail that fails both: let through, quarantined, or rejected.

Why don't I see my DNS change yet?

▼

Resolvers keep an answer for its record's TTL. These results come from Cloudflare's public resolver, so a record you just changed can show the old value until its TTL runs out.

Can I use it from a terminal?

▼

Yes. curl 'ipku.in/en/tools/dns-lookup?q=example.com' returns the records and checks as plain text, and /api/dns/example.com returns JSON.