ip
ipku.in

DNS Lookup

See every DNS record of a domain at once, then check its health: nameservers, mail servers, SPF, DKIM, DMARC, and DNSSEC. Enter an IP to see its reverse DNS.

$ dig
Try:google.comjetorbit.comdetik.com8.8.8.8
DNS records
json ↗
typevaluettl
A172.253.118.18282s
172.253.118.17282s
172.253.118.83282s
172.253.118.19282s
AAAA2404:6800:4003:c03::5399s
2404:6800:4003:c03::1299s
2404:6800:4003:c03::1399s
2404:6800:4003:c03::1199s
MX5 gmail-smtp-in.l.google.com1618s
10 alt1.gmail-smtp-in.l.google.com1618s
20 alt2.gmail-smtp-in.l.google.com1618s
30 alt3.gmail-smtp-in.l.google.com1618s
40 alt4.gmail-smtp-in.l.google.com1618s
NSns2.google.com343180s
ns1.google.com343180s
ns4.google.com343180s
ns3.google.com343180s
TXTv=spf1 redirect=_spf.google.com5m
yahoo-verification-key=+eZwIPSgRxkAUzDtqT8Qhk+j4A1JF6V/wtGoyGTkELY=5m
yahoo-verification-key=dKYwfVbaxatmcXiXy6LDAxMRirqpOq5tj98iJv9qWVk=5m
globalsign-smime-dv=CDYX+XFHUw2wml6/Gb8+59BsH31KzUr6c1l2BPvqKX8=5m
SOAns1.google.com dns-admin.google.com 986631546 900 900 1800 601m
CAA0 issue "pki.goog"1d
Mail servers
priorityhostipptr
5gmail-smtp-in.l.google.com74.125.200.26, 2404:6800:4003:c01::1asa-in-f26.1e100.net
10alt1.gmail-smtp-in.l.google.com192.178.230.27, 2404:6800:400b:c01b::1ayunrtab-in-f27.1e100.net
20alt2.gmail-smtp-in.l.google.com192.179.26.27, 2607:f8b0:400e:c20::1ayudlszf-in-f27.1e100.net
30alt3.gmail-smtp-in.l.google.com172.217.78.27, 2607:f8b0:4023:1c05::1ayurnoyc-in-f27.1e100.net
40alt4.gmail-smtp-in.l.google.com192.178.231.27, 2607:f8b0:4023:200d::1byuphxrp-in-f27.1e100.net
SPF1 of 10 lookups
v=spf1 redirect=_spf.google.com
DMARCat _dmarc.gmail.com
v=DMARC1; p=none; sp=quarantine; rua=mailto:[email protected]
Checks
10 pass1 warning
  • ✓
    Nameservers4 nameservers listed.
  • ✓
    SOASOA record present, serial 986631546.
  • i
    DNSSECThis domain is not signed with DNSSEC.
  • ✓
    Web address (A/AAAA)8 IP addresses.
  • ✓
    IPv6Has AAAA records, so it is reachable over IPv6.
  • ✓
    Mail servers (MX)5 mail servers.
  • ✓
    MX hostsEvery MX host has an IP address.
  • ✓
    Mail server reverse DNSThe mail server IPs have PTR records.
  • ✓
    SPFOne SPF record.
  • ✓
    SPF lookup limit1 of 10 DNS lookups.
  • !
    DMARCPolicy p=none: monitoring only, spoofed mail is not blocked.
  • i
    DKIMNot found at the common selectors (default, google, selector1, selector2, k1, s1, s2, dkim, mail). DKIM selectors can't be listed, so the domain may still use DKIM.
  • ✓
    CAAOnly these CAs may issue SSL certificates: pki.goog.
Whois for this domain →Check DNS propagation →Check blacklists →

Queried over DNS-over-HTTPS from Cloudflare (Google as a fallback), so answers can be cached for up to their TTL.

01 / faq

DNS and email, briefly.

What is a DNS record?

▼

DNS turns domain names into addresses and services. A and AAAA records hold a site's IPv4 and IPv6 addresses, MX its mail servers, NS its nameservers, TXT free text like SPF and verification codes, and CNAME makes one name an alias of another.

What are SPF, DKIM, and DMARC?

▼

All three protect a domain from spoofed email. SPF (v=spf1 in TXT) lists the servers allowed to send its mail, DKIM signs mail with a key published in DNS, and DMARC (_dmarc) decides what happens to mail that fails both: let through, quarantined, or rejected.

Why don't I see my DNS change yet?

▼

Resolvers keep an answer for its record's TTL. These results come from Cloudflare's public resolver, so a record you just changed can show the old value until its TTL runs out.

Can I use it from a terminal?

▼

Yes. curl 'ipku.in/en/tools/dns-lookup?q=example.com' returns the records and checks as plain text, and /api/dns/example.com returns JSON.