ip
ipku.in

DNS Lookup

See every DNS record of a domain at once, then check its health: nameservers, mail servers, SPF, DKIM, DMARC, and DNSSEC. Enter an IP to see its reverse DNS.

$ dig
Try:google.comjetorbit.comdetik.com8.8.8.8
DNS records
json ↗
typevaluettl
A74.125.200.102223s
74.125.200.100223s
74.125.200.113223s
74.125.200.101223s
74.125.200.138223s
74.125.200.139223s
AAAA2404:6800:4003:c00::71253s
2404:6800:4003:c00::65253s
2404:6800:4003:c00::64253s
2404:6800:4003:c00::8b253s
MX10 smtp.google.com298s
NSns3.google.com334832s
ns1.google.com334832s
ns4.google.com334832s
ns2.google.com334832s
TXTdocusign=05958488-4752-4ef2-95eb-aa7ba8a3bd0e69s
MS=E4A68B9AB2BB9670BCE15412F62916164C0B20BB69s
facebook-domain-verification=22rm551cu4k0ab0bxsw536tlds4h9569s
google-site-verification=wD8N7i1JTNTkezJ49swvWW48f8_9xveREV4oB-0Hf5o69s
google-site-verification=4ibFUgB-wXLQ_S7vsXVomSTVamuOXBiVAzpR5IZ87D069s
work-accounts-domain-verification=Tcj6JjIMZOw2KsSEw2Nt2rLae89tN669s
globalsign-smime-dv=CDYX+XFHUw2wml6/Gb8+59BsH31KzUr6c1l2BPvqKX8=69s
v=spf1 include:_spf.google.com ~all69s
cisco-ci-domain-verification=47c38bc8c4b74b7233e9053220c1bbe76bcc1cd33c7acf7acd36cd6a5332004b69s
Z29vZ2xl69s
arcules-domain-verification=2R4t5G7nI6tRCo61lpxxbLksPYstxhGmtV75cpr8x9K69s
google-site-verification=TV9-DBe4R80X4v0M4U_bd_J9cpOJM0nikft0jAgjmsQ69s
onetrust-domain-verification=6d685f1d41a94696ad7ef771f68993e069s
onetrust-domain-verification=0d477fe608074e6f9c12bca7826035cc69s
apple-domain-verification=30afIBcvSuDV2PLX69s
_r4rd1pvwyrpi7sw4a3hzmw8e51yh9td69s
docusign=1b0a6754-49b1-4db5-8540-d2c12664b28969s
SOAns1.google.com dns-admin.google.com 986631546 900 900 1800 6058s
CAA0 issue "pki.goog"1d
Mail servers
priorityhostipptr
10smtp.google.com142.251.10.27, 142.251.10.26 +7sd-in-f27.1e100.net
SPF1 of 10 lookups
v=spf1 include:_spf.google.com ~all
DMARCat _dmarc.google.com
v=DMARC1; p=reject; rua=mailto:[email protected]
Checks
12 pass
  • ✓
    Nameservers4 nameservers listed.
  • ✓
    SOASOA record present, serial 986631546.
  • i
    DNSSECThis domain is not signed with DNSSEC.
  • ✓
    Web address (A/AAAA)10 IP addresses.
  • ✓
    IPv6Has AAAA records, so it is reachable over IPv6.
  • ✓
    Mail servers (MX)1 mail servers.
  • ✓
    MX hostsEvery MX host has an IP address.
  • ✓
    Mail server reverse DNSThe mail server IPs have PTR records.
  • ✓
    SPFOne SPF record.
  • ✓
    SPF policyEnds in ~all: mail from other servers is marked as suspicious.
  • ✓
    SPF lookup limit1 of 10 DNS lookups.
  • ✓
    DMARCPolicy p=reject: spoofed mail is rejected.
  • i
    DKIMNot found at the common selectors (default, google, selector1, selector2, k1, s1, s2, dkim, mail). DKIM selectors can't be listed, so the domain may still use DKIM.
  • ✓
    CAAOnly these CAs may issue SSL certificates: pki.goog.
Whois for this domain →Check DNS propagation →Check blacklists →

Queried over DNS-over-HTTPS from Cloudflare (Google as a fallback), so answers can be cached for up to their TTL.

01 / faq

DNS and email, briefly.

What is a DNS record?

▼

DNS turns domain names into addresses and services. A and AAAA records hold a site's IPv4 and IPv6 addresses, MX its mail servers, NS its nameservers, TXT free text like SPF and verification codes, and CNAME makes one name an alias of another.

What are SPF, DKIM, and DMARC?

▼

All three protect a domain from spoofed email. SPF (v=spf1 in TXT) lists the servers allowed to send its mail, DKIM signs mail with a key published in DNS, and DMARC (_dmarc) decides what happens to mail that fails both: let through, quarantined, or rejected.

Why don't I see my DNS change yet?

▼

Resolvers keep an answer for its record's TTL. These results come from Cloudflare's public resolver, so a record you just changed can show the old value until its TTL runs out.

Can I use it from a terminal?

▼

Yes. curl 'ipku.in/en/tools/dns-lookup?q=example.com' returns the records and checks as plain text, and /api/dns/example.com returns JSON.