ip
ipku.in

DNS Lookup

See every DNS record of a domain at once, then check its health: nameservers, mail servers, SPF, DKIM, DMARC, and DNSSEC. Enter an IP to see its reverse DNS.

$ dig
Try:google.comdetik.com8.8.8.8
DNS records
json ↗
typevaluettl
A172.253.118.139292s
172.253.118.138292s
172.253.118.101292s
172.253.118.113292s
172.253.118.100292s
172.253.118.102292s
AAAA2404:6800:4003:c05::7129s
2404:6800:4003:c05::6629s
2404:6800:4003:c05::8b29s
2404:6800:4003:c05::6429s
MX10 smtp.google.com266s
NSns1.google.com334718s
ns4.google.com334718s
ns2.google.com334718s
ns3.google.com334718s
TXTonetrust-domain-verification=0d477fe608074e6f9c12bca7826035cc227s
work-accounts-domain-verification=Tcj6JjIMZOw2KsSEw2Nt2rLae89tN6227s
docusign=1b0a6754-49b1-4db5-8540-d2c12664b289227s
google-site-verification=TV9-DBe4R80X4v0M4U_bd_J9cpOJM0nikft0jAgjmsQ227s
arcules-domain-verification=2R4t5G7nI6tRCo61lpxxbLksPYstxhGmtV75cpr8x9K227s
facebook-domain-verification=22rm551cu4k0ab0bxsw536tlds4h95227s
globalsign-smime-dv=CDYX+XFHUw2wml6/Gb8+59BsH31KzUr6c1l2BPvqKX8=227s
onetrust-domain-verification=6d685f1d41a94696ad7ef771f68993e0227s
google-site-verification=wD8N7i1JTNTkezJ49swvWW48f8_9xveREV4oB-0Hf5o227s
v=spf1 include:_spf.google.com ~all227s
cisco-ci-domain-verification=47c38bc8c4b74b7233e9053220c1bbe76bcc1cd33c7acf7acd36cd6a5332004b227s
_r4rd1pvwyrpi7sw4a3hzmw8e51yh9td227s
google-site-verification=4ibFUgB-wXLQ_S7vsXVomSTVamuOXBiVAzpR5IZ87D0227s
MS=E4A68B9AB2BB9670BCE15412F62916164C0B20BB227s
apple-domain-verification=30afIBcvSuDV2PLX227s
docusign=05958488-4752-4ef2-95eb-aa7ba8a3bd0e227s
Z29vZ2xl227s
SOAns1.google.com dns-admin.google.com 1019121829 900 900 1800 6038s
CAA0 issue "pki.goog"1d
Mail servers
priorityhostipptr
10smtp.google.com142.250.4.27, 64.233.170.26 +7sm-in-f27.1e100.net
SPF1 of 10 lookups
v=spf1 include:_spf.google.com ~all
DMARCat _dmarc.google.com
v=DMARC1; p=reject; rua=mailto:[email protected]
Checks
12 pass
  • ✓
    Nameservers4 nameservers listed.
  • ✓
    SOASOA record present, serial 1019121829.
  • i
    DNSSECThis domain is not signed with DNSSEC.
  • ✓
    Web address (A/AAAA)10 IP addresses.
  • ✓
    IPv6Has AAAA records, so it is reachable over IPv6.
  • ✓
    Mail servers (MX)1 mail servers.
  • ✓
    MX hostsEvery MX host has an IP address.
  • ✓
    Mail server reverse DNSThe mail server IPs have PTR records.
  • ✓
    SPFOne SPF record.
  • ✓
    SPF policyEnds in ~all: mail from other servers is marked as suspicious.
  • ✓
    SPF lookup limit1 of 10 DNS lookups.
  • ✓
    DMARCPolicy p=reject: spoofed mail is rejected.
  • i
    DKIMNot found at the common selectors (default, google, selector1, selector2, k1, s1, s2, dkim, mail). DKIM selectors can't be listed, so the domain may still use DKIM.
  • ✓
    CAAOnly these CAs may issue SSL certificates: pki.goog.
Whois for this domain →Full analysis of this domain →Check DNS propagation →Check SSL for this domain →Check blacklists →

Queried over DNS-over-HTTPS from Cloudflare (Google as a fallback), so answers can be cached for up to their TTL.

01 / faq

DNS and email, briefly.

What is a DNS record?

▼

DNS turns domain names into addresses and services. A and AAAA records hold a site's IPv4 and IPv6 addresses, MX its mail servers, NS its nameservers, TXT free text like SPF and verification codes, and CNAME makes one name an alias of another.

What are SPF, DKIM, and DMARC?

▼

All three protect a domain from spoofed email. SPF (v=spf1 in TXT) lists the servers allowed to send its mail, DKIM signs mail with a key published in DNS, and DMARC (_dmarc) decides what happens to mail that fails both: let through, quarantined, or rejected.

Why don't I see my DNS change yet?

▼

Resolvers keep an answer for its record's TTL. These results come from Cloudflare's public resolver, so a record you just changed can show the old value until its TTL runs out.

Can I use it from a terminal?

▼

Yes. curl 'ipku.in/en/tools/dns-lookup?q=example.com' returns the records and checks as plain text, and /api/dns/example.com returns JSON.