DNS Lookup
See every DNS record of a domain at once, then check its health: nameservers, mail servers, SPF, DKIM, DMARC, and DNSSEC. Enter an IP to see its reverse DNS.
| type | value | ttl |
|---|---|---|
| A | 104.21.76.54 | 5m |
| 172.67.188.175 | 5m | |
| AAAA | 2606:4700:3033::ac43:bcaf | 5m |
| 2606:4700:3032::6815:4c36 | 5m | |
| MX | 10 mx.spamexperts.com | 5m |
| 20 fallbackmx.spamexperts.eu | 5m | |
| 30 lastmx.spamexperts.net | 5m | |
| NS | elsa.ns.cloudflare.com | 1d |
| eric.ns.cloudflare.com | 1d | |
| TXT | facebook-domain-verification=o4r5ijx8w8o4wm07mzkxhkabgsg9ey | 5m |
| google-site-verification=KtnoF4c2wEPJXe9Ne624m8gfoNGtcgULTIVO-H4AMNM | 5m | |
| google-site-verification=jPApnGhxg1kGMTreioRJ64VZMvm0hO6bLxsgPlyKT54 | 5m | |
| v=spf1 include:spf.antispamcloud.com include:amazonses.com +ip4:103.160.37.210 +ip4:139.162.53.152 +ip4:192.46.230.107 -all | 5m | |
| SOA | elsa.ns.cloudflare.com dns.cloudflare.com 2415591694 10000 2400 604800 1800 | 30m |
| priority | host | ip | ptr |
|---|---|---|---|
| 10 | mx.spamexperts.com | 154.59.104.23, 2001:978:2:2c::137:100 | fe2-r3-in.ams14.l.antispamcloud.com |
| 20 | fallbackmx.spamexperts.eu | 154.59.104.23, 154.59.193.124 +4 | fe2-r3-in.ams14.l.antispamcloud.com |
| 30 | lastmx.spamexperts.net | 149.13.75.27, 38.89.254.156 +6 | fe1-r3-in.fra02.l.antispamcloud.com |
v=spf1 include:spf.antispamcloud.com include:amazonses.com +ip4:103.160.37.210 +ip4:139.162.53.152 +ip4:192.46.230.107 -allv=DMARC1; p=reject; rua=mailto:[email protected]- ✓Nameservers2 nameservers listed.
- ✓SOASOA record present, serial 2415591694.
- iDNSSECThis domain is not signed with DNSSEC.
- ✓Web address (A/AAAA)4 IP addresses.
- ✓IPv6Has AAAA records, so it is reachable over IPv6.
- ✓Mail servers (MX)3 mail servers.
- ✓MX hostsEvery MX host has an IP address.
- ✓Mail server reverse DNSThe mail server IPs have PTR records.
- ✓SPFOne SPF record.
- ✓SPF policyEnds in -all: mail from other servers is rejected.
- ✓SPF lookup limit2 of 10 DNS lookups.
- ✓DMARCPolicy p=reject: spoofed mail is rejected.
- ✓DKIMDKIM key found at selector default.
- iCAANo CAA records, so any CA may issue SSL certificates.
Queried over DNS-over-HTTPS from Cloudflare (Google as a fallback), so answers can be cached for up to their TTL.
DNS and email, briefly.
What is a DNS record?
▼
DNS turns domain names into addresses and services. A and AAAA records hold a site's IPv4 and IPv6 addresses, MX its mail servers, NS its nameservers, TXT free text like SPF and verification codes, and CNAME makes one name an alias of another.
What are SPF, DKIM, and DMARC?
▼
All three protect a domain from spoofed email. SPF (v=spf1 in TXT) lists the servers allowed to send its mail, DKIM signs mail with a key published in DNS, and DMARC (_dmarc) decides what happens to mail that fails both: let through, quarantined, or rejected.
Why don't I see my DNS change yet?
▼
Resolvers keep an answer for its record's TTL. These results come from Cloudflare's public resolver, so a record you just changed can show the old value until its TTL runs out.
Can I use it from a terminal?
▼
Yes. curl 'ipku.in/en/tools/dns-lookup?q=example.com' returns the records and checks as plain text, and /api/dns/example.com returns JSON.