Free tool

DNS lookup

Enter a record name and pick a type to see exactly what it resolves to right now — a quick way to check a record without dropping to a terminal. A, AAAA, CNAME, MX, TXT, NS, SOA, SRV, CAA, DS and TLSA.

The quick lookups below cover the email records whose names are easy to get wrong, because most of them do not live at the domain itself. DMARC is at _dmarc, TLS-RPT at _smtp._tls, BIMI at default._bimi. DKIM has no fixed name at all, so it is tried across the common selectors, and TLSA lives at _25._tcp of each host your MX points at — so it resolves your MX first and checks every one, and tells you whether the domain is signed with DNSSEC, without which senders ignore TLSA records entirely.