DNS lookup + SPF, DMARC & MX checker
Enter a domain, a URL or an email address. The page asks Cloudflare's public DNS-over-HTTPS resolver (1.1.1.1) for the common record types plus _dmarc, then checks whether the domain can receive mail and how well it is protected against spoofing. Only the domain name is sent, and only when you press Look up.
Frequently asked questions
Can I get ALL DNS records of a domain?
Not from public DNS: the ANY query is deprecated and zone transfers are disabled almost everywhere. This tool queries each common type (A, AAAA, CNAME, MX, NS, TXT, CAA, SOA) plus _dmarc, which covers what most checks need. Subdomains have to be looked up one by one.
How do I check if an email address is valid?
This page checks the domain part: if it has no MX record (or a null MX), mail to it will bounce. It cannot tell whether the mailbox itself exists; no honest public check can without sending mail. For lists, the bulk Email Syntax & MX Checker below flags typos, disposable domains and dead domains.
What makes a good SPF record?
Exactly one TXT record starting with v=spf1, listing your mail services and ending in ~all or -all, with at most 10 DNS-lookup terms (include, a, mx, ptr, exists, redirect) including nested ones. +all lets anyone send as you.
Which DMARC policy should I use?
Start with p=none plus a rua= address to collect reports, fix every legitimate sender, then move to p=quarantine and p=reject. Gmail and Yahoo require at least p=none for bulk senders.
Is anything sent to your server?
No. The page has no analytics. The domain name goes directly from your browser to Cloudflare's resolver (cloudflare-dns.com); nothing else is sent anywhere.