DNS & Email Authentication Diagnostics

DNS Records Inspector

Inspect DNS records, verify email authentication (SPF, DMARC, and DKIM), and validate DNSSEC configuration.

Enter a domain to inspect its DNS configuration.
Try examples: • •

DNS & Email Security Analysis

Inspect domain records, email authentication policies, and DNS security configuration.

DNS Records

Inspect A and AAAA records to identify IPv4 and IPv6 address mappings for a domain.

Mail & Name Servers

Review MX and NS records to identify mail routing and authoritative name server configuration.

CAA Records

Check which Certificate Authorities are authorized to issue certificates for the domain.

SPF Authentication

Inspect SPF policies that define which mail servers are authorized to send email for a domain.

DMARC & DKIM

Review DMARC policies and check DKIM records using a supplied selector.

DNSSEC Validation

Check DNSSEC configuration and review DNS response validation information.

Why DNS Health and Email Authentication Matter

The Domain Name System (DNS) is the foundational addressing system of the internet. Beyond mapping hostnames to IP addresses through A and AAAA records, DNS plays an important role in domain authorization, email deliverability, and anti-phishing safeguards.

Email Authentication Records

SPF, DKIM, and DMARC work together to help domain owners protect their email identity and reduce unauthorized use of their domains.

SPF

Specifies which mail servers are authorized to send email on behalf of your domain.

DMARC

Defines how receiving mail servers should handle messages that fail DMARC authentication, with policies such as none, quarantine, or reject.

DKIM

Uses cryptographic signatures to help receiving mail servers verify that messages were authorized by the sending domain.

DNS Security and Certificate Authorization

DNSSEC adds cryptographic validation to DNS responses, helping protect against certain forms of DNS data tampering. CAA records allow domain owners to specify which Certificate Authorities may issue TLS certificates for their domain.

About DNS Testing

DNS results reflect the records and validation information available at the time of the query. DNS configurations can change, and DNS propagation or resolver behavior may affect results. A successful lookup does not guarantee that a domain or its associated services are secure.