Mail DNS Check
Practical ToolsCheck current network

Mail DNS Check

Inspect public MX, SPF, DMARC and optional DKIM records

After you run a check, the domain and optional selector go only to three fixed public DNS resolvers. No query history is saved.

Find s= in the DKIM-Signature of a sent message. Leave blank to skip DKIM.

This page uses HTTP. Enter only a public domain and selector.

Enter a domain to begin.

Open the standalone server tool

How to read this

Queries DNSPod, Cloudflare and Google for direct MX, SPF, DMARC and optional DKIM TXT records.

This reads public records only. It sends no mail, checks no signatures and cannot determine whether a message authenticates. An applicable DMARC policy may come from a parent domain; full SPF lookup counts require recursive evaluation.