tools / dns
dns/
Look up DNS records and domain IPs, and check basic DMARC fields.
Queries go through our server to Google Public DNS. DMARC checks only this exact name, without discovering parent policies.
| Name | Type | TTL (s) | Value |
|---|
Raw records
FAQ
Which record gives a domain's IP?
A returns IPv4; AAAA returns IPv6. MX is for mail servers, NS for name servers, TXT for text, CNAME for aliases and CAA for certificate issuance restrictions.
Why does it differ from my local lookup?
Google Public DNS results may differ due to caching and CDN routing. TTL is the cache lifetime in seconds returned by this resolver, not proof of global propagation.
Does this prove email is secure?
No. It queries the _dmarc name and checks version, duplicate tags and common fields. It does not validate SPF, DKIM, individual messages or reporting-domain authorization.
Does no DMARC record mean no protection?
Not necessarily. Subdomains may inherit a parent policy. This tool checks only the given name and does not discover policies. You can query the parent separately, but that is not a final effective-policy result.
What do p=none and t=y mean?
Under RFC 9989, p=none means monitoring, and missing p defaults to none. t=y means testing. Legacy pct no longer requests percentage-based enforcement; older receivers may behave differently.
Does it visit the site or save queries?
It does not visit the target site. The domain is sent through our server to Google Public DNS. We do not log queries and the browser keeps no query history. Google receives the queried name.