TOOL · 07 / 09
DNS Check
A · MX · TXT · CAAFREE
Your data is safe
No storage
Domains are only used for the check and discarded immediately.
Public DNS data only
Only publicly available DNS records are queried.
No account needed
The tool works completely anonymously and without signup.
GDPR compliant
No personal data, no storage, no sharing.
DNS CHECK — THE GUIDE
What does a DNS check verify?
ON THIS PAGE
- What is DNS Check?
- Why do you need this?
- Step-by-step in 4 steps
- What gets checked?
- Glossary
- FAQ
What does a DNS check verify?
DNS is the address book of the internet. Wrong or missing records mean: mail doesn’t arrive, the website is unreachable, email auth is missing. The DNS Check shows you all relevant records of a domain at a glance — and flags what’s missing.
Why check DNS regularly?
DNS issues often go unnoticed for days:
- MX record missing. No mail arrives any more, nobody notices right away.
- SPF soft-fail. Mails go to spam, no bounce.
- DMARC missing. Phishing in your name, unnoticed.
- DNS propagation. After a change, different resolvers see different things.
Step-by-step: DNS Check in 4 steps
- 1Enter a domainDomain only — we fetch the rest.
- 2Run the checkWe query every record type in parallel.
- 3Find gapsWhat’s missing is highlighted in red.
- 4Fix suggestionsFor each gap a copy-pastable configuration.
Which records do we fetch?
The key record types for a modern email/web domain:
A / AAAA
Web-server IP (v4 + v6).
MX
Mail-server entry with priority.
TXT (SPF)
Authorised mail senders.
TXT (DMARC)
Auth reporting policy.
TXT (DKIM)
Public keys.
CNAME
Aliases.
NS
Nameservers.
CAA
Authorised certificate authorities.
GLOSSARY
DNS vocabulary
- A record
- IPv4 address of the domain.
- AAAA record
- IPv6 address.
- MX record
- Mail server with priority.
- TXT record
- Free text — SPF, DMARC, verifications.
- CNAME
- Alias to another domain.
- NS
- Nameserver of the domain.
- CAA
- Which CA may issue SSL for the domain.
- Propagation
- Worldwide distribution of DNS changes.
WHO USES IT
Who runs DNS checks?
IT admins
When setting up new domains.
Email migration
Before and after a provider switch.
Security teams
Spot phishing domains and CAA gaps.
DevOps
Verify all records before production deploys.
Hoster switch
Track propagation.
FAQ
FAQ for DNS Check
Why do different tools see different records?
DNS propagation: after a change it takes 0–48h before all resolvers worldwide see the new state.
What’s the most important record?
For mail: MX. For web: A. For email auth: TXT (SPF + DMARC).
How often should I check?
On every change + monthly.
DNSSEC?
We also verify whether the domain is DNSSEC-signed.
Does it cost?
Web: €0. Monitoring in the Mandokit plan.
Do you store requests?
No.
MORE FREE TOOLS
Pairs well with DNS Check
DNS monitoring 24/7?
Mandokit finds, validates and contacts B2B leads for you — as a guided workflow or via API.
Try for free