FREE TOOL · NO SIGNUP

DNS Check: A, MX, SPF, DMARC at a glance.

Complete DNS analysis of a domain. We pull every important record, syntactically validate SPF and DMARC and surface configuration gaps.

★★★★★ 4.8 / 5 · 124 reviews
12+
Record types
2s
per domain
global
Resolvers
TOOL · 07 / 09
DNS Check
A · MX · TXT · CAAFREE

By using this tool you agree to our Terms and Privacy Policy

Your data is safe

No storage

Domains are only used for the check and discarded immediately.

Public DNS data only

Only publicly available DNS records are queried.

No account needed

The tool works completely anonymously and without signup.

GDPR compliant

No personal data, no storage, no sharing.

DNS CHECK — THE GUIDE

What does a DNS check verify?

ON THIS PAGE
  1. What is DNS Check?
  2. Why do you need this?
  3. Step-by-step in 4 steps
  4. What gets checked?
  5. Glossary
  6. FAQ

What does a DNS check verify?

DNS is the address book of the internet. Wrong or missing records mean: mail doesn’t arrive, the website is unreachable, email auth is missing. The DNS Check shows you all relevant records of a domain at a glance — and flags what’s missing.

Why check DNS regularly?

DNS issues often go unnoticed for days:

  • MX record missing. No mail arrives any more, nobody notices right away.
  • SPF soft-fail. Mails go to spam, no bounce.
  • DMARC missing. Phishing in your name, unnoticed.
  • DNS propagation. After a change, different resolvers see different things.

Step-by-step: DNS Check in 4 steps

  1. 1
    Enter a domain
    Domain only — we fetch the rest.
  2. 2
    Run the check
    We query every record type in parallel.
  3. 3
    Find gaps
    What’s missing is highlighted in red.
  4. 4
    Fix suggestions
    For each gap a copy-pastable configuration.

Which records do we fetch?

The key record types for a modern email/web domain:

A / AAAA
Web-server IP (v4 + v6).
MX
Mail-server entry with priority.
TXT (SPF)
Authorised mail senders.
TXT (DMARC)
Auth reporting policy.
TXT (DKIM)
Public keys.
CNAME
Aliases.
NS
Nameservers.
CAA
Authorised certificate authorities.
GLOSSARY

DNS vocabulary

A record
IPv4 address of the domain.
AAAA record
IPv6 address.
MX record
Mail server with priority.
TXT record
Free text — SPF, DMARC, verifications.
CNAME
Alias to another domain.
NS
Nameserver of the domain.
CAA
Which CA may issue SSL for the domain.
Propagation
Worldwide distribution of DNS changes.
WHO USES IT

Who runs DNS checks?

IT admins
When setting up new domains.
Email migration
Before and after a provider switch.
Security teams
Spot phishing domains and CAA gaps.
DevOps
Verify all records before production deploys.
Hoster switch
Track propagation.
FAQ

FAQ for DNS Check

Why do different tools see different records?
DNS propagation: after a change it takes 0–48h before all resolvers worldwide see the new state.
What’s the most important record?
For mail: MX. For web: A. For email auth: TXT (SPF + DMARC).
How often should I check?
On every change + monthly.
DNSSEC?
We also verify whether the domain is DNSSEC-signed.
Does it cost?
Web: €0. Monitoring in the Mandokit plan.
Do you store requests?
No.

DNS monitoring 24/7?

Mandokit finds, validates and contacts B2B leads for you — as a guided workflow or via API.

Try for free