DNS Address Lookup
Comprehensive DNS lookup tool for domain troubleshooting and email security analysis. Check standard DNS records (A, AAAA, MX, TXT, CNAME, NS) plus advanced email authentication and security protocols including SPF, DKIM, DMARC, DNSSEC, TLS-RPT, and MTA-STS.
Essential for diagnosing email delivery issues, verifying domain configuration, auditing security posture, and ensuring proper email authentication. Perfect for system administrators, security professionals, and anyone managing domains.
Privacy First: All DNS queries use encrypted DNS-over-HTTPS (Cloudflare & Google DNS). Your lookups are private and secure.
Domain Lookup
What This Tool Checks
Standard DNS Records: A, AAAA, MX, TXT and NS records, plus an exact-host CNAME check and probes for selected common aliases. DNS does not provide a normal public query that lists every hostname in a zone.
Domain Registration: RDAP registration data including registrar, key dates, status, name servers, DNSSEC and registrar abuse contact where available.
Email Authentication: SPF and DMARC, plus MTA-STS and TLS-RPT discovery. DKIM requires a selector and is not guessed automatically.
SSL/TLS: Certificate trust, hostname match, issuer, validity dates, expiry warning, negotiated TLS protocol, cipher and HSTS. This uses a protected server-side WordPress endpoint.
Email Security Gateway: Detects Proofpoint, Mimecast, Barracuda, Microsoft EOP, Cisco, and 20+ other email security providers.
Security Analysis: Practical checks and warnings. Provider detection is based on public DNS signals and does not prove which paid security features are enabled.
Perfect for troubleshooting email delivery, verifying domain setup, and practical first-pass security reviews.
Analysis Results
Understanding DNS & Email Security
- SPF (Sender Policy Framework) - Specifies which mail servers can send email on behalf of your domain. Prevents email spoofing.
- DKIM (DomainKeys Identified Mail) - Cryptographic signature that verifies email wasn't altered in transit and confirms sender identity.
- DMARC (Domain-based Message Authentication) - Tells receiving servers what to do with emails that fail SPF/DKIM checks. Provides reporting.
- Email Security Gateway (SEG) - Cloud-based service that filters spam, phishing, malware, and advanced threats before reaching your mail server. Examples: Proofpoint, Mimecast, Barracuda.
- TLS-RPT (TLS Reporting) - Provides reports on TLS connection failures for email delivery troubleshooting.
- MTA-STS (Mail Transfer Agent Strict Transport Security) - Uses a DNS marker and a hosted policy file to require authenticated TLS for inbound email.
- SSL/TLS Certificate - Proves the identity of an HTTPS service and encrypts traffic. Expiry, hostname matching and trust-chain validation all matter.
Thinking about DNS privacy too?
A DNS lookup helps you see how a domain name connects to records such as A, MX, TXT, SPF, DKIM and DMARC. It is useful for troubleshooting websites, email delivery and domain security.
When you browse the web, DNS requests can form part of the trail your device leaves behind. A VPN can help add a layer of privacy by masking your public IP address and helping protect your connection, especially on public or shared Wi-Fi.
It is not a replacement for proper DNS security. It will not configure SPF, DKIM or DMARC, stop phishing emails, protect Microsoft 365 accounts, patch devices, monitor suspicious activity or recover lost data. For that, you still need layered cyber security.
View NordVPNAffiliate disclosure: this is an affiliate link. If you buy through it, we may earn a commission at no extra cost to you.
