A and AAAA
The address of the server your website is on. A is the older kind of address (IPv4), AAAA the newer kind (IPv6).
Who holds that address? Free IP lookup →Where does your domain point, and who handles its email? Type a domain to see its A, AAAA, CNAME, MX, NS, TXT, CAA and SOA records in one go. It runs in your browser, with no signup, and we keep no record of what you look up.
Your browser asks a public DNS resolver directly. Nothing is sent to us.
Looking up the records…
A DNS lookup shows what is published. The free domain security checker grades it: whether someone could send email pretending to be you, and whether anyone could get a certificate for your name.
DNS is the internet's address book. Each type of record answers one question about your domain.
The address of the server your website is on. A is the older kind of address (IPv4), AAAA the newer kind (IPv6).
Who holds that address? Free IP lookup →A nickname: this name is really another name, so look that one up instead. Common on www and on services you rent.
Which servers receive your email. The lowest number is tried first. No MX means no email to this domain.
Which company answers for your domain. Whoever runs these servers controls every other record.
Free text, used to prove you own the domain and to say who may send email as you (SPF and DMARC live here).
Check Your Domain Free →CAA lists who may issue certificates for you. SOA is the technical header of the zone: its main server and how often copies refresh.
Free CAA record checker →The lookup runs in your browser, not on our server. Your browser asks Cloudflare's public DNS resolver (or Google's, if Cloudflare does not answer) over an encrypted connection. They see the name as they would for any DNS lookup, under their own privacy policies.
We keep no record of what you look up, and nothing about you. Our own analytics count that a lookup happened, never the domain. Full detail is in our privacy policy.
It is free and there is no signup. You do not enter an email address.
No. The lookup runs in your own browser, which asks a public DNS resolver (Cloudflare, or Google if Cloudflare does not answer) directly. The domain never reaches our server. Our own analytics count that a lookup happened, and nothing else.
Records are copied around the internet and kept for a while, for as long as the time to live on each record says. If you changed a record recently, some resolvers may still hold the old one until that time runs out.
Yes. Type the full name, for example _dmarc.yourbusiness.co.ke, and look at the TXT row.
The domain exists but has nothing of that type. That is normal for some types, such as CNAME on a main domain. A missing MX record means the domain cannot receive email.
DNS and email security is part of the Security Review. We fix problems in stages so nothing goes offline, write down what changed, and check again with you at the end.