TXT Record Lookup

Examines a domain's TXT records: SPF with every include, DMARC, DKIM, service verification codes, and errors.

You can include https:// or an email address. Cyrillic domains are fine too.

Every TXT record of a domain is labeled with words: SPF, a verification code from Google, Yandex, Mail.ru, GlobalSign, and other services, the outdated Sender ID, or a string with no obvious purpose. A record split into chunks is shown in full, with duplicates marked.

SPF is parsed with all its nested include entries. Under RFC 7208, a check may make no more than ten DNS lookups, and the tree shows which nested record eats up the limit or points to a name with no SPF. A plain list of records does not reveal this error.

DMARC, DKIM, and mail encryption

Records on service names are checked separately: DMARC with its policy and report addresses, BIMI for the logo in mail, MTA-STS, and TLS-RPT. DKIM keys are looked up by common selectors, and each key found shows its length.

If the DKIM selector is different, you can find it in the DKIM-Signature header of a message, after s=, and check it on the DNS lookup page.

Rate this tool

Help us get better

Other tools