Skip to main content

DNS Inspector

The DNS Inspector fetches all standard record types for a domain in a single query and surfaces misconfigurations and warnings — useful for diagnosing email delivery problems, verifying zone file correctness, and auditing a domain you've just taken over.

How to inspect a domain

  1. 1

    Enter your domain

    Type the domain name (e.g. example.com) into the search field. Subdomains work too — try mail.example.com for hosted email setups.

  2. 2

    Click Inspect

    The tool queries for A, AAAA, CNAME, MX, TXT, NS, SOA, and CAA records, plus probes common DKIM selectors. Results appear within a few seconds.

  3. 3

    Review each record section

    Sections with records found are expanded automatically. Sections with warnings show an amber triangle — click to expand and read the warning.

Understanding the results

Record sections

Each record type (A, MX, TXT…) has its own collapsible row. A green circle means records were found; an empty circle means none. Click any row to expand and see the raw values and TTL.

Warnings

An amber triangle flags a misconfiguration — for example, an SPF record with too many DNS lookups (>10), or a missing DMARC policy. Read the warning text for an explanation and suggested fix.

DKIM selectors

The Inspector probes common DKIM selectors (google, default, mail, k1, etc.). Found selectors display their public key value. If your selector is not in the default list, use the Email Auth Validator where you can enter custom selectors.

SPF lookup counter

The top-right badge shows how many DNS lookups your SPF record performs. The limit is 10 — exceeding it causes email delivery failures at strict receivers.