DNS Lookup
Look up a domain's DNS records — A, AAAA, MX, NS, TXT, SOA and CAA — and see its SPF and DMARC email policy at a glance.
Queries public DNS only — we never connect to the domain's servers.
Certificates live in DNS too
CAA records control who may issue for your domain, and Certificate Transparency makes every issued certificate public. CertControl monitors both — and alerts you to certificates you didn't order.
See CertControl →What a DNS lookup shows
DNS records map your domain to addresses (A/AAAA), mail servers (MX), name servers (NS) and metadata (SOA), and carry text policies (TXT). Two TXT-based policies matter for email deliverability and anti-spoofing: SPF (which servers may send mail for the domain) and DMARC (what receivers should do with mail that fails checks). CAA records restrict which Certificate Authorities may issue certificates for the domain.
Which records does this look up?
A and AAAA (addresses), MX (mail servers), NS (name servers), SOA (zone metadata), TXT (text policies) and CAA (certificate issuance), plus a parsed view of the domain's SPF and DMARC email policy.
Why does it say SPF or DMARC is not found?
The domain has no published SPF or DMARC policy. Without SPF, receivers cannot tell which servers may send mail for the domain; without DMARC, there is no instruction on what to do with mail that fails checks — both make spoofing easier and can hurt deliverability.
Do you query my own name servers?
No. The lookup uses public recursive DNS only and never connects to the domain's own servers, so it is safe to run against any domain.