whohostit.
DMARC, SPF & DNSSEC CHECKER

Check DMARC,
SPF and DNSSEC.

See a domain’s DMARC policy, SPF record, and DNSSEC status in one lookup,
with MTA-STS, TLS reporting, and CAA too.

A domain or full URL. Email records are read from the registered domain. Live DNS lookup

Your browser sends the domain you search directly to Google Public DNS, RIPEstat, and the domain’s registry to fetch public records. We don’t store your searches on our servers.

CURIOUS? TRY

One domain. The bigger picture.

Hosting, registrar, expiry, DNS records, email, and security details appear here.

PUBLIC DATA. ONE SIMPLE LOOKUP.
THE SHORT VERSION

What SPF, DMARC, and DNSSEC do

SPF is a TXT record starting v=spf1 that lists the servers allowed to send email for a domain. DMARC is a TXT record at _dmarc that tells receiving servers what to do when a message fails SPF or DKIM: p=none, quarantine, or reject.

DNSSEC signs a domain’s DNS answers so they can’t be forged in transit. A DS record at the parent zone shows the domain is signed, and WhoHostIt also shows whether Google Public DNS validated the answer.

Common questions

How do I check a DMARC record?

Enter the domain above. We look up _dmarc on the registered domain and show the policy exactly as published. A domain with no DMARC record gives receivers no instruction for mail that fails authentication.

Why does my SPF record check show more than one record?

A domain should publish only one v=spf1 record. Multiple SPF records cause a permanent error, so receivers may treat all of its mail as failing SPF. Merge them into a single record.

Is DKIM checked?

Not automatically. DKIM keys live under a selector chosen by your mail provider, such as selector1._domainkey, and there’s no public way to list a domain’s selectors.

SMALL TOOL. CLEAR ANSWERS.

Under the hood, in three steps.

01

You bring the domain

Paste a domain or a full URL. We’ll find the hostname and its registered parent domain.

02

We connect the dots

Public DNS, routing data, and registry records reveal the domain’s infrastructure.

03

You get the bigger picture

Explore the details on this page or download a report. Private and unavailable data are labelled.

MORE FREE TOOLS

Every lookup runs the full report.

Website hosting checkerFind out who hosts any website, plus its registrar, DNS and email provider. Email host & MX lookupFind out who hosts an email address or domain, from its MX records. Email address lookupCheck an email address: its format, provider, and whether its domain takes mail. Domain expiry & age checkerCheck when a domain expires, when it was registered, and how old it is. Nameserver lookupFind out who hosts DNS for a domain and see its nameservers.