DNS mail records, decoded

Type a domain. Mailrecord reads its published DNS records — MX, SPF, DMARC, and the DKIM selectors you name — and says in plain language what they actually declare.

Check a domain See plans

What it reveals

Not whether mail gets delivered — what the domain has told the internet about its mail. The gap between "we set that up" and what is published today.

SPF records can exceed the ten-lookup limit and silently stop being evaluated while appearing correct — Mailrecord counts every lookup and reports the actual number against the limit. DMARC policy of p=none is monitoring mode that enforces nothing, while many believe it protects the domain — Mailrecord reads the policy and explains what it actually does. DKIM selectors are not discoverable — name the selectors you use and Mailrecord checks exactly those, noting that others may exist.

How it works

1. Type a domain

Enter any domain name and optionally list the DKIM selectors you want to check.

2. Live DNS lookups

Mailrecord queries the domain's published MX, TXT (SPF), and DMARC records, plus any DKIM selectors you provide. Every check is a fresh lookup by design — nothing is cached or stored server-side.

3. Read the findings

Each record type gets its own space with a plain-language explanation. No composite verdict, no pass/fail score — just what is published and what that actually means.

Try it now

What this tool does not do. Mailrecord reads published DNS records. It cannot tell you whether mail is delivered, whether a message passed authentication, or whether anyone is spoofing this domain. It checks only the domain you type — never subdomains, never scans. DKIM selectors are not discoverable; absence of a lookup is not absence of a key.