Zovo DNS Checker

Check a domain's live DNS records and email authentication with an email DNS check that queries public resolvers through DNS-over-HTTPS for MX, SPF, DMARC, and DKIM, then returns a pass/warn/fail findings list and a CSV report.

SPF is parsed into its mechanisms and the DNS lookups are counted against the RFC 7208 limit of 10, so an include chain that is too deep is flagged before receivers reject the mail. DMARC is read for the policy, the subdomain policy, the percentage, the aggregate and forensic reporting addresses, and the DKIM and SPF alignment. DKIM keys are looked up for the selectors you give, with revoked and short keys called out.

The records tool returns raw A, AAAA, MX, NS, TXT, CNAME, CAA, and SOA records with their TTLs, which is useful for a mail migration, a DNS move, or a delivery problem.

Use it for a domain such as example.com, example.org, or your own domain. Results are public DNS as seen by public resolvers at the moment of the check.

Limitations: DKIM needs the selector name; a full deliverability test is not included; only public resolver answers are visible; IP literals are refused; WHOIS and registrar data are not covered.