Skip to content

TXT record lookup

List a domain’s TXT records, name the SPF, DMARC and verification ones, and flag the mistakes that break SPF.

Live lookup

Our server runs it live when you press the button. The same answer may be reused for up to 10 minutes, and says so when it is.

Domain

What is a TXT record?

A TXT record holds text published in DNS for other systems to read. Mail depends on several kinds: SPF lists who may send for the domain, DMARC (at _dmarc) sets the policy for failures, and services such as Google and Microsoft 365 ask for a TXT token to prove you control the domain.

Reading the result

Each record is shown in full with its TTL and what it is, named only from its own text: a version tag such as v=spf1, or a prefix a service documents for verification. Anything else is marked as not identified. Where Cloudflare’s answer shows a record split into several strings, the count is shown, because SPF joins those strings with no space added.

Beat runs on the same engine, on a schedule, across all 41 checks and 25 blacklists. What it adds is asking again, noticing when an answer changes and telling you what to do about it.

Common problems it finds

  • Two SPF records

    RFC 7208 section 4.5 makes the result permerror when more than one record starts with v=spf1, so SPF never passes. Merge them into one.

  • One SPF record split into two records

    A long SPF record has to stay one record made of several strings. Publish its second half as a separate TXT record and that half has no v=spf1 at the start, so receivers ignore it.

  • Strings that run together

    RFC 7208 section 3.3 joins a record’s strings with no space. If the first string does not end in a space, its last term fuses with the next one and the record stops meaning what it says.

  • Quotes inside the record

    Pasting a record with its quotes into a panel that adds its own leaves quote marks in the text. A record that begins with a quote mark does not begin with v=spf1, so receivers do not read it as SPF.

  • DMARC published at the domain itself

    Receivers look for DMARC only at _dmarc.yourdomain (RFC 7489 section 6.1). A v=DMARC1 record at the bare domain is never read.

Beat · paid monitoring

A heartbeat for your email.

Beat runs every check on this site on a schedule: 41 checks, 25 blacklists and real inbox placement. The moment something breaks, it tells you what broke, why it matters, and the exact fix.

example.comWatching
  • SPFpass
  • DKIMpass
  • DMARCp=none
  • Blacklists0 of 25

Illustrative. Your domain, every few hours.

Also from us:Pulse: your own sending infrastructureConsulting: $65/hr, no retainer