Free tool

DNS, SPF & DMARC checker

Type a domain and get the records that make your website load and your email deliver, checked live and explained in plain English. No signup, no jargon wall.

Lookups run against live public DNS. We rate-limit per connection to keep the tool fast for everyone.

What we check

Five records, all in one pass

These five record types cover the two failures owners actually feel: a website that will not load, and email that silently lands in spam.

Website records (A & AAAA)

The address records that tell browsers which server your website lives on. If these are missing or pointing somewhere stale, your site simply does not load.

Name servers (NS)

Who answers DNS questions for your domain. This tells you which provider actually controls your settings, which matters more than where the domain was bought.

Mail routing (MX)

Where email sent to you@yourdomain should be delivered. No MX records means email to your domain bounces, even if your website is fine.

SPF (sender policy)

A TXT record listing who is allowed to send email as your domain. Missing or duplicated SPF is one of the most common reasons legitimate email lands in spam.

DMARC (spoofing protection)

The policy that tells receiving servers what to do with forged mail pretending to be you. Mailbox providers increasingly demand it from every sender.

Questions

DNS checking, answered

Is this DNS checker really free?
Yes, completely. No signup, no trial, no credit card. We built it because these are the first checks our own engineers run when someone calls with a site or email problem, and most lookup tools bury the answer in jargon.
Why does my email go to spam without SPF or DMARC?
Receiving mail servers use SPF and DMARC to decide whether mail claiming to be from your domain is genuine. When those records are missing, your messages carry no proof, so providers treat them with suspicion and route them to spam, or refuse them outright.
What do I do if something is flagged?
Each finding comes with a plain-English explanation of what to change. DNS edits happen wherever your name servers are managed, usually your host or registrar. If you would rather a human handle it, leave your email after running a check and a real engineer will reply with the exact records to set.
Why does a hosting company give this away?
Because broken DNS and spam-folder email are hosting problems, and fixing them is what we do all day. Some people fix their records and move on, and that is fine. Some decide they want a host that answers the phone in under five minutes, and that is us.

DNS is the symptom. Hosting is usually the cause.

If your records are a mess, odds are nobody at your current host is watching them. UpperLevel sets DNS, SSL, SPF, and DMARC up properly as part of every free migration, and a real person answers in under five minutes when something needs eyes.