DNS queries
Query MX, SPF, DKIM, DMARC, PTR and name servers.
MX records
Shows a domain's responsible mail servers and their priority.
Microsoft 365
PowerShell (Windows)
Resolve-DnsName Built-in
Resolve-DnsName -Name contoso.com -Type MX | Sort-Object Preference | Format-Table Preference, NameExchangedig Add-on tool
dig +short MX contoso.comUnix shell (bash)
resolvectl Built-in
resolvectl query --type=MX contoso.comdig Add-on tool
dig +short MX contoso.comGoogle Workspace
PowerShell (Windows)
Resolve-DnsName Built-in
Resolve-DnsName -Name google.com -Type MX | Sort-Object Preference | Format-Table Preference, NameExchangedig Add-on tool
dig +short MX google.comUnix shell (bash)
resolvectl Built-in
resolvectl query --type=MX google.comdig Add-on tool
dig +short MX google.comA / AAAA
Resolves a hostname to its IPv4 and IPv6 addresses.
Mailserver
- Host / server
-
mail.example.comChange in the builder →
PowerShell (Windows)
Resolve-DnsName Built-in
Resolve-DnsName -Name mail.example.com -Type A
Resolve-DnsName -Name mail.example.com -Type AAAAdig Add-on tool
dig +short A mail.example.com
dig +short AAAA mail.example.comUnix shell (bash)
resolvectl Built-in
resolvectl query mail.example.comdig Add-on tool
dig +short A mail.example.com
dig +short AAAA mail.example.comAutodiscover
- Host / server
-
autodiscover.example.comChange in the builder →
PowerShell (Windows)
Resolve-DnsName Built-in
Resolve-DnsName -Name autodiscover.example.com -Type A
Resolve-DnsName -Name autodiscover.example.com -Type AAAAdig Add-on tool
dig +short A autodiscover.example.com
dig +short AAAA autodiscover.example.comUnix shell (bash)
resolvectl Built-in
resolvectl query autodiscover.example.comdig Add-on tool
dig +short A autodiscover.example.com
dig +short AAAA autodiscover.example.comTXT records (SPF)
Lists all of a domain's TXT records, including the SPF record (v=spf1).
SPF
PowerShell (Windows)
Resolve-DnsName Built-in
Resolve-DnsName -Name example.com -Type TXT | Select-Object -ExpandProperty Stringsdig Add-on tool
dig +short TXT example.comUnix shell (bash)
resolvectl Built-in
resolvectl query --type=TXT example.comdig Add-on tool
dig +short TXT example.comDKIM selector
Queries the public DKIM key of a selector (<selector>._domainkey.<domain>).
Microsoft 365
- DKIM selector
-
selector1Change in the builder →
PowerShell (Windows)
Resolve-DnsName Built-in
Resolve-DnsName -Name selector1._domainkey.example.com -Type TXT | Select-Object -ExpandProperty Stringsdig Add-on tool
dig +short TXT selector1._domainkey.example.comUnix shell (bash)
resolvectl Built-in
resolvectl query --type=TXT selector1._domainkey.example.comdig Add-on tool
dig +short TXT selector1._domainkey.example.comMicrosoft 365 (2. Schlüssel)
- DKIM selector
-
selector2Change in the builder →
PowerShell (Windows)
Resolve-DnsName Built-in
Resolve-DnsName -Name selector2._domainkey.example.com -Type TXT | Select-Object -ExpandProperty Stringsdig Add-on tool
dig +short TXT selector2._domainkey.example.comUnix shell (bash)
resolvectl Built-in
resolvectl query --type=TXT selector2._domainkey.example.comdig Add-on tool
dig +short TXT selector2._domainkey.example.comGoogle Workspace
- DKIM selector
-
googleChange in the builder →
PowerShell (Windows)
Resolve-DnsName Built-in
Resolve-DnsName -Name google._domainkey.example.com -Type TXT | Select-Object -ExpandProperty Stringsdig Add-on tool
dig +short TXT google._domainkey.example.comUnix shell (bash)
resolvectl Built-in
resolvectl query --type=TXT google._domainkey.example.comdig Add-on tool
dig +short TXT google._domainkey.example.comDMARC record
Shows the DMARC policy at _dmarc.<domain>.
DMARC-Richtlinie
PowerShell (Windows)
Resolve-DnsName Built-in
Resolve-DnsName -Name _dmarc.example.com -Type TXT | Select-Object -ExpandProperty Stringsdig Add-on tool
dig +short TXT _dmarc.example.comUnix shell (bash)
resolvectl Built-in
resolvectl query --type=TXT _dmarc.example.comdig Add-on tool
dig +short TXT _dmarc.example.comPTR (reverse DNS)
Resolves an IP address back to a hostname.
IPv4
- IP address
-
192.0.2.25Change in the builder →
PowerShell (Windows)
Resolve-DnsName Built-in
Resolve-DnsName -Name 192.0.2.25 -Type PTRdig Add-on tool
dig +short -x 192.0.2.25Unix shell (bash)
resolvectl Built-in
resolvectl query 192.0.2.25dig Add-on tool
dig +short -x 192.0.2.25IPv6
- IP address
-
2001:db8::25Change in the builder →
PowerShell (Windows)
Resolve-DnsName Built-in
Resolve-DnsName -Name 2001:db8::25 -Type PTRdig Add-on tool
dig +short -x 2001:db8::25Unix shell (bash)
resolvectl Built-in
resolvectl query 2001:db8::25dig Add-on tool
dig +short -x 2001:db8::25Name servers / SOA
Shows a zone's responsible name servers and its SOA record.
Zone
PowerShell (Windows)
Resolve-DnsName Built-in
Resolve-DnsName -Name example.com -Type NS
Resolve-DnsName -Name example.com -Type SOAdig Add-on tool
dig +short NS example.com
dig +short SOA example.comUnix shell (bash)
resolvectl Built-in
resolvectl query --type=NS example.comdig Add-on tool
dig +short NS example.com
dig +short SOA example.comAgainst a specific resolver
Queries a domain through a resolver of your choice (default 1.1.1.1) to spot split DNS against the internal resolver.
Cloudflare
- Resolver (DNS server)
-
1.1.1.1Change in the builder →
PowerShell (Windows)
Resolve-DnsName Built-in
Resolve-DnsName -Name example.com -Type A -Server 1.1.1.1dig Add-on tool
dig @1.1.1.1 +short A example.comUnix shell (bash)
dig Add-on tool
dig @1.1.1.1 +short A example.comnslookup Add-on tool
nslookup example.com 1.1.1.1- Resolver (DNS server)
-
8.8.8.8Change in the builder →
PowerShell (Windows)
Resolve-DnsName Built-in
Resolve-DnsName -Name example.com -Type A -Server 8.8.8.8dig Add-on tool
dig @8.8.8.8 +short A example.comUnix shell (bash)
dig Add-on tool
dig @8.8.8.8 +short A example.comnslookup Add-on tool
nslookup example.com 8.8.8.8Quad9
- Resolver (DNS server)
-
9.9.9.9Change in the builder →
PowerShell (Windows)
Resolve-DnsName Built-in
Resolve-DnsName -Name example.com -Type A -Server 9.9.9.9dig Add-on tool
dig @9.9.9.9 +short A example.comUnix shell (bash)
dig Add-on tool
dig @9.9.9.9 +short A example.comnslookup Add-on tool
nslookup example.com 9.9.9.9Querying a specific resolver on Linux needs dig or nslookup (package dnsutils/bind-utils); resolvectl always uses the system resolver.
