X-RAY // DNS // TXT

TXT RECORDS
CHECK.

List the TXT records of a domain and identify SPF and Google, Microsoft 365, Meta and other verifications, plus DMARC and DKIM in the wrong place.

Runs only this check. For all 33 checks at once, use the full Domain X-Ray. Public lookups only; nothing is stored on the server.

TXT

TXT records

WAITING

Enter a domain above to run this check.

01 // WHAT THE CHECK VERIFIES

Lists the TXT records and identifies what they are for: SPF, ownership verifications (Google, Microsoft, Meta and others) and other uses.

02 // WHY IT MATTERS

TXT records of services you no longer use reveal suppliers and pile up junk in the zone. Review the ones you do not recognise.

03 // HOW TO READ THE RESULT

WARNING: There is a DMARC or DKIM record in the TXT of the domain root, where it is ignored.
INFO: Lists the TXT records and identifies the known services. The check is informational: review the ones you do not recognise.

ERROR and TIMEOUT mean the query did not finish (the source was down or slow), not a problem with the domain: run the check again.

04 // HOW TO FIX

Remove verifications of services you no longer use. DMARC only counts at _dmarc.<domain> and DKIM at <selector>._domainkey.<domain>:

dig TXT example.com +short
dig TXT _dmarc.example.com +short

Would rather have someone else do it? Bit Happens can fix this →

05 // CONTINUE