Check your DNS health
Run 28 checks across nameservers, SOA, MX, and more — in seconds.
What this checks
- Parent zone
- Glue records, nameserver address records, and DNSSEC at the registry, where your delegation lives.
- Nameservers
- Parent and zone nameservers agree, every server answers over UDP and TCP, no lame delegation, at least two servers, public addresses only, and IPv6 availability.
- SOA record
- Serials match across nameservers, the primary nameserver and contact address are valid, and the refresh, retry, expire, and minimum timers sit in the ranges recommended by RFC 1912.
- Mail (MX)
- More than one mail server, hostnames rather than IP addresses, no CNAMEs, targets that resolve to public addresses, and matching reverse DNS.
- Domain
- No CNAME at the apex, and an IPv6 address for the domain itself.