Check your DNS health

Run 28 checks across nameservers, SOA, MX, and more — in seconds.

What this checks

See every check explained

Parent zone
Glue records, nameserver address records, and DNSSEC at the registry, where your delegation lives.
Nameservers
Parent and zone nameservers agree, every server answers over UDP and TCP, no lame delegation, at least two servers, public addresses only, and IPv6 availability.
SOA record
Serials match across nameservers, the primary nameserver and contact address are valid, and the refresh, retry, expire, and minimum timers sit in the ranges recommended by RFC 1912.
Mail (MX)
More than one mail server, hostnames rather than IP addresses, no CNAMEs, targets that resolve to public addresses, and matching reverse DNS.
Domain
No CNAME at the apex, and an IPv6 address for the domain itself.