Run a comprehensive DNS health check. Verifies A, MX, NS, SPF, DMARC records and scores your domain configuration.
A DNS health check runs a battery of tests against a domain's DNS configuration to identify misconfigurations, missing records, and security gaps that could impact email deliverability, website reliability, or vulnerability to DNS-based attacks.
Checks that NS records are present, that all listed nameservers respond authoritatively, and that SOA serial numbers are consistent across all nameservers.
Validates MX records, checks SPF policy syntax, looks for a DMARC record, and flags missing DKIM configuration.
Verifies that DNSSEC is enabled, that DNSKEY and DS records exist, and that the chain of trust from root to domain is intact.
Confirms A/AAAA records exist, checks www redirect behaviour, and flags missing IPv6 support.
After any DNS changes, after domain transfers, and at least monthly as routine maintenance. Problems often go unnoticed until they cause an outage or email delivery failure.
If nameservers disagree on the SOA serial number, one server may be serving stale zone data — often caused by a failed zone transfer (AXFR) between primary and secondary nameservers.