DNS Health Checker.

Check your domain's DNS health for free.

Find DNS configuration problems and keep an eye on your domain's health. Every finding is explained in plain language, with a suggested fix.

A check takes a few seconds. We only ask DNS servers questions; we never connect to the website itself.

Four checks

Resolution

Does the name lead to an address? We follow aliases, catch loops and dead ends, and flag addresses that cannot be reached from the internet.

Nameservers

Do all of the domain's nameservers answer, over UDP and TCP, with the same data? We compare them with what the parent zone says.

DNSSEC

If the domain is signed, does the chain of signatures hold from the DNS root down to the domain? Not signed is fine; broken is not.

CAA

Which certificate authorities may issue certificates for the domain, and are the records readable?

What you get

A report

Each finding with what we found, why it matters and how to fix it, plus the raw records behind it.

Daily re-checks

The report is re-checked every day and keeps a history of changes, so you can see when something broke.

A status badge

Optional. It shows the domain's latest status on your site and keeps the daily re-checks going.

Good to know

Optional features are not failures: a domain without DNSSEC or CAA records can still be healthy. Results describe how the domain's DNS was configured at the time of the check; they are not a statement that a website is safe or always available.

How the checks work · Browse reports