Secure Networks DnsCHK domain DNS health checker

Is your domain's DNS set up correctly?

Enter a domain and get back a plain-English report on its nameserver delegation, DNSSEC, and other security settings - checked directly against live DNS, with a real, self-hosted validating resolver, not a third party's.

CAPTCHA - enter the digits shown in the image

Delegation

Nameserver count, redundancy, and whether your registrar and your own DNS agree.

SOA

Whether your zone's refresh/retry/expire timers are set to sane values.

DNSSEC

Whether your domain is signed, and whether that signature actually validates.

CAA / AXFR

Which certificate authorities may issue for you, and whether your zone data leaks.

Email basics

A quick MX/SPF/DMARC summary - see MailCHK for a deep email authentication check.