DNS check
Runs in every scan · 5 checks
Your domain's records decide where visitors and email go. See that they're set up safely, in plain English.
What we check
Part of every Quick Scan, alongside the other checks.
Switched on, and validating correctly when it is.
Which certificate providers may issue for you, with a contact for reports.
More than one, all real, and not all with a single provider.
Your address and its www twin don't point at a service that's gone.
Whether made-up subdomain names answer too.
Why it matters
Records that point where you mean them to.
No old records left for someone else to pick up.
Sound name servers keep your site and email reachable.
What a finding looks like
D1 · dns-health
example.com CAA (no record)How to fix it
Your report has the exact fix for your site, ready to forward to whoever looks after it.
Ask your registrar or DNS provider to switch on DNSSEC. At many it's a single setting.
Add a CAA record naming the certificate provider you use, with a contact address.
Delete records for services you've stopped using, such as an old shop, landing page or app.
Keep at least two name servers. Most DNS providers give you more by default.
example.com. CAA 0 issue "letsencrypt.org"A record that still points your name at a cloud service you've stopped using. If someone else claims that service name, they can show their own content on your address. Deleting the old record closes it for good.
DNSSEC signs your DNS answers so they can't be quietly changed on the way. It's worth turning on when your provider makes it easy. Many well-run domains don't use it yet, so the report treats it as a good next step, not an emergency.
It names the certificate providers allowed to issue certificates for your domain. Any other provider must refuse. Add an iodef line and they can tell you when someone tries.
Not by itself. It makes every made-up subdomain answer, which can hide typos and give look-alike pages more room. Use specific records where you can.
Keep exploring
Also useful: What we check Sample report Pricing For developers
One report, a fix for every finding