DNS Check & Analysis
The nameservers provide the DNS information for your domain. The check verifies whether authoritative nameservers are present and a basic DNS configuration has been set up.
A-Records connect your domain to an IPv4 address, while AAAA-Records do this with an IPv6 address. Among other things, they determine the server address at which your website can be reached.
MX records specify which mail servers are allowed to accept emails for your domain. Incorrect entries can result in incoming messages not being delivered correctly.
SPF specifies which systems are allowed to send emails for your domain. DMARC, on the other hand, determines how recipients should handle messages that fail certain authentication checks.
The SOA record contains basic information about the DNS zone. TTL values determine how long DNS responses are cached before they are queried again.
Using CAA records, it is possible to specify which certification authorities are allowed to issue SSL/TLS certificates for a domain. A CAA record is optional, which is why its absence does not automatically represent an error.
DNS = Domain Name System
Simply put, DNS is the address book of the internet. It translates domains like curiaweb.ch into the technical information that browsers, mail servers, and other services require.
When a domain is accessed, the responsible DNS servers are queried and the appropriate record is returned.
DNS also plays a central role in email communication. MX specifies the responsible mail server, while SPF, DKIM, and DMARC help authenticate senders and make domain abuse more difficult.
A clean configuration forms the technical basis for reliable and secure email communication. For additional protection against spam and other email threats, a professional email security solution like SpamExperts be used.
DNS Lookup
Check specific DNS records of your domain and display the currently published values.
A DNS check verifies a domain's DNS settings. This can include analyzing nameservers, IP addresses, mail servers, and various DNS records, among other things. Our DNS Health Check provides a clear overview showing which settings were found and where potential issues or notices exist.
The DNS check analyzes the records, among other things. NS, SOA, A, AAAA, MX, SPF, DMARC and CAA. The results are displayed as „OK”, „Notice”, „Error” or „Information”.
Not every missing record is automatically problematic. Which DNS entries are needed depends on the respective domain's usage.
An A record connects a hostname with an IPv4 address. This can be used, for example, to define the server IP address at which a website can be accessed.
For IPv6, a instead AAAA record used.
MX stands for „Mail Exchange”. MX records determine which mail servers should accept emails for a domain.
Multiple MX records with different priorities can be set up. A lower priority number indicates a higher preference.
SPF defines which systems are allowed to send emails for a specific domain. DKIM appends a cryptographic signature to outgoing messages. DMARC builds on SPF and DKIM and allows domain owners to publish policies for the handling of insufficiently authenticated messages.
Together, these methods form important components of modern email authentication.
DKIM records are usually located under a so-called Selector, for example selector1._domainkey.example.ch. Since this selector is not universally defined, it cannot be reliably determined based solely on the domain name.
It would therefore be unserious to simply display „DKIM not present“ in the automatic DNS health check.
The abbreviation TTL stands for „Time to Live” and specifies how long a DNS response may be cached by resolvers.
When a DNS record is changed, the old value may still be served temporarily until the corresponding cache entries expire.
No, while an AAAA record is used for IPv6, not every domain necessarily needs to be reachable via IPv6.
CAA is also optional. CAA can be used to specify which certificate authorities are allowed to issue certificates for a domain. Therefore, our checker intentionally shows missing AAAA and CAA records just for your information and not as an error.
DNS changes are not necessarily immediately visible everywhere. Previously cached DNS responses may still be used for a certain period of time, depending on their TTL.
Faulty records, incorrect nameservers, or issues with the respective hosting or email service can also be the cause.
Yes, incorrect MX, SPF, DKIM, or DMARC configurations can affect email traffic or authentication.
However, in case of delivery problems, not only the DNS should be considered. Also the IP and domain reputation, Blacklists, the mail server configuration and the sending behavior can play a role.