Nameservers and parent
Anyone looking for your domain asks the registry first and then your nameservers. The report shows whether that chain is broken, whether the nameservers answer and whether they agree with each other.
Check your domain's DNS health: nameservers, SOA, MX, www, SPF, DMARC and DNSSEC in one report, with every item explained. You can also look up records and watch whether a change has propagated.
DNS is the phone book that connects a domain to an IP address and other services. To troubleshoot, you only need to know what each record does.
Anyone looking for your domain asks the registry first and then your nameservers. The report shows whether that chain is broken, whether the nameservers answer and whether they agree with each other.
The zone's authority record. If the serial number differs between servers, your change has not reached some of them; the timing values decide how often servers refresh each other.
The three records that keep your email out of spam and stop others forging mail in your name. The report checks that each exists and is written correctly.
Points the domain at an IPv4 (A) or IPv6 (AAAA) address. It decides which server your site runs on.
Decides which server receives your email. A wrong MX is the most common reason mail does not arrive.
Lists the nameservers that manage the domain's DNS. This is what changes when you move to a host or Cloudflare.
Holds SPF, DKIM, DMARC and domain verification records. Critical for email deliverability.
Aliases one name to another (for example www to the main domain).
SOA holds the zone's authority data; CAA limits which authorities may issue SSL certificates.
Update the record in your DNS panel. The record's TTL decides how long caches keep the old answer.
In the propagation tab, query the same record on four resolvers. If all agree, the change has spread.
A nameserver change can take from a few hours up to 48 hours, depending on the registry update.
A DNS lookup asks which IP address, mail server and other services a domain is connected to. Your browser does this in the background every time it opens a site. With this tool you can ask the same question yourself and see the answer.
It checks the nameserver delegation at the registry, whether your nameservers answer and are authoritative, the SOA values, MX and www records, the SPF/DKIM/DMARC email records and the DNSSEC/CAA status. Each item says what it means and how to fix it.
No. An error (red) is a problem that can break things and should be fixed. A warning (yellow) does not stop anything from working but can be improved, such as a DMARC policy of "none". Info (blue) items are for your information only.
Resolvers cache answers for the TTL. If the old TTL was long, some resolvers keep returning the old value until it runs out.
Cloudflare, Google, Alibaba DNS and DNS.SB. These are public resolvers; they do not represent every ISP worldwide, but they are a reliable sign that propagation is largely done.
The MX with the lowest priority number is tried first. Records must match exactly what your email provider gave you.
Both are TXT records. SPF lives on the domain itself, DMARC on _dmarc.yourdomain.com.
That record type is not defined. If the domain does not exist at all you will see NXDOMAIN; check that it is registered and its nameservers are correct.
With FiberServer your domain and hosting live in one panel; edit your DNS records in a few clicks.
More free tools
Open a support ticket for hosting, server and domain topics and reach our team at any time. For sales and business quotes you can also call us.