DNS Diagnostics

DNS Diagnostics offers 3 free tools with no sign-up to check a domain's DNS consistency. Compare two DNS resolvers shows whether public resolvers already answer the same way. Check DNSSEC signature indicates whether a domain is signed, unsigned or broken. MX records helps compose an MX list with its priorities. These checks matter to webmasters and technical teams before a launch or DNS change.

The choice depends on the question. If you suspect incomplete propagation, use Compare two DNS resolvers. To know whether DNSSEC is in place or problematic, choose Check DNSSEC signature. If you are preparing or reviewing an email setup, MX records helps order priorities. Start with the symptom, then complete the picture with the other checks.

How to use

  1. If you suspect incomplete propagation, run Compare two DNS resolvers and note response differences for the same name.
  2. To check zone security, use Check DNSSEC signature and read whether the domain is signed, unsigned or broken.
  3. If email is involved, open MX records to compose or review the MX list with its priorities.
  4. Finish by returning to the check that matches the symptom: comparison, signature or priorities, without changing several points at once.

Frequently asked questions

Why compare two DNS resolvers?

It shows whether public resolvers already answer the same way for your domain. A difference can explain unexpected behavior during propagation. The tool is free, requires no sign-up and focuses on that comparison.

What is the DNSSEC check for?

Check DNSSEC signature tells you whether your domain is signed, unsigned, or broken and invisible. This reading helps spot an incomplete configuration. It complements the other DNS diagnostics on this page.

What should I do if Compare two DNS resolvers shows a difference?

Note the diverging answers and wait before concluding there is an error. Check DNSSEC signature to rule out a trust issue, then review MX records if email is affected. This helps separate propagation from configuration.

Is Check DNSSEC signature enough to validate a domain?

No. This check indicates whether the signature is in place, absent or problematic. It complements Compare two DNS resolvers and MX records, but does not replace a check of the records themselves.

Tools in the same category