Domain Intelligence
Domain expiration monitoring, RDAP lookups, DNS security, and domain health tracking
37 articles
Catching DNS Hijacks Without Crying Wolf
Most uptime monitors check whether a site responds. Fewer check whether the site responding is actually yours. Here's the simple pattern we use to detect DNS hijacks without alerting on every legitimate record change.
Free CAA Record Check — Verify Certificate Authority Restrictions
Check CAA records to see which CAs can issue SSL certificates.
Free DMARC Checker — Check Your Domain's Email Policy
Check if your domain has a DMARC policy to prevent impersonation.
Free SPF Record Checker — Verify Your Email Authentication
Check if your domain has a valid SPF record to prevent email spoofing.
Free TXT Record Lookup — Check TXT Records for Any Domain
Look up TXT records to check SPF, verification, and more.
Free Nameserver Lookup — Find NS Records for Any Domain
Look up NS records to find a domain's authoritative nameservers.
Free CNAME Lookup Tool — Check CNAME Records for Any Domain
Look up CNAME records to see where a domain is aliased.
Free MX Record Lookup — Find Mail Servers for Any Domain
Look up MX records to find any domain's mail servers.
Free A Record Lookup — Find the IP Address of Any Domain
Look up A records to find any domain's IPv4 address.
DNS Propagation: Why Your Changes Take Time and How to Check
Why DNS changes aren't instant, and how to check propagation.
SPF, DKIM, and DMARC: Protect Your Domain from Email Spoofing
Set up email authentication to stop spoofing and impersonation.
How to Check DNS Records for Any Domain (3 Free Methods)
Three free ways to look up DNS records for any domain.
DNS Record Types Explained: A, AAAA, MX, CNAME, TXT, NS, SOA, CAA
Every DNS record type, what it does, and when you need it.
DNSSEC and Your Domain Portfolio: A Practical Implementation Guide
Ready to enable DNSSEC across multiple domains? Here's the step-by-step guide to doing it right.
Monitoring DNSSEC: Why Set-and-Forget Doesn't Work
You enabled DNSSEC six months ago. Is it still working? Here's why ongoing monitoring is essential.
Is DNSSEC Worth the Complexity? A Balanced Analysis
DNSSEC adds security but also operational risk. Here's an honest assessment of when it makes sense and when it doesn't.
DNSSEC Rollover Gone Wrong: Lessons from High-Profile Failures
When NASA, Slack, and major TLDs got DNSSEC wrong, everyone noticed. Here's what happened and what we can learn.
The Most Common DNSSEC Misconfigurations (And How to Detect Them)
DNSSEC is live but your site is unreachable. Here's what went wrong and how to find it.
DNSSEC Explained: What It Is and Why Your Domain Needs It
DNS was designed when the internet was trusted. DNSSEC adds the security DNS never had. Here's what you need to know.
Building a Domain Health Checklist: Expiry, SSL, DNS, and Beyond
A domain can fail in a dozen different ways. Here's the complete checklist for keeping your domains healthy.
Domain Monitoring vs. Registrar Reminders: Why You Need Both
Registrar emails aren't enough. Here's why dedicated domain monitoring catches what your registrar misses.
The True Cost of a Forgotten Domain Renewal
A $15 renewal becomes a $15,000 problem. Here's the real math behind domain expiration disasters.
From WHOIS to RDAP: How Modern Domain Monitoring Works
WHOIS is dying. RDAP is the future. Here's what changed and why it matters for monitoring your domains.