EdgeDNS Guides
Long-form tutorials on DNS, email security, and MCP integration — plus an auto-generated guide for every one of the 110+ EdgeDNS API endpoints. Each guide explains why it matters and how to call it from Claude, ChatGPT, or Gemini.
Featured guides
Hand-written tutorials covering the most common DNS, email security, and AI integration tasks.
How to Check Your DMARC Record
If you have ever wondered why some emails land in the inbox and others end up in spam, you have run into the world of email authentication. DMARC is the rulebook that ties it all together. This guide explains it without jargon, shows you how to check yours, and walks you through rolling it out safely.
Read guide →
DNS Propagation Explained: Why Changes Aren't Instant
Ever changed a DNS record and then refreshed your browser, hoping to see the change instantly — but it took hours? That's DNS propagation. This guide explains why it happens, how to check on it, and how to make it as fast as possible next time.
Read guide →
SPF Record Setup Guide: From Zero to Protected
If you send any email at all from a domain you own, you should have an SPF record. This guide explains what SPF is in plain language, walks you through setting one up step by step, and warns you about the gotchas before you hit them.
Read guide →
MCP for DNS: How to Talk to Your Domains
Imagine asking Claude, "hey, is my email setup working correctly?" — and getting a real, accurate answer back, instantly. That's what the EdgeDNS MCP server does. This guide explains what MCP is, why it's a big deal, and how to connect it in about a minute.
Read guide →
How to Detect Subdomain Takeover (Before an Attacker Does)
A subdomain takeover is the vulnerability almost every big brand has at some point: a forgotten CNAME points at a deprovisioned SaaS service, an attacker registers that service's free name, and suddenly they're serving content at a real subdomain of the real brand — with a valid HTTPS certificate. This guide shows you how to find these before anyone else does. Start free on EdgeDNS — 200 requests/month, no credit card required.
Read guide →
Can Someone Spoof Emails From My Domain? (A Practical Guide)
If you send email from your own domain, "can someone spoof me?" is the single most important question to answer honestly — and most security checkers fudge it. This guide explains why a flat average of SPF, DKIM, and DMARC grades hides the real risk, what a true spoofability score looks like, and how to measure yours without the hand-waving. Start free on EdgeDNS — 200 requests/month, no credit card required.
Read guide →
How to Find Fake Domains Impersonating Your Brand
Somebody registered `acme-support.com` yesterday. Somebody else registered `acmе.com` — with a Cyrillic `е` that looks identical to the Latin one in every major font. Both are shadow domains: lookalikes of your brand, registered days or weeks before the phishing campaign that will use them. This guide shows you how to find them before the campaign launches. Start free on EdgeDNS — 200 requests/month, no credit card required.
Read guide →
DNSSEC cryptographic verification: what we actually verify
DNSSEC is supposed to give you a cryptographic guarantee that a DNS answer is authentic. Most tools that claim to "check DNSSEC" don't actually verify any cryptography — they trust the recursive resolver's AD bit and call it a day. EdgeDNS reconstructs the canonical signed RRset and runs the math locally. Here's what that means, why the difference matters, and how to read what comes back.
Read guide →
A single-call DNS health audit
Auditing the health of a DNS zone usually means orchestrating seven separate calls — DNSSEC, CAA, AXFR, NSEC3, open-resolver, SOA, subdomain-exposure — then aggregating the results yourself. The zone-hygiene composite endpoint runs nine independent DNS health checks in one request and returns a weighted score with a letter grade. Here's the walkthrough, with the standards each check is grounded in.
Read guide →
Fast-flux vs CDN: how to tell them apart
Fast-flux DNS — the IP-rotation technique used by botnets to keep phishing and malware infrastructure online — looks identical to a CDN at the surface. Both rotate IPs, both use short TTLs, both serve different addresses to different users. The signal that actually separates them is ASN diversity. This guide walks through the detection model, why naive checks produce false positives, and how the EdgeDNS fast-flux endpoint resolves the ambiguity.
Read guide →
Deep Technical SEO Audits: Beyond the 200 OK
Modern technical SEO audits have outgrown the checklist most teams still run. A 200 OK is not a successful audit. Titles truncate in pixels, not characters. Hreflang quietly breaks the moment one return-link goes missing. Robots.txt now means something different to Googlebot, GPTBot, and ClaudeBot. This guide walks through the deeper checks that distinguish a real technical audit from a surface scan — and shows the one-call API workflow that runs them all.
Read guide →
SPF Void Lookups: Why Your SPF Quietly Fails at Gmail
Everyone in email knows about the 10-DNS-lookup limit on SPF records. Almost nobody knows there is a second limit — two void lookups — and that Google and Microsoft enforce it. If your SPF record points at an include that resolves to NXDOMAIN, your authentication is silently failing at the biggest mailbox providers in the world. This guide explains the void-lookup limit, shows you how to detect it, and walks through the fix.
Read guide →
DMARC External Reporting: How to Audit Your rua= Destinations
If your DMARC `rua=` tag sends reports to a third-party vendor, that vendor has to publish a special authorization record on their side — otherwise mailbox providers silently drop your reports. Most teams do not know this exists. Here is what RFC 7489 §7.1 actually requires, why it gets missed, and how to audit your destinations programmatically.
Read guide →
Browse 110 endpoint guides by category
Every public EdgeDNS endpoint has a dedicated guide explaining what it does, why it matters, and how to call it from REST or from your AI assistant via MCP.
DNS Records
Query, validate, and monitor DNS records
Email Security
Protect email deliverability, prevent spoofing, and validate addresses
Website Security
Assess SSL certificates, security headers, and your site's attack surface
SEO & Content
Optimize search rankings, audit content quality, and track authority
Tech Stack
Discover the technologies, frameworks, and infrastructure behind any website
Site Performance
Analyze page speed, caching, compression, and delivery optimization
Threat Intelligence
Detect malicious domains, suspicious IPs, and emerging threats
Network & IP
IP geolocation, ASN lookups, and network diagnostics
Compliance
WCAG accessibility, GDPR privacy, and regulatory compliance audits
Domain Reports
Comprehensive domain intelligence, health checks, and competitive analysis
Put Knowledge Into Action
Every guide is backed by real API endpoints you can test right now. Try our free tools or connect Claude, ChatGPT, or Gemini via MCP.