检查DNS记录 A

Authoritative DNS servers match NS records
All nameservers respond as expected.

All authoritative DNS servers must have the same SOA
SOA records match across NS servers.

Zone should not be transferable via AXFR
AXFR zone transfers are disabled.

Recommended number of NS records
Between 2 and 7 NS records.

GLUE records are correctly configured
NS IPs resolve properly for in-zone NS.

DNSSEC protection
Domain has valid RRSIG DNSSEC record.