better DNS check