Skip to content
dnsdon

Domain health

Every check at once: the delegation, DNS records, DNSSEC, propagation, SSL certificate, email authentication and spam blacklists, summarized on one page.

What runs

  • Registrar & Nameserver Check Compare the nameservers set at the registry with what the authoritative servers report, and check each server responds correctly.
  • DNS Record Inspector Look up A, AAAA, MX, TXT, NS, CAA and other records, from a public resolver or straight from the authoritative nameservers.
  • DNSSEC Chain Validator Follow the chain of trust from the parent DS record to the zone's DNSKEY and signatures, and see what validating resolvers conclude.
  • DNS Propagation Checker Compare what public resolvers around the world currently return with the authoritative answer, and see how long cached data will last.
  • SSL Certificate Checker Check whether a site serves HTTPS, when its certificate expires, whether browsers will trust it, and how HTTP traffic is redirected.
  • Email Authentication Checker Check SPF, DKIM and DMARC: the records inboxes use to decide whether your mail is genuine, and whether they are strict enough to stop spoofing.
  • Email Blacklist Check Emails landing in spam? See whether your mail server or domain is on a spam blacklist that mail providers check, why it was listed, and how to get removed.