DNS Health

Check a domain’s DNS health.

We ask the parent zone and each of the domain’s nameservers directly, then flag anything that is broken, risky, or worth knowing.

Enter a domain. A subdomain such as www checks the zone it belongs to. Nothing connects to the domain’s mail servers. If CAA records limit certificate issuers, the website’s certificate is fetched so the issuer can be compared.