Free, no sign-up
A complete health check for your domain
One domain name, one score out of 100, and the exact list of what is fine, what deserves a look and what is broken — with the record to publish in order to fix it.
The tools, one by one
Every check in the report also exists as a standalone tool, with the full detail.
DNS and domain
DNS lookup
Every record type, with its TTL and the DNSSEC validation state.
Propagation
The same question asked of five public resolvers and of your authoritative servers.
Reverse lookup
From an IP address to its name, and a check that the round trip agrees.
Domain record
Availability, registrar, dates and locks, read from the registry RDAP.
Punycode / IDN
Conversion both ways, with detection of look-alike characters.
Mail server
MX, reverse DNS, FCrDNS, open ports, SMTP banner and the certificate served.
SPF
Analysis and generation, with the real count of DNS lookups triggered.
DKIM
Public key readout, length, algorithm and detection of revoked keys.
DMARC
Policy readout, guided generation and validation of report recipients.
MTA-STS
Policy, TXT record and a check that the policy is actually being served.
Email headers
Path taken, delays, authentication results. Analysed in your browser.