DNS Health Checker
Audit the DNS setup of any domain and get a letter grade with specific fix hints for each failing check.
Related Tools
Query A, AAAA, MX, TXT, CNAME, NS, SOA, CAA records.
Check if a domain has DNSSEC enabled and verify the full chain-of-trust from root to authoritative nameserver.
Look up SRV records to find service endpoints for SIP, XMPP, Matrix, Kubernetes and more.
About this tool
DNS health goes beyond whether a domain resolves. NS redundancy ensures your domain stays reachable if one nameserver fails - you need at least two. SPF and DMARC are email authentication records that prevent other servers from forging mail from your domain. CAA restricts which Certificate Authorities can issue TLS certificates. DNSSEC cryptographically signs DNS responses to prevent cache poisoning and spoofing.
The grading weights critical infrastructure (A record, NS) and email security (SPF, DMARC) most heavily since they directly impact availability and deliverability. AAAA and DNSSEC are recommended but not penalised as heavily.
