Free DNS check

Free DNS and email security check

Check any domain's public DNS for the problems that let others spoof your email or hijack your traffic. 3 checks a day without signing up.

3 of 3 free checks left today · No sign-up. Public DNS data only.

Free account

All DNS checks for the domains you verify

Sign in with Google and prove the domain is yours with a DNS record: every DNS check, 5 a day, with history. Web penetration testing is in the paid account.

DNSSEC

Whether your DNS answers are signed and the chain of trust holds.
About DNSSEC

CAA

Which certificate authorities may issue certificates for your domain.

DANE / TLSA

Whether mail servers publish the certificate senders should expect.

STARTTLS

Whether your mail servers encrypt email in transit with a valid certificate.

Dangling subdomains

Subdomains pointing at services you no longer use, which others could take over.

Open resolvers

Name servers that answer anyone, which attackers abuse for amplification.

Get the advanced checks free