digdns.site
DNS · SSL · Email · in one click

Is your
domain healthy?

Free one-click full check of a domain: DNS, DNSSEC, SSL certificate, HTTPS, email security (SPF, DMARC, DKIM), blocklists and expiry, with a score out of 100 and a list of fixes.

Examples: google.com wikipedia.org github.com

15public resolvers
11blocklists
47DKIM selectors
100score points
Public DNS resolvers
Cloudflare · San Francisco1.1.1.1public resolver
Quad9 · Zurich9.9.9.9public resolver
Drag to spin the globe
15public resolvers on 4 continentsGoogle · Cloudflare · Quad9 · OpenDNS…

Six checks in one

The check combines the essentials of every digdns tool and tells you what to fix first.

DNSRecords

Redundant name servers, IPv4 and IPv6 addresses, and CAA to restrict certificate authorities.

SSLHTTPS

Valid, trusted certificate, covered name, modern TLS, HSTS and automatic redirect to HTTPS.

SPFEmail

SPF, DMARC and DKIM to stop spoofing of your domain and stay out of spam.

SECDNSSEC

Signed DNS answers: protects your visitors against forged addresses.

RBLReputation

Are your server and domain on an anti-spam blocklist?

⏳Expiry

An expired domain takes down the site and email: the check warns you 30 days ahead.

FAQ

What does the health check cover?

In a single check: essential DNS records (NS, A, AAAA, CAA), DNSSEC, the SSL certificate and HTTPS setup (HSTS, redirect), email security (SPF, DMARC, DKIM), whether your server and domain are on anti-spam blocklists, and the domain’s expiry date.

How is the score out of 100 calculated?

HTTPS and the certificate count for 30 points, email security 25, DNS 20, DNSSEC and reputation (blocklists) 10 each, and domain expiry 5. Each missing point appears in the list of fixes, from most to least urgent.

Can I share the result?

Yes: every check has its own address (for example /health/example.com). Copy the link to send it to your host or team, or export the result as JSON or text. The check runs again each time the link is opened.