gratistools.be
Sign in

Domain Health Check

Enter a domain. DNS, email authentication, DNSSEC, IPv6 and HTTPS are checked in one go.

🌐 External lookup: DNS queries go from your browser to Google Public DNS (dns.google). The HTTPS test is done by our server, which fetches the site’s home page.

What is checked

  • Nameservers — at least two, ideally on different networks.
  • DNSSEC — a DS record at the registry and a validated (AD) answer. DNS Belgium supports DNSSEC for all .be names.
  • IPv4 and IPv6 — A and AAAA records for the domain and www.
  • Mail — MX records; an SPF record (one only, ending in -all or ~all); DMARC at _dmarc with its policy; and DKIM keys for the selectors you give (common ones are tried automatically). Without SPF, DKIM and DMARC, your mail is easier to spoof and more likely to land in spam.
  • CAA — which certificate authorities may issue certificates.
  • HTTPS — whether http:// redirects to https://, the redirect chain, and HSTS.