Arsenal / Domain Health Check
How healthy is your domain?
Enter a domain or URL. We pull its full DNS picture — A, AAAA, MX, NS, TXT, SPF, DMARC, DNSSEC and CAA — grade it for spoofing and security risk, and tell you exactly what to fix.
Your domain is one of many you depend on.
We continuously monitor DNS, email authentication and certificate exposure across your whole estate — and fix what's weak. Stop checking one domain at a time.
Read-only DNS lookups over public resolvers — we only query what is already public. DKIM uses per-selector records that cannot be enumerated without the selector name, so it is not shown here. Guidance only.