Domain Health Report

One graded report for the whole question "is my domain and email set up right?" Paste a domain and get a single A to F grade across DNS delegation, email authentication, DNSSEC, blacklist reputation and SSL, with a shareable permalink instead of ten separate lookups.

What the report grades

  • Email authentication: SPF, DKIM, DMARC and MX, the records that decide whether your mail is trusted or spoofable.
  • DNS delegation: whether the parent zone and your nameservers agree, and whether every nameserver answers authoritatively.
  • SSL / TLS certificate: whether the served certificate is valid, trusted, matches the host, and is not about to expire.
  • DNSSEC: whether the chain of trust actually validates, not just whether a DS record exists.
  • Blacklist and reputation: whether your sending IPs are listed on the major DNS blocklists.

How the grade is calculated

Each section earns a weighted sub-score: email authentication 35, DNS delegation 20, SSL 20, DNSSEC 15, and blacklist reputation 10. A section that genuinely cannot be checked, or does not apply, is left out of the math rather than counted against you. A blacklisted sender, a broken delegation, a broken DNSSEC chain, or an invalid certificate each cap the overall grade low, because any one of them breaks real traffic. A domain that is not registered is reported as such rather than graded F.

Need to dig into one area? Use the dedicated DNS Lookup, Nameserver Trace, SSL Checker and email diagnostics tools.