; dns health
DNS Health & Diagnostics
Full domain health analysis — SPF, DKIM, DMARC, MX routing, TTL hygiene, nameserver consistency, and actionable fix suggestions.
Enter a domain above to run a full DNS health analysis.
Checks: A · AAAA · MX · SPF · DMARC · NS · SOA · CAA
; email security guide
SPF (Sender Policy Framework) is a TXT record that lists which mail servers are authorized to send email on behalf of your domain. Without it, spammers can forge your domain in the From header.
DMARC builds on SPF and DKIM to tell receiving mail servers what to do when a message fails authentication. A policy of p=reject gives the strongest protection.
CAA records restrict which Certificate Authorities can issue SSL/TLS certificates for your domain. They prevent unauthorized certificate issuance.
TTL (Time to Live) controls how long resolvers cache your DNS records. Low TTLs (300s) allow faster changes; high TTLs (86400s) reduce DNS query load but slow propagation.