Domain Tools
DNS Security
DNSSEC, CAA, dangling CNAMEs, wildcard DNS, nameserver hardening and zone transfer tests.
DNS Security Audit
DNSSEC, CAA, nameservers, SPF, DKIM, DMARC, MTA-STS, TLS-RPT and BIMI in one security report.
DNSSEC Checker
DS at the parent, DNSKEYs, DS↔key matching, signature validity and resolver validation.
CAA Checker
Finds the CAA policy that applies (including inherited from parent names) and explains it.
Dangling CNAME Checker
Finds aliases pointing at names that no longer exist - a subdomain takeover risk.
Wildcard DNS Checker
Detects wildcard records that make every sub-name resolve.
Nameserver Security Check
Open recursion, version disclosure, zone transfer (AXFR), redundancy and lame delegation.
Zone Transfer (AXFR) Test
Tests whether any nameserver hands out the whole zone to anyone who asks.
Private IP / DNS Rebinding Check
Flags public names that resolve to private, loopback or reserved addresses.