Domain and DNS Checks

CAA records for a domain (walking up to parent names): which CAs may issue certificates, wildcard rules and reporting contacts.

A, AAAA, NS, MX, TXT and CAA records of a domain in one call, with TTLs and whether it exists.

DNSSEC status of a domain: DS record at the parent, DNSKEY algorithms, and whether the resolver validated the answer.

Split a domain or URL host into labels, registrable domain and subdomain; convert punycode and flag lookalike traits.

Registration facts for a domain from RDAP: registrar, created, expires, status and nameservers, with age and expiry flags.

Grade a domain's email authentication: SPF and DMARC records parsed, policy strength, and spoofing exposure.

Email address screen: syntax, whether its domain accepts mail (MX), role account and known disposable domain flags.

Mail servers of a domain by priority, whether each resolves to an address, and null-MX or implicit-MX handling.

Nameserver health of a domain: count, provider diversity, whether each nameserver resolves, and the SOA serial.