Domain health report.
One answer for a domain's DNS, email, certificate and renewal.
Type a domain and nmspc checks everything it can see from outside, then says in plain words what to fix and how. Each report has its own link to share.
What it checks
- Registration
- Expiry date, registrar and registry status, straight from the registry over RDAP or WHOIS.
- Nameservers
- Whether they answer, and whether they match what the registry lists.
- Whether anyone can send mail that looks like it's from the domain, and the SPF and DMARC records that stop it.
- Certificate
- Whether browsers trust it, the names it covers and when it runs out.
- Delegation
- A full Zonemaster test of every nameserver, glue, SOA and DNSSEC, with what big DNS hosts do by design left out.
Reports are kept for a day, so opening a shared link runs nothing new. Delegation tests by Zonemaster, from Internetstiftelsen and AFNIC.