What this tool checks
- NS — name server redundancy and diversity.
- SOA — zone presence and consistency.
- A / AAAA — IPv4 and IPv6 addresses.
- MX — inbound mail servers.
- SPF — authorised sender policy.
- DMARC — protection against spoofing.
- CAA — control over certificate authorities.
- DNSSEC — cryptographic integrity of answers.