No scan yet
Enter a domain in the box above and run a scan to see its full health report — score, category breakdown, and remediation steps.
DNS Configuration
Email Authentication
SSL / TLS Certificate
Security Headers
Domain Registration
Network & Hosting
Connectivity
Blacklist & Reputation
Free domain health report & checker
The ShowDNS Domain Health Report runs a complete, read-only audit of any domain and grades it from A+ to F. In a single scan it checks DNS configuration (A, AAAA, MX, NS, TXT and CAA records), email authentication (SPF, DKIM, DMARC, MTA-STS, TLS-RPT and BIMI), the SSL/TLS certificate, HTTP security headers, domain registration and DNSSEC, performance (TTFB, HTTP/2, HTTP/3, CDN and compression), blacklist reputation, and redirects and canonicalization — then highlights the issues that matter most and how to fix them. It is free, needs no signup, and you can export the full report as a PDF.
Domain Health Report — Frequently Asked Questions
Yes. The domain health report is completely free to use, requires no signup, and you can run it on any public domain as many times as you need.
It covers 8 areas: DNS configuration (A, AAAA, MX, NS, TXT, CAA), email authentication (SPF, DKIM, DMARC, MTA-STS, TLS-RPT, BIMI), the SSL/TLS certificate, HTTP security headers, domain registration and DNSSEC, performance (TTFB, HTTP/2, HTTP/3, CDN, compression), blacklist and reputation, and redirects and canonicalization.
Every check is scored as pass, warning, or fail. Passing checks earn full points, warnings earn half, and failures earn none. The combined score maps to a letter grade from A+ (95+) down to F (below 60), giving you a single measure of domain health.
Yes. The Email Authentication section validates SPF, DKIM and DMARC records, and also checks DMARC alignment, MTA-STS, TLS-RPT and BIMI so you can confirm your domain is protected against spoofing and has strong deliverability.
Yes. After running a report, click “Export PDF” to download a print-ready report sheet that includes the overall grade, a summary of passing, warning and failing checks, and the detailed findings for every category.
No. The domain health checker is completely read-only. It only performs standard DNS, HTTP and TLS lookups to evaluate the domain and never modifies any records or settings.