Resolution
Where the domain points and who answers for it.
- A, AAAA, CNAME, MX, NS, TXT, CAA
- DNSSEC signals
- Cache lifetimes
Domain health, from public evidence
See exactly how any domain is set up — and know when it changes.
Domain Detective reads the public records behind a domain — DNS, HTTPS and its certificate, security headers, email protection and registration — and shows you the evidence, not a score.
No account needed: 1 free check a day from the website. A free account gives you 3 a day.
See a sample report · Create a free account (no card needed)
your-business.exampleChecked just now
HTTPS certificateValid · 64 days left
DMARC policyMonitoring only
SPF recordPublished
Nameservers3 · all answering
Strict-Transport-SecurityMissing
RegistrationExpires in 11 months
What a check covers
Four views of a domain, in one place
Every finding shows where it came from and when it was seen. If a source can't be reached, we say so — we never count it as a pass.
Web trust
Whether HTTPS works and what the site tells browsers.
- Certificate, issuer and expiry
- Redirect path
- Security headers
Mail protection
Which senders are allowed and how forged mail is handled.
- SPF and DMARC
- MTA-STS and TLS reporting
- DKIM for selectors you give
Registration
Who the domain is registered through and when it expires.
- Registrar and status
- Key dates
- Registry nameservers
Monitoring
Know when something changes — before it costs you
Paid plans check your domains on a schedule, keep the history, and tell you what changed: the previous value, the new value and when it was seen.
- DNS, certificate, header and email-policy changes
- Certificate and registration expiry warnings
- Website outages, confirmed before we alert you
- Alerts by email or in the app, with quiet hours and daily summaries
Website unreachable over HTTPS
Today 06:42 · confirmed by a second check
Website responding normally again
Today 06:51
MX records changed
Yesterday 14:05 · 2 added, 1 removed
Certificate expires in 14 days
Mon 09:00
How we work
Evidence first, and a light touch
Public records only
We read public DNS, registration records and what a website serves to any visitor. We never scan ports, guess passwords or crawl beyond the page we check.
No made-up scores
You see what was observed, where it came from and when. "Couldn't check" stays distinct from "failed" and from "fine".
Any public domain
Check your own domains, your suppliers' or your customers'. Monitoring doesn't need access to your DNS or hosting.
Try it on your own domain
Create a free account to run up to 3 checks a day. Upgrade when you want history, monitoring and alerts.