Domain Health Inspector
Audit DNS and registration controls, then compare Cloudflare and Google resolver answers for propagation and DNSSEC differences.
DNS / MAIL / DELEGATION
Inspect a domain
Querying DNS and RDAP control points…
Inspection result
- Critical
- 0
- Warnings
- 0
- Passed
- 0
- Advisory
- 0
Resolver cross-check
Cloudflare ↔ Google
- Matched
- 0
- Different
- 0
- DNSSEC
- 0
- Unavailable
- 0
Propagation watch
Follow one record for 24 hours
Capture a baseline now, then compare Cloudflare and Google every five minutes. The shareable timeline remains available for seven days after monitoring ends.
Incident timeline
- Samples
- 0
- Changes
- 0
- Next sample
- —
- Monitoring ends
- —
Control findings
Failures first. Each result includes the observed evidence, the operational consequence, and its governing specification.
Raw DNS and registration evidence
Registration
- RDAP lookup
- Discovery path
- Registrar
- Registered
- Expires
- Last changed
- Status
- Nameservers
Registration data is unavailable for this TLD, or the RDAP lookup failed.
DNS records
- A (IPv4)
- AAAA (IPv6)
- CNAME
- MX (mail)
- NS (nameservers)
- DS (DNSSEC)
- SPF / other TXT
- DMARC
- MTA-STS
- CAA
The inspector compares Cloudflare and Google DNS-over-HTTPS answers, requests Google results without client-subnet localization, and discovers registration data through RDAP. It never connects to the inspected domain or scans ports. One-time inspection results are not stored; when you explicitly start a watch, its public DNS observations are retained for up to eight days and then automatically removed. “Advisory” means optional hardening, not a broken configuration. Findings reference RFC 2182, RFC 4035, RFC 7208, RFC 9989, and related standards.