# Domain Health Report

One report for a domain: DNS (nameservers, SOA, DNSSEC, CAA), email authentication (MX, SPF, DMARC, MTA-STS), HTTPS (certificate, redirects) and security headers, each with a fix.

Canonical: https://tamperbox.dev/domain-health

Reviewed: 2026-10-14

## Capabilities and processing

Enter a domain. Our server checks DNS (nameservers, SOA, DNSSEC, CAA, IPv6), email (MX, SPF, DMARC, MTA-STS, TLS reporting), HTTPS (certificate, protocol, redirects) and security headers.

The report opens with one card per area and lists every check under it, worst first, each with a link to the tool that explains it in full.

## Example workflow

The sample domain has signed DNS and a working site, but DMARC is still in monitoring and several security headers are missing.

## Limits and interpretation

Certificate details require the configured TLS probe. If it is unavailable, certificate inspection is marked not checked; HTTPS status and headers can still be inspected.

When DNSSEC is broken, validating resolvers refuse the zone, so the report stops there and says so. A pasted address is reduced to its host. Nothing is stored.

## Related tools

[All tools](https://tamperbox.dev/) · [Privacy](https://tamperbox.dev/privacy)