RedScore.ai

Free DNS checker

Check DNS health on your domain in about 60 seconds

Delegation, hygiene, email auth records, and related public DNS signals in one pass.

DNS problems cause outages, spoofed mail, and certificate failures. RedScore checks the public DNS posture around your domain from the outside. Go to /lookup, enter your hostname, and get grades plus fix-first guidance.

Scan your domain

Free scan · No signup · Results in ~60 seconds · Opens /lookup

example-corp.com

✓ scan complete · grade D · 4 issues

42/ 100
Grade D

AI summary

DMARC enforcement is missing, which leaves spoofing open. SPF is too permissive. Several key web security headers are absent.

FAILDMARC enforcement
FAILSPF policy strength
WARNWeb headers & TLS hardening
WARNCookie secure flag
PASSGoogle Safe Browsing

Why DNS checks matter

Broken DNS shows up before anyone opens your app

Dangling records, weak delegation, and missing email auth are visible to anyone who looks. RedScore surfaces those public DNS gaps so you fix them before deliverability or security reviews stall.

Built for operators

DNS posture inside a full domain scan

One /lookup scan covers DNS plus TLS, headers, exposure, and reputation.

Delegation and hygiene

NS consistency, wildcard signals, and common public DNS misconfigurations.

Email auth records

SPF, DMARC, and related signals tied to the same domain.

DNSSEC validation

Public DNSSEC posture where visible from the outside.

Plain-English fixes

See what failed, why it matters, and what to tackle first.

What you get

DNS grades plus nine other public areas

RedScore returns a 0-100 RedScore with a DNS category grade and a prioritized summary across your full public footprint.

C62DNS & Domain Security
D48Email Security
B75Infrastructure Hygiene
C68Web Application Security
F32Cookie & Privacy Hygiene
D45Technology Fingerprinting
B78Public Exposure
A91Certificate & PKI Health
B82Brand & Domain Reputation
C55Third-Party Risk Surface
63/ 100
Grade C

63 / 100

Grade C

example-corp.com

AI summary

Cookie settings are weak and server headers reveal stack details. Email spoofing is plausible with incomplete SPF and DMARC.

Email auth gaps
Header hardening
Certificate hygiene

What RedScore checks today

Public DNS signals on your domain

  • NS delegation consistency and resilience
  • DNSSEC validation posture
  • SPF and DMARC record presence
  • Wildcard and dangling-record indicators
  • CAA and zone-transfer exposure signals

What this does not replace

This is not authoritative DNS hosting management or an internal resolver audit. It checks public DNS signals visible from the internet.

After the free scan

Claim your domain for full DNS findings

Free scans show grades and safe summaries. Claim the domain to unlock record-level detail, scheduled rescans, and change alerts.

  • Full DNS and email finding detail
  • Scheduled scans and change alerts
  • Track fixes over time on your production domain

FAQ

Common questions

Run a DNS health check on your domain

Free scan · No signup · ~60 seconds

Scan your domain