DNS security check
DNS security check
DNS is the foundation everything else depends on: if it's misconfigured, email authentication and certificate validation can fail in ways that are hard to diagnose from the symptoms alone.
$9.00 one-time · no subscription
Apex resolution
Wraith confirms your domain’s apex (the bare domain, without a subdomain) resolves correctly and consistently, and flags configurations — like a bare domain with no A or AAAA record — that leave visitors unable to reach your site at all.
Mail-exchanger (MX) records
Your MX records tell the internet which servers are allowed to receive mail for your domain. Wraith checks that they exist, resolve, and are consistent — a common source of silently lost email when a domain migrates providers.
Why DNS comes first
Email authentication (SPF, DKIM, DMARC) and TLS certificate validation both depend on DNS being correct. Wraith checks DNS first, then builds the rest of the report — including email authentication — on top of it, the same order a real mail server or browser would evaluate your domain in.