Is this domain protected from DNS tampering?
Whether DNSSEC is on, and whether CAA limits who can issue certificates.
Try cloudflare.com,
github.com. One domain in, one answer out. No account needed.
Whether DNSSEC is on, and whether CAA limits who can issue certificates.