Skip to content
DI
dummyipsum.com

Domain Health Checker

Audit the DNS and email trust records that affect deliverability, security and domain reputation.

Optional. Leave it empty and we will probe common selectors automatically (default, google, selector1...).

What is checked

The checker reads public DNS records and reports whether the domain has mail routing, SPF and DMARC protection, optional DKIM, nameservers and IPv6.

Useful for

  • Checking email spoofing protection
  • Auditing a new business domain
  • Debugging missing SPF or DMARC
  • Reviewing DNS before a website launch

How to read the score

The score summarizes the most important public DNS and email trust signals. MX, SPF and DMARC matter most because they affect mail routing, deliverability and sender spoofing protection. IPv6 and nameservers add context about technical readiness.

  • MX records tell the internet where email for the domain should be delivered.
  • SPF lists the servers allowed to send email for the domain.
  • DMARC tells receivers what to do when authentication fails.
  • DKIM signs outgoing email, but checking it requires the correct selector.

What to fix first

For a business domain, fix missing MX, SPF and DMARC first. Without them, deliverability can suffer and attackers may spoof your domain more easily. Configure DKIM with your mail provider because selector names differ between services.

  • Missing MX usually means the domain cannot receive email.
  • Missing SPF makes it harder to verify sending servers.
  • Missing DMARC weakens spoofing and phishing protection.
  • Failing DKIM usually means the selector or public key is wrong.

Limitations

The checker reads public DNS records. It cannot prove whether a specific email will pass a spam filter or whether your mail provider has every internal setting configured correctly.

  • DKIM can only be checked when you know the selector.
  • DNS changes may take time to propagate because of TTL caching.
  • The score does not replace a real email delivery test.
  • The tool cannot inspect private provider settings.

FAQ

Is DMARC required?
It is not always legally required, but it is strongly recommended for business domains. DMARC helps protect your brand from phishing and tells receivers how to handle suspicious messages.

Which DKIM selector should I use?
Find the selector in your email provider settings. Common values include default, google, selector1 and selector2, but every provider can use a different name.

Is SPF enough without DMARC?
SPF is important, but it is not enough on its own. DMARC combines SPF and DKIM into a policy that receivers can enforce.

Why is a DNS change not visible yet?
DNS records are cached according to their TTL. It can take minutes or hours before all resolvers see the new value.

Related Tools

More tools for preparing, editing, and checking text.

Domain Rating Checker

Domain authority, popularity and DNS check

Open

Meta Tags Checker

Preview SEO, Open Graph and SERP metadata

Open