Domain & registration
- WHOIS lookup
- Domain expiry
- Registrar / source
- Domain status
Registration dates, status codes and nameserver delegation. Use the WHOIS Lookup for full RDAP details.
Flagship tool • Free • No signup
![]()
Domain Health Checker
One scan for DNS, WHOIS, SPF, DKIM, DMARC, SSL, blacklist, website response and security headers — with a health score and prioritized fix list.
Try:
Instant results from public DNS, RDAP/WHOIS, TLS and reputation data. See Methodology and Data Sources.
Preparing check…
Why domain health matters
Misconfigured DNS, missing email authentication, expired SSL, or blacklist signals can break email delivery, trigger browser warnings, and erode trust — often before users notice. A domain health check surfaces these issues in one report so you can fix them before they affect customers or campaigns.
What you get in one report
Six categories, one health score, and prioritized recommendations — or use focused tools below for a single area.
DNS & nameservers
- A / AAAA records
- NS records
- MX records
- CAA records
Live DNS records that affect websites, email routing and certificate control. Run a focused DNS Lookup for record-level detail.
Email authentication
- SPF record
- DKIM selector note
- DMARC policy
- MX mail routing
SPF, DKIM, DMARC and MX signals that affect email trust.
SSL & certificate control
- SSL certificate
- Expiry date
- Domain match
- CAA policy
Certificate validity, expiry, hostname match and HTTPS behavior. See the SSL Checker for certificate-only detail.
Website & headers
- Website status
- HTTP response
- HTTPS redirect
- Security headers
HTTP status, redirects, response behavior and security headers.
Reputation & mail server signals
- Blacklist status
- Reverse DNS / PTR
- Mail server IPs
- Provider status
Blacklist listings, reverse DNS and mail server identity signals.
Issues this tool can detect
Examples of configuration problems that lower a domain health score or create operational risk.
DNS & domain
- Missing or wrong A / MX records
- Domain expiring soon
- Weak nameserver delegation
Email authentication
- Missing SPF or DMARC
- SPF with too many DNS lookups
- DKIM not detected
Website & SSL
- Expired or mismatched SSL
- HTTPS not redirecting
- Missing security headers
Reputation
- Mail IP on a blocklist
- Missing reverse DNS (PTR)
- Unreachable mail servers
Optional hardening gaps — such as missing CAA or some headers — may appear as recommendations rather than critical failures.
How it works
Three steps from domain name to actionable report.
-
Enter your domain
We normalize the input and prepare it for technical checks.
-
Run connected checks
DNS, WHOIS, email auth, SSL, website, headers and reputation are reviewed in parallel.
-
Review your action plan
Get a health score, issue counts and recommended fixes ranked by impact.
When to run a check
- After DNS, hosting or mail changes
- Emails go to spam or bounce
- SSL shows browser warnings
- Before launching or migrating a site
- Website does not load correctly
- Periodic review of domains you manage
Understanding your score
The score is based on technical configuration checks — not a marketing grade.
90–100
Excellent
Strong setup with few or no issues.
75–89
Good
Mostly healthy — review warnings.
50–74
Needs attention
Issues may affect email, SSL or uptime.
0–49
Issues found
Address DNS, email, SSL or website problems first.
The score reflects technical configuration at scan time — not guaranteed deliverability, search rankings or full security. Fix failed DNS, SSL, email and website checks before optional hardening items.
Need help fixing issues from this report?
Send us your domain, report link or technical issue. We’ll review it and route the request to the right technical team if hands-on help is needed.
Learn more: How we score domain health · Data sources · Understanding DNS · Results are diagnostic snapshots, not uptime or deliverability guarantees.
Frequently asked questions
Everything you need to know about domain health checks.
A domain health checker runs technical tests across DNS, registration, email authentication, SSL, website response and reputation signals for a domain name. It helps you find misconfigurations that can affect email delivery, browser trust, uptime and operational risk before they impact users.
The score summarizes passed, warning and failed checks across DNS, email authentication, SSL, website response and reputation. It reflects configuration health at scan time — not marketing performance, guaranteed deliverability or full security coverage.
Scores of 90–100 indicate a strong setup with few or no issues. Scores from 75–89 are generally healthy but may include warnings worth reviewing. Lower scores usually mean one or more DNS, email, SSL or website checks need attention before optional hardening items.
Low scores usually come from failed or warning checks such as missing SPF or DMARC, SSL expiry, unreachable mail servers, blacklist listings, website errors or registration problems. Review the report categories with failures first — they typically have the biggest operational impact.
Yes. The report reviews SPF and DMARC from DNS, MX routing for mail delivery, and DKIM when a selector is available or discoverable. Weak or missing authentication policies are flagged with practical next steps and links to focused checkers.
Yes, when blacklist lookup providers are configured. Listings from connected DNSBL or reputation sources are shown in the report. If a provider is not connected, that check is marked not connected rather than failed.
Run a check after DNS, hosting, mail or SSL changes, when email or website problems appear, and periodically for domains you manage. Pre-launch and post-migration checks are especially useful for production domains.
A domain can resolve correctly in DNS while email authentication is still incomplete. Missing SPF, weak DMARC, undiscoverable DKIM selectors, bad MX targets, missing reverse DNS or blacklist listings are common reasons email checks fail even when basic DNS looks fine.