Domain DNS Health Checker

Run a full DNS & email configuration audit for any domain in one click.

About this tool

This checker runs six common DNS and email-security checks in one pass: nameserver redundancy, A/AAAA resolution, MX configuration, SPF, DMARC and SOA validity. It's designed as a quick sanity check you can run in seconds — not a substitute for a full technical audit, but enough to catch the most common, high-impact misconfigurations.

What each check means

Nameservers (NS) — confirms the domain has at least two authoritative nameservers for redundancy.
A / AAAA record — confirms the domain actually resolves to an IP address, so visitors and services can reach it at all.
MX records — confirms mail servers are configured, so the domain can receive email.
SPF record — a TXT record listing which servers are allowed to send email as this domain, helping receiving mail servers reject spoofed messages.
DMARC record — a policy, published at _dmarc.yourdomain.com, that tells receiving mail servers what to do with messages that fail SPF/DKIM checks (and where to send reports).
SOA record — confirms the DNS zone itself is properly set up, with a valid primary nameserver and refresh/retry/expire timers.

Why run a DNS health check

Most DNS problems are invisible until something breaks — a client suddenly can't receive your invoices, or a marketing email campaign gets flagged as spam. Running this check periodically, or right after any DNS or email provider change, helps catch these issues before they cost you.

My domain doesn't send or receive email — do SPF/MX/DMARC issues matter?

If a domain genuinely never sends or receives mail, those checks can be safely ignored. If it's only used for a website, focus on the NS, A/AAAA and SOA results instead.

I fixed an issue but it still shows as failing

DNS changes take time to propagate — re-run the check after a few minutes, and up to 48 hours for nameserver-level changes.

Related tools: