Free DNS Health Checkup
Get a full DNS health report: NS, SOA, A, MX, SPF, DMARC, DKIM, CAA, DNSSEC and more - instantly and for free.
Enter a domain to check its DNS health
Type any domain above and click Check to get a full DNS health report including NS, SOA, MX, SPF, DMARC, DKIM, DNSSEC and more.
NS Records
Nameserver setup & redundancy
SOA Record
Zone authority configuration
A / AAAA
IPv4 & IPv6 addresses
MX Records
Email delivery routing
SPF
Sender policy framework
DMARC
Email authentication policy
DKIM
Email signing key verification
CAA
SSL certificate authority limits
DNSSEC
DNS spoofing protection
TXT Records
All TXT record values
WWW
www subdomain resolution
AXFR
Zone transfer security
Frequently Asked Questions
Common questions about DNS health checks and domain configuration
A DNS health check inspects all DNS records configured for a domain - nameservers, mail records, security records, and more - and flags common misconfigurations, security gaps, and best-practice violations.
SPF (Sender Policy Framework) is a TXT record that lists which mail servers are authorized to send email on behalf of your domain. Without it, spammers can forge your domain in email headers, damaging your reputation and deliverability.
DMARC (Domain-based Message Authentication Reporting & Conformance) builds on SPF and DKIM to tell receiving mail servers what to do when authentication fails - quarantine or reject the email. It also enables reporting so you can see who is sending email claiming to be from your domain.
DNSSEC adds cryptographic signatures to DNS records, preventing DNS cache poisoning attacks where attackers redirect your visitors to fake sites. It is strongly recommended for domains that handle sensitive data or financial transactions.
AXFR is a DNS protocol used to replicate zone data between nameservers. If allowed publicly, anyone can request a full dump of all your DNS records, revealing internal infrastructure, subdomains, and IP addresses that should be private. Zone transfers should be restricted to authorised secondary nameservers only.
Need DNS and WHOIS intelligence at scale?
Our Daily WHOIS Database includes nameserver, SOA, and registrant data for every newly registered domain — updated every 24 hours. Ideal for cybersecurity monitoring, threat intelligence, and domain research.