Skip to content

Domain DNS Health Checker

Validate a domain's DNS setup: nameservers, SOA, mail records, SPF, DMARC, DNSSEC and more in one report.

Checks nameservers, SOA timers, web and mail records, SPF, DMARC, DNSSEC and CAA in one report.

Continue your work

Share this tool

Found it useful? Send it to a friend or teammate.

Rate this tool

0.0

0 ratings

  • 5 stars 0
  • 4 stars 0
  • 3 stars 0
  • 2 stars 0
  • 1 star 0

Click a star to rate this tool

Clear instructions

Find steps, examples and limitations below.

Use online

Open the tool in a supported web browser.

Free to use

No sign-up required. Tool-specific limits may apply.

How to use the Domain DNS Health Checker

Validate a domain's DNS setup: nameservers, SOA, mail records, SPF, DMARC, DNSSEC and more in one report.

  1. 1 Enter the main domain, such as example.com (subdomains usually have no nameserver records of their own).
  2. 2 Click Check DNS health and wait while each part of the setup is looked up.
  3. 3 Work through the failed and warning items first; each one explains the problem and how to fix it.

Example and practical tips

A report showing “Only one nameserver” and “No DMARC record” tells you to add a second nameserver at your DNS host and publish a _dmarc TXT record, which you can build with the DMARC record generator.

Frequently asked questions

What does the health check cover?

Nameservers and their addresses, the SOA record and its timers, A, AAAA and www records, MX records, SPF and DMARC for email, DNSSEC and CAA records.

Are warnings always a problem?

No. Warnings point out settings that are unusual or less robust. Information items, such as a missing IPv6 address, are suggestions rather than errors.

Report an issue

Something broken or not quite right? Tell us and we will look into it.