Free Domain Email Health Checker — MX, SPF, DKIM, DMARC & More in One Scan
Run a complete email health check on any domain. Verify MX records, SPF, DKIM, DMARC, A records, MTA-STS, and BIMI in one scan — get an overall health score and know what to fix.
Why a Full Email Health Check Matters
What This Email Health Checker Returns
We check all major email-related DNS records in a single scan and return a health score with per-record status.
Common Email Health Check Use Cases
A full domain email health check is the fastest way to diagnose deliverability problems.
New domain setup — verify all records are correctly configured before your first send
Post-migration audit — confirm DNS records survived an ESP, hosting, or registrar change
Deliverability troubleshooting — diagnose why emails are landing in spam
Regular maintenance — run periodic checks on production domains to catch drift
Client onboarding — audit a new client's domain configuration before starting campaigns
Compliance review — verify email authentication meets organizational security standards
How to Read the Health Check Results
Use the health score and per-record status to prioritize fixes in the right order.
Read the Overall Score
A score above 80 means your domain's email infrastructure is healthy. 50–79 is a warning — review flagged records. Below 50 is critical and will likely cause deliverability failures.
Fix MX Records First
MX records control where incoming mail goes. A missing or broken MX means no mail can be received. Fix MX before any other record — without it, SPF and DKIM validation has no foundation.
Check SPF, DKIM, and DMARC
These three work together for email authentication. SPF specifies which servers can send for your domain. DKIM signs outgoing mail. DMARC tells receivers what to do when both checks fail.
Review Advanced Records Last
MTA-STS and BIMI are optional but improve security and brand trust. Fix core authentication (SPF, DKIM, DMARC) before spending time on advanced records.
Who Uses Domain Email Health Checker
Full email health checks are used by anyone responsible for email infrastructure.
Email administrators responsible for domain DNS configuration and uptime
Deliverability consultants auditing client domain configurations
Marketing managers diagnosing why campaigns are landing in spam
IT teams verifying email setup after server migration or DNS provider changes
Agency email teams running onboarding checks for new client domains
Frequently Asked Questions
What records does the domain email health check cover?
The check covers seven record types: MX (mail routing), SPF (sender authorization), DKIM (cryptographic signature), DMARC (policy enforcement), A records (IP resolution), MTA-STS (TLS enforcement), and BIMI (brand logo display).
How is the health score calculated?
The health score is calculated based on the presence and validity of each email-related DNS record. Core records (MX, SPF, DMARC) are weighted more heavily than advanced records (MTA-STS, BIMI). A score above 80 indicates a healthy configuration.
Which records should I fix first?
Fix MX records first — without them, no email can be received. Then address SPF, DKIM, and DMARC for authentication. Advanced records like MTA-STS and BIMI can be addressed after core authentication is solid.
Why does DKIM show as not found?
DKIM records are published at a selector-specific subdomain like selector._domainkey.yourdomain.com. The selector is defined by your email sending provider. This tool checks for common selectors — if yours is not found, confirm the selector name with your ESP.
My SPF record exists but DMARC shows a warning — why?
DMARC requires SPF alignment — the domain in the From header must match the domain in the SPF pass. If your sending infrastructure uses a different domain in the Return-Path, SPF may pass but DMARC alignment will fail.
Can I use this tool for regular monitoring?
Yes. Running a full email health check monthly catches DNS drift, misconfigured records after infrastructure changes, and new authentication requirements added by inbox providers.
Does this tool test actual email delivery?
No. This tool checks DNS records only — it does not send test emails or simulate inbox placement. For actual deliverability testing, use an inbox placement tool or seed list test alongside this DNS audit.
Does this tool store the domains I check?
No. All DNS lookups are performed in real time without retaining any domain data after the query completes.