Domain health check
One box, one domain, one report. We check whether your email can be forged, whether your domain could be taken from you, and whether your DNS would let you down — then tell you in plain English what to do about anything that is wrong.
Free, no sign-up, and nothing you type reaches us.
Nothing is stored and nothing reaches us. Every check runs inside your own browser against public DNS and the public domain registry, the same records any mail server can already see.
What we are actually checking
Whether someone can send email as you. We read your SPF, DKIM and DMARC records and, importantly, we count the DNS lookups your SPF record needs. The standard allows ten. Past that, receiving servers are required to give up and ignore the record entirely — so a record that looks perfectly healthy can be protecting nobody at all. It is the most common fault we find, and it is invisible unless you count.
Whether your domain could be taken. We check the registry for your expiry date and, more importantly, whether the registrar transfer lock is on. Without that lock, a domain can be moved away from you, and whoever holds the domain holds your website, your email and every password reset that runs through it.
Whether your DNS would survive a bad day. How many nameservers you have, and whether they all sit with the same provider.
Whether you are on a blocklist. We check the ones that answer honest queries. Spamhaus, which is the one that matters most, refuses checks routed through public DNS, so we tell you that rather than implying a clean bill of health we cannot give.
Found something you would rather not deal with yourself?
Most of what this finds is a short job for whoever runs your DNS. If that is nobody in particular, which is usually the honest answer, we can take it on. No sales process, and no obligation afterwards.