How to Use the Domain Health Check

Check one domain at a time and work through the report from the record it names first.

Enter the domain that sends or receives your mail, such as example.com, without @, https:// or a path.
Select Run report to look up the MX, SPF, DKIM and DMARC records at the same time.
Read the score and the four rows, then start with the record named under Investigate first.
Open the matching checker, such as the DMARC Checker, to see that record tag by tag.

Email Domain Health Check

An email domain health check confirms that the four DNS records receivers look up before they trust your mail are published and valid.

SPF DKIM DMARC Check

The report runs the same lookups as the MX Lookup, SPF Checker, DKIM Checker and DMARC Checker in one pass. DKIM has no fixed record name, so the tool tries a list of common provider selectors such as google and selector1. If your provider uses another selector, DKIM can show as missing even though your mail is signed.

Domain Health Score

Each of the four checks earns 25 points when it passes, 10 points with a warning and 0 when it fails. A check that cannot be completed earns no points and marks the whole report as unknown. A total of 90 or more is shown as healthy and below 50 as poor.

Email Deliverability Check

A high score means your public records are in place, not that your mail reaches the inbox. Receivers also weigh sender reputation, complaint rates, list quality and message content. Use the score to rule out configuration problems before you investigate those other causes.

Frequently Asked Questions

How Healthy Is My Email Domain?

Enter the domain in the tool and read the score out of 100 together with the four rows. A domain with all four checks passing scores 100, and the summary names the weakest record when something is missing or misconfigured.

How Do I Check My Email Health Score?

Run the report for the domain in your From address, not for a personal mailbox. The score covers MX, SPF, DKIM and DMARC only, so pair it with the Email Blacklist Check when you also want to see whether your sending IP is listed.

How Do I Check If My Email Is Working Properly?

A passing report shows that the domain can receive mail and publishes the records receivers use to authenticate it. To confirm real delivery, send a test message to a mailbox you control and read its headers with the Email Header Analyzer.

Is This the Same as a Domain Controller Health Check?

No. A domain controller health check tests a Windows Active Directory server with commands such as dcdiag. This domain health check only reads the public DNS records that matter for email.

Related Email Tools

MX Lookup Find a domain’s MX records with their priorities, the mail provider and each server’s IPv4 and IPv6 addresses. SPF Checker Check a domain’s SPF record for syntax errors and count its DNS lookups across every include and redirect. DKIM Checker Look up a domain’s DKIM public key by selector, or try 21 common selectors, and check the key type and size. DMARC Checker Look up a domain’s DMARC record, validate every tag and see which policy it asks receivers to apply. Email Blacklist Check Check an IPv4 address or a domain and its mail servers against public DNS blocklists, with refused lookups reported as unavailable. MTA-STS and TLS-RPT Checker Check a domain’s MTA-STS record, policy file and TLS-RPT record, and confirm that every MX host matches the policy.

Continue with the guide What Is DMARC. Policies, alignment and reports explained.