Domain Health Score
Run combined DNS, email and security checks and get a 0-100 health score.
Runs DNS, MX, SPF, DMARC, SSL, blacklist and SMTP checks (plus DKIM when a selector is given). Takes up to ~20 seconds.
About this tool
The Domain Health Score runs a full battery of checks against your domain in one go: DNS resolution and name servers, MX records, SPF, DMARC, DKIM (when you provide a selector), SSL certificate validity, mail server SMTP reachability and IP blacklist status. Each check contributes to a score out of 100.
The report separates passed checks, warnings and failures, and gives concrete recommendations ordered by impact. Run it after any infrastructure change, or monthly as a routine audit of your domain's email deliverability and security posture.
Frequently asked questions
What is a good domain health score?
90+ means everything important is configured correctly. 70-89 indicates warnings worth fixing (e.g. weak DMARC policy or an expiring certificate). Below 70 means at least one critical item — missing SPF/DMARC, expired SSL, or a blacklisted IP — needs attention.
Why is DKIM skipped in my report?
DKIM keys live under a selector name that cannot be discovered from outside. Provide your selector (found in the s= tag of a DKIM-Signature header of an email you sent) to include the DKIM check in the score.
How often should I check domain health?
Run a check after every DNS, email or hosting change, and on a monthly schedule otherwise. Certificates expire, blacklists pick up IPs and providers change infrastructure — regular checks catch issues before users do.