DNS & domain lookup

DNS Health Checker

Audit a domain's core DNS records — NS, SOA, A/AAAA, MX, SPF and DMARC — in one scan with a 0-100 score. Free DNS health check over live DNS.

Run a DNS health check

Enter a domain to audit its core DNS records in one scan.

What this DNS health checker does

Checks NS redundancy and SOA validity
Confirms A/AAAA address records resolve
Verifies MX records for email delivery
Detects SPF and DMARC email protection
Scores overall DNS health from 0 to 100
Explains the top fixes with AI

Common use cases

  1. 1Auditing a domain's DNS in one click
  2. 2Finding missing email-security records
  3. 3Checking redundancy before it matters
  4. 4Reviewing a domain you are taking over
  5. 5Producing a health score for a report
  6. 6Spotting misconfigurations after a migration

Related tools

DNS Record LookupDNSSEC ValidatorDNS Propagation CheckerEmail Authentication AnalyzerNS Record LookupWHOIS Lookup

About DNS health

A healthy domain publishes the right DNS records: at least two nameservers, a valid SOA, A/AAAA records that resolve, MX records for email, and email-security records (SPF and DMARC). Gaps in any of these cause outages, undelivered mail, or spoofing risk.

This checker audits those essentials over live DNS and scores them, so you can see at a glance what is missing and fix the highest-impact items first. Pair it with the DNSSEC Validator for chain-of-trust checks.

More Free Tools Where This Came From

This utility is one of dozens of free, no-login tools for DNS, email, SEO and developers — all instant and private.

See All ToolsTalk to Our Team

HostCloud.in  ·  Pune, India  ·  Serving 34,987+ Websites Since 2020

FREQUENTLY ASKED QUESTIONS

Got Questions? We Have Answers.

What does the DNS health checker test?

It checks nameserver redundancy, SOA validity, A/AAAA address records, MX for email, and SPF and DMARC email-security records, then scores the result out of 100.

Why do I need at least two nameservers?

Redundancy. If one nameserver fails, a second keeps your DNS resolving so your website and email stay reachable.

Does a missing MX record matter?

Only if the domain should receive email. No MX record means mail cannot be delivered to that domain.

Why does it check SPF and DMARC?

They protect your domain from spoofing. Missing SPF or DMARC leaves your domain easier to impersonate, which the audit flags.

Is the audit live?

Yes. Every record is resolved in real time over DNS-over-HTTPS — no cached data.

What is a good DNS health score?

Aim for 100 — all core records present and email-security configured. Warnings point to the specific records to add.