Free tool
Domain health check
Enter a domain to check everything that decides whether its mail arrives: registration, mail servers, SPF, DKIM, DMARC, blocklists and nameservers. You get the fixes in the order to make them.
Sending outreach from this domain? GEOboom finds the pages AI answers cite and runs the outreach to get you mentioned on them, with the mailboxes included.
See how it worksWhat a healthy domain needs
To exist
A current registration and nameservers that answer. An expired domain takes your website and every mailbox down with it, and renewal notices go to an address people stop reading.
To receive
MX records that point at working mail servers, so replies to what you send reach you instead of bouncing.
To be trusted
SPF, DKIM and an enforcing DMARC policy, so receivers can tell your mail from forgeries, and no listings on the blocklists that matter.
Questions
What does a domain health check cover?
Everything that decides whether mail from your domain arrives and replies reach you: the registration (is it current, when does it expire), the MX records that receive your mail, the SPF, DKIM and DMARC records that authenticate what you send, the main email blocklists, and the nameservers that answer for the domain.
Why are BIMI and MTA-STS not counted against me?
They're optional. BIMI shows your logo in some inboxes and needs an enforcing DMARC policy first; MTA-STS protects mail on its way to you. Neither changes whether your mail is delivered, so a missing record isn't a problem, and a checker that marks it as one sends you after the wrong fix.
Why does the age of a domain matter for email?
Mailbox providers have no history for a new domain, so they trust it less, and spammers register fresh domains all the time. Mail from a domain a few weeks old gets more scrutiny. Warm new mailboxes up gradually and keep volume low for the first months, especially for cold outreach.
Everything passes. Why does my mail still go to spam?
A healthy domain is the precondition, not the whole story. Receivers also judge the sending mailbox's history, how many recipients open, reply or mark messages as spam, how much you send at once, and the content itself. Authentication gets you considered; the rest decides the inbox.
How often should I check my domain's health?
After any DNS change, when you add a service that sends mail for you, before a new campaign, and a couple of months before the registration expires. Records drift: a new tool's include pushes SPF past ten lookups, or a key rotation leaves DKIM broken.
How does the domain health check work?
It runs the same checks as our SPF, DKIM, DMARC and blacklist tools, and adds the registration record, the mail servers and the nameservers. DNS records come from public resolvers. The registration comes from the registry through RDAP, or WHOIS where a registry has no RDAP. Blocklists are asked from our own server. Each part is graded as fine, worth checking or a problem. Problems come first in the fix list: registration and mail servers before anything else, since nothing else matters if mail can't arrive. The website is never fetched.
What is RDAP, and why do some domains show no registration dates?
RDAP is the registries' modern replacement for WHOIS. It returns registration data as structured JSON from the registry that runs the domain ending. Some endings, such as .io and .co, still offer only WHOIS, so we read that instead. Some registries, such as .de's, publish no registration or expiry dates at all. Then we say the expiry can't be checked rather than guessing; your registrar's dashboard has the date.