Question 1

What DNS records does this checker look up?

Accepted Answer

The DNS checker looks up A, AAAA, MX, NS, TXT, and CNAME records for any domain. It also validates SPF and DMARC policies and probes 18 common DKIM selectors to give a complete picture of your domain's email security posture.

Question 2

How do I fix a failing SPF or DMARC record?

Accepted Answer

An SPF record is a TXT record at your root domain that lists authorized mail servers (e.g. "v=spf1 include:_spf.google.com ~all"). A DMARC record is a TXT record at _dmarc.yourdomain.com that specifies your policy (e.g. "v=DMARC1; p=quarantine; rua=mailto:dmarc@yourdomain.com"). Both are added via your DNS provider's control panel.

Question 3

Why is DKIM important for email deliverability?

Accepted Answer

DKIM (DomainKeys Identified Mail) adds a cryptographic signature to outgoing emails that receiving servers can verify against a public key published in DNS. Without DKIM, emails from your domain are more likely to be flagged as spam. Major inbox providers like Gmail and Outlook now require DKIM alignment for bulk senders.

Question 4

What does the domain health score measure?

Accepted Answer

The domain health score is a composite metric from 0–100 that evaluates your SPF configuration, DMARC policy strictness, DKIM presence, MX record validity, and whether your domain has IPv6 support. A score above 80 indicates a well-configured domain.

DNS Checker

What gets checked