Free tool
Domain Health Check
Type a domain and see in about ten seconds whether the site is up, the certificate is trusted, the DNS is sound and the email records are in place.
Most domain problems are not one problem. A site can be up while its certificate expires next week, and mail can arrive today while a missing DMARC record lets anyone send as you. This report runs nine checks against one domain at the same time and puts the answers on one page: the website, the HTTPS certificate, DNS, the nameservers, DNSSEC, the mail servers, SPF, DKIM and DMARC.
Each row says what is wrong in plain words and links to the full tool for that check, where every finding is explained with what to change. Nothing is stored, and you do not need an account.
It is still a check at one moment. Certificates expire, records get edited and renewals fail quietly, which is why these checks are worth running every day rather than once.
Run these checks every day, not once
InfraNest watches your domains continuously: uptime from up to three continents, certificate expiry and renewal failures, DNS changes made behind your back, and SPF, DKIM and DMARC on every zone.
- Uptime and certificate monitoring
- Alerts when a DNS record changes
- Email security checked on every domain
- Every domain and registrar in one list
Frequently asked questions
#What does the domain health check test?
Nine things at once: whether the website answers over HTTPS, whether its certificate is valid and trusted, whether the DNS records are sound, whether every nameserver answers and they agree, whether the DNSSEC chain is intact, whether the domain has working mail servers, whether DKIM signing keys are published, and whether SPF and DMARC are published and correct. Each row links to the full tool for that check.
#Why does a domain need SPF and DMARC if it does not send email?
Because anyone can still send email that claims to come from it. A domain that sends nothing should say so: an SPF record of v=spf1 -all and a DMARC policy of p=reject tell receivers to refuse anything that uses its name.
#Is my domain stored or monitored after the check?
No. The check runs once, when you ask for it, and nothing is kept. If you want the domain watched every day, that is what an InfraNest account does.
#Why is one row empty or marked as not run?
Some checks depend on the domain answering at all. A domain without a website has no certificate to read, and a domain that never receives email has no mail servers. The full tool behind each row explains what it found and why.
From the blog
New articles, straight to your inbox
I’d like to receive product updates and new articles from InfraNest by email. I can unsubscribe at any time.
More free tools
One lookup is a snapshot
InfraNest keeps checking — across every domain you own — and tells you when the answer changes instead of when a customer does.
Free plan · No credit card required · Set up in minutes