FREE · INSTANT · NO SIGN-UP
Domain health check.
Enter a domain and see, in a few seconds, when its registration expires and whether its email is protected by SPF and DMARC.
Check a domain
- Registration expiry
- SPF
- DMARC
- Nameservers
- Mail servers (MX)
- TLS certificate
- Checked daily by the monitoring plan, together with new hostnames in certificate logs.
What the check looks at
Registration expiry
Read from the registry's public RDAP record. When a registration lapses, the website and every mailbox on the domain stop working at the same moment, and an expired name can be bought by someone else. Some country-code registries do not publish an expiry date; the result then says so.
SPF
The SPF record lists the servers allowed to send email for the domain. Without it, receiving servers have less reason to trust the mail. Two SPF records count as an error, and a record ending in +all lets any server send as the domain.
DMARC
DMARC tells receivers what to do with mail that fails SPF and DKIM checks, and where to send reports. p=none only collects reports; p=quarantine or p=reject actually stops spoofed mail.
Nameservers and mail servers
Shown so you can confirm the domain points where you expect. An unexpected nameserver change is often the first sign of a transfer or a takeover.
What it does not do
The check is read-only and uses public data. It does not change DNS, renew domains or log in anywhere. DKIM selectors are not guessed here; the monitoring plan records the ones it discovers.
Prefer the command line or CI? The same check is available as an open-source CLI (MIT, no dependencies) that can fail a build when a domain is about to expire or loses its DMARC policy.