Cybrology
FeaturesHow it worksFAQ
Free security tools
Password strength checkerScore any password instantlyGDPR fine estimatorModel your exposureRansomware cost calculatorEstimate total incident costCyber hygiene quick scoreRate your habits in 90 secondsPhishing IQ TestCan you spot a phishing email? Most people can't. Take the 10-email test.
Sign inStart free assessment
Cybrology

The intelligent risk assessment solution for cybersecurity compliance, training oversight, and audit preparedness.

Product
FeaturesSecurityIntegrationsChangelog
Company
AboutCareersBlogPressContact
Resources
DocumentationHelp centerCommunityAPIStatus
Legal
PrivacyTermsDPACookies
© 2026 Cybrology, Inc. All rights reserved.

Domain Health Checker

Domain Health Checker

Enter any domain to check its DNS resolution, nameservers, mail setup, and email-authentication records — the exact signals attackers probe before a spoofing or phishing campaign.

We only query public DNS records for the domain you enter — nothing is stored beyond an anonymous result used to power your "More free tools" recommendations.

Enter a domain to check its DNS and email-authentication health.

See your full risk picture — take the 2-minute risk checkGet a monitored domain health reportLearn how to close these gaps
More free tools
Password strength checkerEmail breach checkerGDPR fine estimatorRansomware cost calculatorCyber hygiene quick scoreAttack surface previewPhishing IQ Test
Gamified simulation

Can you spot the phish?

+100 XP
DMARC policy update required — verify your domain within 24 hours

Which sign most reliably reveals a phishing email?

Which sign most reliably reveals a phishing email?

What this check actually looks at

We resolve your domain's A, NS and MX records and inspect its SPF and DMARC TXT records plus the DNSSEC AD flag over DNS-over-HTTPS — the same passive signals attackers check before a phishing or spoofing campaign.

Why SPF and DMARC matter

Without SPF and an enforcing DMARC policy, anyone can send email that appears to come from your domain. That's the foundation of business-email-compromise and vendor-impersonation attacks — and it's invisible to end users.

How to raise your score

Publish an SPF record listing your real mail senders, move DMARC from p=none to p=quarantine or p=reject once you've reviewed reports, and ask your registrar or DNS host to enable DNSSEC.

Frequently asked questions

What does a domain health score measure?
It's the share of six passive DNS and email-authentication checks your domain passes: whether it resolves, has visible nameservers, has mail servers (if it sends mail), and publishes SPF, an enforcing DMARC policy, and DNSSEC.
Why did my score drop even though nothing changed?
DNS records can change without your involvement — a mail provider migration, an expired DMARC record, or a registrar setting can all shift your results. Re-run the check any time to see your current state.
Is this a full security audit?
No. This is a fast, passive DNS scan of six signals — it doesn't test your servers, applications, or credentials. For a complete picture, take the full risk assessment.

We only query public DNS records for the domain you enter — nothing is stored beyond an anonymous result used to power your "More free tools" recommendations.