Question 1

Why would I check DNS health if my site is already working?

Accepted Answer

Most DNS problems are invisible until they cause damage. A working website does not mean your DNS is healthy. Common hidden issues include: missing SPF records causing your emails to land in spam, DMARC policy set to 'none' giving zero protection against phishing, missing DKIM making email authentication fail on strict recipients, and www subdomain not configured so visitors typing www. get an error. The DNS health checker finds these issues before they affect your business.

Question 2

My emails are going to spam — can DNS fix this?

Accepted Answer

Yes — in most cases, email spam problems are caused by missing or misconfigured DNS records. The three most important are SPF (tells mail servers which IPs are allowed to send your email), DKIM (cryptographically signs each email), and DMARC (tells receivers what to do with unauthenticated email). If any of these are missing or set incorrectly, your emails will land in spam at Gmail, Outlook and Yahoo. The DNS health checker checks all three and tells you exactly what to fix.

Question 3

What is DMARC and why does it matter?

Accepted Answer

DMARC (Domain-based Message Authentication, Reporting and Conformance) is a DNS record that tells email receivers what to do with emails that fail SPF or DKIM checks. Without DMARC, anyone can send emails pretending to be from your domain — this is how phishing attacks work. A DMARC policy of 'reject' or 'quarantine' blocks these attacks. Since Google and Yahoo made DMARC mandatory for bulk senders in 2024, having no DMARC record also hurts your deliverability.

Question 4

What is an SPF record?

Accepted Answer

An SPF (Sender Policy Framework) record is a DNS TXT record that lists which mail servers are authorized to send email from your domain. When a recipient's mail server receives your email, it checks your SPF record to verify the sending server is on your approved list. If there is no SPF record or the sending server is not listed, the email is likely to be marked as spam or rejected. Common SPF issues include: using '+all' which authorizes every server, having multiple SPF records when only one is allowed, and exceeding the 10 DNS lookup limit.

Question 5

How do I fix 'No MX records' error?

Accepted Answer

An MX (Mail Exchange) record tells the internet which mail server handles your email. Without MX records, no one can email you at your domain. To fix this, log into your domain registrar or DNS provider and add an MX record pointing to your mail provider. For Google Workspace, that is ASPMX.L.GOOGLE.COM with priority 1. For Microsoft 365, it is yourdomain-com.mail.protection.outlook.com. For other providers, check their documentation. Changes typically propagate within 30 minutes to 2 hours.

Question 6

What does the DKIM check actually do?

Accepted Answer

DKIM (DomainKeys Identified Mail) works by adding a cryptographic signature to every outbound email. The signature is verified using a public key published in your DNS as a TXT record. The tool checks 11 common DKIM selectors (default, google, mail, selector1, selector2, and more) to see if a DKIM record exists. If you use a custom selector that is not in the list, the check may show as not found even if DKIM is configured — this is noted in the result.

Full DNS Audit — 10 Records. One Check.

Full DNS Health Audit — 10 Record Types

All 10 DNS Records — What Each One Does

When to use this tool

DNS is the #1 reason emails land in spam

FAQ

Complete your email deliverability audit