Domain health check — inspecting DNS, mail server, SSL and WHOIS of a website

A website is not a "set it and forget it" thing. Behind a site that loads fine every day, several layers of configuration work quietly in the background — DNS, mail servers, SSL certificates and domain registration data. When any one of them breaks or expires, the consequences rarely give advance warning: the site goes down, email stops sending, or the browser shows a "Not secure" warning, even though everything was fine yesterday. A domain health check is the habit that lets you catch problems before your customers do.

What is a domain health check

A domain health check is the process of verifying that all the technical configuration that makes your domain and website work is correct, complete and not expired. It generally covers four main areas: DNS, Email (mail servers), SSL and WHOIS.

Think of it like an annual car inspection. The fact that the engine starts doesn't mean everything is fine — engine oil, brake pads and tire pressure each need their own check. A domain is the same: the site loading doesn't mean the MX record is correct, or that the SSL won't expire next week.

The 4 areas a domain health check covers

AreaWhat it checksWhat breaks if it's wrong
DNSWhether A, AAAA, CNAME, NS, TXT records point correctlySite won't load, or points to an old server
EmailWhether MX record, SPF, DKIM, DMARC are set upEmail won't send, or lands in spam
SSLCertificate not expired, issued for the right domain, full chainBrowser shows "Not secure", visitors leave
WHOISDomain expiry date, registrar, statusDomain expires — site and email die together

1. DNS — your site's road signs

DNS is the system that translates a domain name into the server's IP address. If the A record points to the wrong place, the site won't load or will show your old host. A health check verifies that every record points to the right destination and that the active nameservers match what you intended.

2. Email — the invisible route

Many people assume their business email "works", when in reality every message they send may be landing in the recipient's spam folder because SPF or DKIM is missing. A domain health check confirms the MX record points to the correct mail server and that anti-spoofing records are in place.

3. SSL — a certificate with an expiry date

Every SSL certificate has an expiry date. If you let it lapse without renewing, the browser immediately blocks the site with a full-screen red warning. A health check tells you how many days are left, whether the certificate was issued for the right domain, and whether the certificate chain is complete.

4. WHOIS — proof of ownership

WHOIS records store who owns a domain, who it was registered through, and most importantly its expiry date. An expired domain takes the website and email offline at the same time. Checking WHOIS regularly lets you renew in time, before the costly redemption period.

Why check regularly, not just once

Signs your domain may have a problem

Checking domain health with an online tool

The good news is you don't need to be a technician or open a command line to run a check. Online tools bundle all four areas into one place — you just type in a domain name and hit check.

One easy-to-use example is dnsxray.com, a domain health & diagnostics tool that inspects DNS, mail servers, SSL certificates and WHOIS data together in a single lookup. It's ideal for website owners who want a quick overview without juggling several different sites.

Try it: open dnsxray.com and type in your domain. It summarizes your DNS, email, SSL and WHOIS status on a single screen in under a minute — and you can save the result as a PDF to compare against next time.

How often should you run a domain health check

OccasionRecommended frequency
Routine scheduled checkEvery 1–3 months
After a hosting migration or DNS changeRight after the change + again after 24–48 hrs
Before SSL / domain expiryAt least 30 days ahead
When someone reports an email or site issueCheck immediately

Frequently asked questions

Q: Does a domain health check require technical knowledge?

No — online tools like dnsxray.com display results in plain language. Knowing your own domain name is enough to run a check. Fixing incorrect settings may need help from your hosting provider.

Q: My site loads fine — do I still need to check?

Yes — a loading site only tells you the A record and server work. It doesn't tell you whether email can send, when the SSL expires, or how many days are left on the domain. These problems stay hidden until they explode.

Q: How is this different from a speed test (PageSpeed)?

They're separate things — PageSpeed measures the page-loading experience, while a domain health check inspects the infrastructure (DNS/email/SSL/WHOIS) that gives your site and email an "identity" on the internet. You should do both.

Q: What should I do if I find an incorrect setting?

Note down what's wrong, then contact your hosting provider or system administrator to fix it. If you use AsiaGB Hosting, you can open a ticket with the check result attached.

Summary: A domain health check verifies DNS, email, SSL and WHOIS are all correct and not expired. It takes only a few minutes per round but lets you catch problems before customers do — do it regularly every 1–3 months, and every time you change a critical setting.

Want hosting with domain settings done right from day one

AsiaGB Hosting configures your DNS, email and free SSL ready to use — SSD Hosting from THB 500/year with DirectAdmin, 99% uptime, backups twice a month, and a team that helps you check domain health.

View Hosting Plans