Free tool · No sign-up
Domain Health Check.
Check expiry, SSL and email security for any domain in seconds, with plain-English fixes.
If your domain expires, your company email stops working, your website goes offline, and you can lose the domain for good.
Checks: domain expiry · transfer lock · SSL certificate · MX · SPF · DKIM · DMARC
Enter a domain above to see its report here.
Why it matters
Why small businesses lose their domains.
It rarely happens because nobody wanted to pay. The renewal notices go to someone who has left: an ex-employee, a freelancer or the web designer who registered the domain years ago.
The card on file expires, the reminders go unread, and one morning the website and every company inbox stop working at the same time. Getting a lapsed domain back can take days. A two-minute check once a year prevents all of it.
Keep your domain safe: a 5-minute checklist
- Turn on auto-renew
- Use a shared admin@ address at the registrar
- Turn on the transfer lock
- Two-step verification at the registrar
- Add SPF, DKIM and DMARC
What each check means
Six checks, in plain English.
Domain expiry & transfer lock
When the registration runs out, and whether the domain is locked against unauthorized transfers. Aim for auto-renew on and at least 90 days left.
SSL certificate
The certificate behind the padlock in the browser. If it expires, visitors see a security warning instead of your site.
MX records
Which service receives your email, such as Microsoft 365 or Google Workspace. No MX record means email to your domain bounces.
SPF
A list of servers allowed to send email for your domain. Missing or duplicate SPF records push your messages toward spam.
DKIM
A digital signature on every email you send, proving it wasn’t changed on the way.
DMARC
Tells other providers what to do with email that fails SPF and DKIM, which stops criminals sending invoices “from” your domain.
Questions
Frequently asked
- What does the domain health check test?
- Six things: when the domain registration expires (and whether the transfer lock is on), the SSL certificate’s expiry, the email server (MX), and the SPF, DKIM and DMARC records that stop your email landing in spam or being faked.
- What happens if my domain expires?
- Your website and your company email stop working together. After a grace period the domain can be bought by someone else, which is hard and expensive to undo.
- Why does it say it couldn’t check my domain?
- Some country domain extensions, possibly including .eg, don’t publish registration data through RDAP, the public system this tool uses. Check those at your registrar.
- How does the expiry reminder work?
- Enter your email after a check and we’ll email you once, 30 days before the expiry date. Your address is used only for that reminder.
- Is the domain health check free?
- Yes. It’s free, needs no sign-up, and uses public registry, DNS and certificate data.
- Can you fix the problems it finds?
- Yes. Domain, DNS and email security setup for Microsoft 365 and Google Workspace is everyday work for us, usually done remotely in under an hour.
Let's talk about your IT.
Whether something broke this morning or you're planning what comes next, we're ready to help.