🩺 For businesses, shops and freelancers
Domain health check: website, security and email
Enter a domain name: HTTPS certificate, redirects, security headers, SPF, DKIM, DMARC, reverse DNS, blocklists and name servers, with a score out of 100 and how to fix each point. Free, no sign-up.
Website and security
Certificate, encryption, redirects and security headers sent by the website.
Email delivery and the protections that keep you out of spam and stop others from spoofing your address.
DNS
Settings of the domain itself, at your registrar or DNS host.
Technical details
This check only reads public information. Some checks have limits: a DKIM key may exist under an unusual selector name, and the blocklists queried are not exhaustive.
Get the detailed analysis and an action plan
I personally review this check and send you, within two business days, the fixes ranked by priority with the exact settings for your host. I can also apply them for you. Free, no commitment.
Frequently asked questions
What does this check cover?
Three families of settings: the website (HTTPS certificate, TLS version, redirect to https, www version, security headers), email (MX, SPF, DKIM, DMARC, reverse DNS of the mail server, presence on blocklists) and DNS (name servers, IPv6, CAA).
Why do my emails land in spam?
Most often because SPF, DKIM or DMARC are missing or misconfigured: mailbox providers cannot verify that the email really comes from you. A mail server without proper reverse DNS, or listed on a blocklist, is also often filtered.
DKIM is "not found" although I enabled it: is this a mistake?
Not necessarily. A DKIM key is published under a name (the selector) chosen by your email service. The check tries the most common selectors; if yours is different, it may exist without being found. Send yourself an email and look for "dkim=pass" in the message headers to be sure.
Could I break something by applying the fixes?
Some settings need care: a DMARC policy that is too strict can block your own emails if SPF and DKIM are not ready, and a badly written CSP can break pages. Go step by step, keep a copy of the old setting, or let me apply the fixes.
Is my data stored?
The domain checked and the result are not kept, apart from a cache of a few minutes to show the same result again. Only a request for the detailed analysis is stored, so that I can answer you.