What does the domain health check test?

Whether the website answers, the SSL certificate and its expiry date, the domain registration expiry, SPF, DMARC and DKIM email protection, and whether the website or mail server addresses are on the free SpamCop and DroneBL blacklists.

What is DMARC and why does it matter?

DMARC tells receiving mail servers what to do with emails that pretend to come from your domain. Without it, or with p=none, fake emails in your name are still delivered.

Is the check free and private?

Yes. No login. The check only reads public information (DNS, the public certificate and the website's answer). Nothing is stored.

Free domain health check

Is your website and email safe and healthy?

One check, five answers: is the website up, when does the SSL certificate expire, when does the domain expire, can someone send email pretending to be you (SPF, DMARC, DKIM), and is your mail server on a spam blacklist?

No login
About 15 seconds
Reads only public information
Nothing is stored

What the check looks at — in plain words

🌐 Website up

We open your website once over HTTPS and note the answer and how fast it came. Down or an error page = customers can't reach you.

🔒 SSL certificate

The padlock in the browser. We read its expiry date and check it is valid and made for your name. Expired = browsers show a big warning.

📅 Domain expiry

From the official registry (RDAP). If the domain lapses, your website and your email stop — and someone else can buy it.

📧 SPF, DMARC, DKIM

Three DNS records that stop criminals sending email in your name (fake invoices, payment changes). We show what is missing and how to fix it.

🚫 Spam blacklists

We ask the free SpamCop and DroneBL lists whether your website or mail server address is listed. Listed = your emails may land in spam or be refused.

Good to know

Public information only. DNS records, the public certificate, the registry and one visit to your home page — the same anyone on the internet can see. No port scanning, no login, nothing installed.
Nothing is stored. We do not keep the names checked. Results are kept 15 minutes so a refresh is instant.
DKIM: we look for the common names (Microsoft 365: selector1 / selector2, Google: google, default). Your mail provider may use another name.
Blacklists: two free lists (SpamCop, DroneBL); paid lists such as Spamhaus are not checked. IPv4 addresses only.
One moment, one place. Checked once from our server in Europe — not continuous monitoring.
Fair use: a few checks every 10 minutes per visitor.