What the domain check covers
- MX and STARTTLS: which servers accept email, whether they encrypt and whether the certificate is valid.
- SPF, DKIM and DMARC: whether the domain proves its senders and what happens to forged emails. We look for DKIM with the common selectors.
- MTA-STS: whether the domain enforces encrypted delivery.
- Domain blocklists: whether the domain is on important lists.
The check reads public DNS data only. Whether a specific email lands in spam is shown by the email test on the home page.