Free Tool: Is Your Domain & Email Set Up Safely?

Your business domain is more than a website address — it's the digital identity that customers, suppliers, and partners see every time you send an email or they type your URL into a browser. If the behind-the-scenes settings aren't right, your emails can land in spam, scammers can send messages that look like they came from you, and visitors might see a scary "Not Secure" warning before they even reach your homepage.

The trouble is, most of these settings are invisible. Unless you know exactly where to look, you'd never know something was wrong until a client says "your invoice went to my junk folder" or a browser flags your site.

That's why we built the [Domain & Email Health Checker](https://fundy.tech/tools/domain-health) — a free, instant tool that scans your domain and gives you a plain-English report card. No jargon, no sign-up, no data stored.

What Does It Check?

The tool runs seven checks in a few seconds and scores your domain out of 100.

1. DNS Health

DNS is the internet's phone book. It translates your domain name into the numeric addresses that computers use to find your website and mail servers. The checker confirms your domain resolves correctly and that you have more than one name server — because a single point of failure means everything goes dark if that one server has a problem.

2. Website Security (SSL)

When your SSL certificate is valid, visitors see the padlock in their browser and know their connection is encrypted. When it's expired or missing, they see a full-screen warning that scares most people away. The tool checks whether a certificate exists, who issued it, and how many days until it expires — so you can renew before it lapses.

3. Email Delivery (MX Records)

MX records tell the world which servers should receive email for your domain. If they're missing, nobody can send you email at that address. The checker confirms your mail servers are correctly listed.

4. Spoofing Protection (SPF)

SPF (Sender Policy Framework) is a public list of which servers are authorised to send email on your behalf. Without it, a scammer can forge an email that appears to come from your domain — and many receiving servers won't know the difference. The tool checks whether your SPF record exists and is properly configured.

5. Email Signing (DKIM)

DKIM adds a digital signature to every outgoing email so the recipient's server can verify it genuinely came from you and wasn't tampered with in transit. The checker probes the most common DKIM selectors and reports whether signing is in place.

6. Anti-Phishing Policy (DMARC)

DMARC ties SPF and DKIM together and tells receiving mail servers what to do when a message fails those checks — allow it, quarantine it, or reject it outright. Many domains set DMARC to "monitor only" (p=none), which watches but doesn't block. The tool flags this and encourages tightening to "quarantine" or "reject" for real protection.

7. Reputation / Blacklists

Even if everything else is perfect, your email will struggle if your server's IP address has landed on a spam blacklist. The tool checks four major blacklists (Spamhaus, SpamCop, Barracuda, SORBS) and reports whether you're clean. Being listed usually points to a compromised device on your network or a shared hosting neighbour with a spam problem.

Why Should You Care?

These aren't just technical boxes to tick. Each one directly affects whether your business email arrives, whether customers trust your website, and whether anyone can impersonate you.

Here are three real-world scenarios that proper email and domain hygiene prevents:

• "Your invoice went to spam." Missing SPF and DMARC records tell Gmail, Outlook, and other providers that they can't verify your emails. The result? Important messages — invoices, quotes, confirmations — quietly slide into the spam folder.

• "Someone sent a phishing email using our name." Without SPF and DMARC enforcement, there's nothing stopping a scammer from sending an email that looks exactly like it came from your domain. Your clients receive what appears to be a legitimate message from you, and one click on the wrong link can compromise their data.

• "Our website shows a security warning." An expired or missing SSL certificate triggers a browser-level warning that tells visitors your site isn't safe. Most people leave immediately, and some will question whether your business is legitimate.

According to the Canadian Centre for Cyber Security, email remains the most common delivery method for ransomware and phishing attacks targeting Canadian businesses. Proper email authentication (SPF, DKIM, DMARC) is one of the most straightforward defences available — and it's free to set up.

How to Use the Tool

1. Go to [fundy.tech/tools/domain-health](https://fundy.tech/tools/domain-health). 2. Type your domain name (e.g. yourbusiness.ca) and hit Check my domain. 3. In a few seconds, you'll see your score and a colour-coded breakdown. 4. Tap any check to expand a plain-English explanation plus the raw technical details.

You can also check your competitors, partners, or vendors — the tool uses the same publicly available records that any mail server can see.

What If My Score Is Low?

Don't panic. Most of the issues this tool flags — a missing SPF record, a DMARC policy stuck on "none", an expiring certificate — are straightforward fixes. Your IT provider or hosting company can usually sort them out in an afternoon.

If you'd like a hand, Fundy Tech Solutions sets up and monitors email security and DNS for businesses across Atlantic Canada. We'll review your results, fix the gaps, and make sure your email lands where it belongs — in the inbox, not the spam folder.

[Book a free consultation](https://fundy.tech/contact) or call us at 902-334-5872.