Domain Check for small businesses Preview
See your business domain the way mail servers see it.
Before a receiving server delivers your email it reads a few public records about your domain. We read the same records, grade them, and tell you in plain English what to change.
The stops your email makes
Illustration: what a receiving server asks, in order. Your report grades each stop for your own domain.
- MX Where does mail for you go? Your mail servers, and whether they answer to an address. OK
- SPF Was this sender allowed? The list of services that may send as you, and its 10-lookup limit. OK
- DKIM Is the message signed? A signing key at one of 16 common names. OK
- DMARC What should happen to fakes? Your policy for mail that fails, and where reports go. Improve
- MTA-STS Must it travel encrypted? A published rule that delivery to you is encrypted, plus TLS reports. Improve
- RDAP Is the domain paid up? The renewal date, read from the registry itself. OK
How a report reads
A to-do list, not a wall of red.
Each line says what we found, what it means for your business, and the exact record to paste at your DNS host if something needs to change. Share the report link with whoever manages your domain, or make the change yourself.
Also on every report: which certificate authorities may issue for you (CAA), and the website basics a browser checks first: HTTPS, the certificate's days left, the http-to-https redirect and the always-HTTPS header.
yourbusiness.com
| Record | Found | Verdict |
|---|---|---|
| Spoofing policy (DMARC) | v=DMARC1; p=none | Improve |
| Means: p=none only watches; forged mail is still delivered. Fix: when the reports show only your own services, change p=none to p=quarantine, then p=reject. | ||
| Who may send (SPF) | v=spf1 include:spf.protection.outlook.com -all | OK |
| Encrypted delivery (MTA-STS) | No _mta-sts record | Improve |
| Registration renewal | Renews by 2027-03-02 (143 days) | OK |
Domain Watch · $1.95 a month
Records drift. Domain Watch writes it down.
Someone edits DNS and forgets to tell you; a certificate stops renewing; the card on the registrar account expires. Domain Watch re-reads every record in the report once a day and keeps a dated log of anything that changed.
- No account
- A private Watch Desk opens from a link you keep. We never ask for an email address.
- Your calendar does the reminding
- Certificate and renewal dates arrive as calendar events with a reminder 14 days ahead. Changes come as an Atom feed.
- Price
- $1.95 a month or $19.50 a year for one domain; $4.95 a month or $49.50 a year for five. Free during preview.
- 9: HTTPS certificate expires (reminder on the 26th of the month before)
- 23: Domain registration renews
- DMARC changed from p=quarantine to p=none
- Certificate renewed: valid to Jan 1
Prices
Check free. Watch for $1.95 a month.
| Free check$0no account | Domain Watch$1.95/monthor $19.50 a year | Office Watch$4.95/monthor $49.50 a year | |
|---|---|---|---|
| Full report on any domain, with the record text for every fix | Included | Included | Included |
| Shareable report link, kept 30 days | Included | Included | Included |
| Fresh checks | 15 a day | 15 a day | 15 a day |
| Domains re-checked every day | – | 1 | 5 |
| Dated change log | – | Included | Included |
| Certificate and renewal countdowns | – | Included | Included |
| Calendar feed with 14-day reminders | – | Included | Included |
| Atom feed of changes | – | Included | Included |
| Run a free check | Free during preview: open a desk | Free during preview: open a desk |
Free during preview. Payments are not switched on yet, so nothing is charged and every desk gets Office Watch (5 domains). When paid plans start, the prices above are the prices, PayPal takes the payment, and you can cancel any time in your PayPal account; you keep what you paid for until the end of the period.
Questions people ask
- Do you change anything on my domain?
- No. We only read public records, the same ones every mail server and browser reads. You make any change at your DNS host; the report gives you the text.
- Why does DKIM say "not found" when I know it is on?
- A DKIM key sits under a name (a "selector") that only your email provider knows. We try the sixteen most common ones. If yours uses another, the check is marked "Improve" and counts half its points, and the report says it may simply be under a name we did not try.
- What does the grade mean?
- Each check has a weight (DMARC and SPF the most). A good result earns its full weight, "Improve" earns half, "Fix" earns nothing; notes do not count. 90 and up is an A. The grade is a summary; the findings are what matter.
- My domain has no email. Why check it?
- Because anyone can send mail that claims to come from it. For a domain with no mail servers we check that it says so: SPF "-all" and DMARC "p=reject" make forged mail bounce.
- Who runs this?
- WeldonPC.com built and runs it. The site is self-service: it does not sell DNS changes or support, and the report is the whole product.
- How do I cancel a paid plan?
- Paid plans are not switched on yet. When they are, you cancel any time in your PayPal account and keep the plan to the end of the period you paid for.