Free Domain and IP Check: SPF, DKIM, DMARC, HTTPS and Spam Blocklists

Most small companies have never checked what their domain looks like from the outside: whether mail spoofing protection is set up, whether the site's certificate is about to expire, whether the mail server's IP has landed on a spam blocklist. These issues usually surface at the worst moment — an accounting email lands in spam, or a client gets an invoice "from you" with someone else's bank details. We built two free tools that show all of this in a few seconds, no install and no signup required.

Who this is for

If your company doesn't have an in-house IT person and your mail and website were set up once by a contractor, an employee "who happened to know computers," or the web developer — chances are some of the protection was never turned on. You don't need technical knowledge to check: enter your site's address and read the plain-language explanation next to each finding.

What "Domain Check" looks at

The tool at nextgenit.com.cy/tools/check connects to your domain the same way a mail server or a visitor's browser would, and reads only publicly available data:

SPF, DKIM, DMARC — three DNS records that together decide whether someone can send an email "from your domain" without actually being you. A missing DMARC record is the most common finding: without it, every mail server on the internet decides on its own whether to trust a forged message.
HTTPS and the site certificate — whether the certificate is valid, whether the site redirects from http to https, and where the protection breaks down if something is misconfigured.
Security headers — HSTS, Content-Security-Policy, X-Frame-Options and others. Visitors never see these, but a browser does, and missing several of them is a sign nobody has touched the site's configuration in a while.
Elementor version, if the site runs on WordPress. Elementor is the most popular WordPress page builder, and versions 4.3.0 and 4.3.1 had a vulnerability that allowed a site takeover via a forged request (fixed in version 4.3.2). The tool checks the installed version from data the page already exposes publicly.

Every finding comes with a plain-language explanation of what it means and what to do about it.

What "My IP" looks at

The tool at nextgenit.com.cy/tools/ip shows your IP address, provider and city, and lets you check any IP or domain: who owns the address, and whether it's listed on six spam blocklists (SpamCop, UCEPROTECT, PSBL, Barracuda, DroneBL, s5h). This is the first thing worth checking if your company's emails have started landing in recipients' spam folders — sometimes the cause is the mail server's or provider's IP reputation, not the email's wording. There's also a plain-text answer for anyone who prefers a terminal: curl nextgenit.com.cy/ip.

Both tools use only publicly available data (DNS, certificate, site headers, public address registries) and store nothing: the domain or IP you enter never ends up in a database or a log.

What to do today

Open the domain check and enter your own site's address. It takes under a minute.
If it flags a mail issue (SPF, DKIM, DMARC), don't put it off — this is exactly what gets used for invoice fraud and phishing sent "from" your company.
If your site runs WordPress with Elementor, check whether the version is outdated even if the site "just works" — a vulnerability isn't visible from the outside until someone else finds it.
If company emails are landing in spam, check your mail server's IP against blocklists using the IP tool.
Re-run the check every few months, or after switching hosting, your mail provider, or your IT contractor — any of these can silently reset settings that were working fine.

If IT is handled by a contractor

The results are a good reason for a short conversation with whoever manages your mail and website. Worth asking:

Are SPF, DKIM and DMARC set up, and what mode is DMARC running in — monitoring only, or already blocking forgeries?
Who's responsible for renewing the site certificate and updating plugins like Elementor?
Is the mail server's IP reputation monitored if emails occasionally fail to arrive?

Vague answers, or a contractor who doesn't recognize the question, are a useful result in their own right.

Found a problem and not sure where to start, or want to go through the results together? Message @NextGenITCY or write to info@nextgenit.com.cy — the first consultation is free.