Warnwell / Checks
Domain checks
Each check below runs the full Warnwell report and puts its own findings first. All of them take up to 50 domains at once, free and without an account.
Or run them all at once
The home page runs every check on every domain you paste and lists the problems worst first.
Check your domains8 checks
DMARC checker
Is fake email in your name delivered, sent to spam or refused? Paste your domains. For each one you get the DMARC record as published, what it means for mail that fakes your address, and the line to change.
SPF checker
Read the SPF record and count its DNS lookups against the limit of 10. Paste one domain or a list. Warnwell shows each SPF record, follows every include: to count the DNS lookups, and flags the setups that make your own mail fail.
DKIM checker
Find DKIM keys without knowing the selector. Most DKIM lookups ask for a selector you do not know. Warnwell reads the MX and SPF records, works out your email provider, and tries its selector names first.
Email spoofing test
Can someone send email that looks like it came from your domain? Warnwell sends no test email. It reads the public records that decide whether Gmail and Outlook deliver a fake "from" your domain, and tells you the answer and the fix.
Domain expiry and age checker
Expiry date, days left, registration date and transfer lock, in bulk. Paste every domain you own. Warnwell asks each registry over RDAP for the expiry date, the registration date and the lock status, sorts the soonest first, and gives you a calendar file with the reminders.
SSL certificate checker
Certificate end dates and HTTPS errors for many sites at once. Paste your domains or subdomains. Warnwell opens each site over HTTPS like a browser would, reads the certificate dates from the public Certificate Transparency logs, and says which ones run out soon.
Domain reputation check
Is the domain blocked as malware or phishing? Links to the spam lists. A hacked site or one bad mailing can get a domain blocked, and the owner is usually the last to know. Warnwell asks Cloudflare's 1.1.1.2 malware filter about each domain and links to the main spam list lookups.
DNSSEC checker
Is DNSSEC on, off, or signed wrong? Paste your domains. Warnwell looks for a DS record at the registry and checks whether a validating resolver accepts the answers.