Enter a domain to audit two things at once: its TLS/SSL certificate (issuer, validity, expiry, trust) and whether the domain can be email-spoofed (its SPF, DKIM, DMARC and MTA-STS posture). Passive checks — one TLS handshake plus DNS lookups — for domains you own or are authorized to assess. Nothing is stored.