--- title: "Test your domain in five minutes · Wi24rd" description: "Free test of website, email and connection with internet.nl and sikkerpånettet.dk – and why wi24rd.com got 95% and not 100%." url: "https://wi24rd.com/en/security-tips/test-your-domain/" lang: "en" alternates: da: "https://wi24rd.com/sikkerhedstips/test-your-domain/" en: "https://wi24rd.com/en/security-tips/test-your-domain/" --- Security tip 11 · Test yourself # Test your domain in five minutes. Two free test sites check website, email and connection against modern standards and tell you what is missing. We tested wi24rd.com – and it did not get 100%. Last checked 1 November 2026 [Go to the steps](https://wi24rd.com/en/security-tips/test-your-domain/#trin) [See wi24rd.com’s result](https://wi24rd.com/en/security-tips/test-your-domain/#resultat) Short answer Run your domain through internet.nl (website, email and connection) and the Danish sikkerpånettet.dk. Both give a percentage and a list of what is missing – typically DNSSEC, DMARC or modern TLS. Fix the top item first and test again. Time: ~10 minCost: freeLevel: no IT background needed Time ~5 min per test Price Free no account Tests Web · mail · net Needs Just the domain name Why ## You cannot see it with your eyes. A website can look fine and still use weak encryption, lack protection against fake emails or not be signed in DNS. These are things an attacker can use, and nobody notices until someone tests. The Dutch [internet.nl](https://internet.nl/) is run by a public-private platform in the Netherlands, and the code is open. Punktum dk, which runs .dk, uses the same code in the Danish version [sikkerpånettet.dk](https://xn--sikkerpnettet-vfb.dk/) and supports the Dutch project. The tests are the same; the Danish one explains in Danish. **What is tested** Website IPv6, DNSSEC, HTTPS and encryption, security headers, security.txt and RPKI. Email SPF, DKIM and DMARC ([tip 6](https://wi24rd.com/en/security-tips/email-domains/)), encrypted transport (STARTTLS and DANE) and DNSSEC. Connection Whether your own internet connection supports IPv6 and checks DNSSEC signatures. Step by step ## Five steps, about 5 minutes. 1. ### Test the website Enter the domain under **Test your website** and press start. After half a minute you get a score and a list of green, orange and red. 2. ### Test the email Enter the domain – or an address on it – under **Test your email**. The test looks at what other mail servers see when they send to you. 3. ### Read the red first Open each red item. The technical details say exactly what is missing, and each section links to how to fix it. 4. ### Fix what you can Many red items are fixed in a few clicks when the domain is in Cloudflare: DNSSEC and HTTPS in [tip 3](https://wi24rd.com/en/security-tips/cloudflare-proxy/), SPF, DKIM and DMARC in [tip 6](https://wi24rd.com/en/security-tips/email-domains/). If you cannot do it yourself, send the link to the result to whoever looks after your website or email. 5. ### Test again Every test has a permanent link. Run it again after a change, and keep the link – then you can see the progress next year. wi24rd.com in the test ## 95% and 93%. Here is why. We tested wi24rd.com on 1 November 2026. IPv6, DNSSEC, certificate, HSTS and RPKI passed. The red is about two things: - **Older encryption methods.** Cloudflare still offers some older methods for old browsers. They are not broken, but the test calls them insufficient. On the free plan they cannot be switched off; that needs the add-on _Advanced Certificate Manager_. New browsers use the modern methods. - **DMARC is in monitoring.** wi24rd.com’s DMARC policy is `p=none` while we collect reports. When they show that only genuine emails get through, it is tightened to `quarantine` – exactly as in [tip 6](https://wi24rd.com/en/security-tips/email-domains/). The point: red is not always a disaster. It is a list you need to understand – and some items are a deliberate choice. [!\[internet.nl test of wi24rd.com: 95 percent, red for HTTPS and orange for security options\](https://wi24rd.com/assets/img/skaerm/test-web.webp)](https://wi24rd.com/assets/img/skaerm/test-web.webp) _The website test: 95%. The red is the older encryption methods. Screenshot from internet.nl, 1 November 2026._ [!\[internet.nl email test of wi24rd.com: 93 percent, red for DMARC and for encrypted transport\](https://wi24rd.com/assets/img/skaerm/test-mail.webp)](https://wi24rd.com/assets/img/skaerm/test-mail.webp) _The email test: 93%. DMARC is in monitoring, and the mail server also offers older encryption methods. Screenshot from internet.nl, 1 November 2026._ **Honest about the limits** - **It tests standards, it is not a security audit.** It does not find holes in your software, weak passwords or open ports – for the last one there is [tip 1](https://wi24rd.com/en/security-tips/shodan-monitor/). - **The test is strict on purpose.** 100% is the goal, but not everything can be fixed on every platform. **About this tip** wi24rd.com was tested on [internet.nl](https://internet.nl/) on 1 November 2026. The information about sikkerpånettet.dk comes from internet.nl’s own news item on the cooperation with Punktum dk. The Advanced Certificate Manager requirement is in [Cloudflare’s documentation](https://developers.cloudflare.com/ssl/edge-certificates/additional-options/cipher-suites/customize-cipher-suites/). The man behind Wi24rd has used Cloudflare himself since he saw them at Black Hat in London in 2015. Wi24rd has no financial interest in Cloudflare – no money, discounts or services. [All security tips](https://wi24rd.com/en/security-tips/) [See the figures live](https://wi24rd.com/en/right-now/) [Back to Security tips](https://wi24rd.com/en/security-tips/) [To the top](https://wi24rd.com/en/security-tips/test-your-domain/#top) ## Missing a tip? Write what you would like explained. The next security tip could be yours. [Write to Wi24rd](https://wi24rd.com/en/contact/) [The site’s own defences](https://wi24rd.com/en/security/)