Check certificates, email security, and headers.
Check if a website's SSL certificate is valid, and when it expires.
Check a domain's SPF record, which helps stop fake emails.
Check a domain's DMARC record, which helps block email spoofing.
Check the security headers a website is using.