Your domain must be DNSSEC signed.
Therefore visitors with enabled domain signature validation are protected against manipulated translation from your domain into rogue internet addresses.
We check if your domain is DNSSEC signed.
We check if your domain is signed with a valid signature making it ‘secure’.
We also check if the domains of your mail servers are DNSSEC signed.
Also see DMARC, DKIM and SPF