Live DNS and domain intelligence: record lookups across every type, propagation checks against six public resolvers worldwide, WHOIS with parsed expiry dates, reverse DNS, and the email-authentication trio of SPF, DKIM and DMARC.
The email checks matter more than they look — domains without DMARC can be spoofed in phishing mail wearing your name, and mailbox providers increasingly junk unauthenticated senders.