Before you invest in AEO tools, citation tracking, or prompt optimization, run this checklist. It covers the trust infrastructure signals that determine whether AI systems consider your domain a credible source in the first place.
Work through it in order. The first section is fastest to fix. The last takes the most time.
Section 1 — Email Authentication
SPF record is configured
A TXT record at your root domain specifies which mail servers are authorized to send on your behalf.
DKIM is enabled and verified
Your email provider has generated DKIM keys and the DNS record is live and verified.
DMARC record is configured
A TXT record at _dmarc.yourdomain.com exists with at minimum p=none and a reporting address.
DMARC policy is enforced
After 30 days of monitoring, your policy has moved to p=quarantine or p=reject. p=none is a starting point, not a destination.
Section 2 — Domain Identity
Domain registration is current and auto-renewing
Your domain will not lapse. A lapsed domain is a severe trust signal disruption.
Registrar is reputable and stable
You are using a well-established registrar and have not changed recently without cause.
Nameservers are stable
Your nameservers have not changed recently without a clear operational reason.
SSL certificate is valid and current
Your domain serves HTTPS with a valid certificate. An expired certificate is an immediate trust signal failure.
Section 3 — Reputation
No corroborated threat intelligence flags
Check your domain against major threat intelligence providers. Multiple corroborated flags require remediation.
Clean on major security vendor scans
Zero malicious or suspicious classifications from major vendors is the baseline.
Entity description is consistent across platforms
Who you are and what you do is identical across your website, Google Business Profile, LinkedIn, and directory listings.
Section 4 — Network Graph Position
Credible domains in your space link to you
Authoritative, well-established organizations in your industry cite or link to your domain.
You are listed in relevant credible directories
Industry directories, professional associations, and credible aggregators include your domain.
Your outbound links go to credible sources
The domains you link to are themselves trustworthy. Your network neighborhood matters.
Complete Section 1 before doing anything else. It is the fastest, most impactful trust infrastructure improvement available to any domain.
After The Checklist
Run your domain through WarmBadge before and after completing each section. The score reflects your infrastructure changes as DNS propagates and the engine rescores your domain.
The checklist is not a one-time exercise. Email authentication needs monitoring. Domain registration needs annual attention. Network graph position requires ongoing relationship building. Trust infrastructure is maintained, not installed.
Run your domain through WarmBadge
Get a score and flag breakdown across all trust infrastructure signals. Free. No account required.
Check Your Domain →