Scan your domain like an attacker would.
69 free tools read the same public DNS, mail and certificate records attackers use, then show what is exposed and exactly how to close it.
Four ways a domain gets abused
Every domain exposes information attackers actively scan for. Most people find out after the damage is done.
Email spoofing & phishing
Attackers send mail as your domain to customers, partners and staff.
Domain & DNS hijacking
An expired domain, dangling CNAME or unsigned zone hands over your traffic.
Blacklisting & reputation
Mail stops reaching inboxes and browsers start warning your visitors.
Web & TLS exposure
Expiring certificates, weak headers and open ports invite attacks.
Six checks that catch most problems
Run these first — they cover the most common ways a domain gets exploited.
DMARC Checker
Stops anyone sending fake email as your domain. Checks policy, subdomains, reporting and alignment against RFC 7489.
SPF Checker
Declares which servers may send mail for you.
Run check →SSL/TLS Checker
An expired certificate breaks trust instantly.
Run check →IP Blacklist Check
Explains why your mail is landing in spam.
Run check →Domain Expiry Checker
Lapsed domains are re-registered within minutes.
Run check →Security Headers Check
Browser-level protection against XSS and clickjacking.
Run check →69 tools across 8 categories
Addons
6Verify the cryptographic signatures of DNS records to ensure they have...
› DNSSEC Validator › HTTP Header Comparer › Subdomain Enumerator
Blacklist
5Check if a specific email domain string is explicitly listed on indust...
› Email Domain Blacklist › IP Blacklist Check › SMTP Open Relay Test
DNS
13The Address (A) record is the most fundamental DNS record type, used t...
› A Record Lookup › AAAA Record Lookup › CAA Record Lookup
Domain
6Determine the exact age of a domain name since its original registrati...
› Domain Age Checker › Domain Availability Checker › Domain Expiry Checker
Email Security
11Authenticated Received Chain (ARC) preserves email authentication resu...
› ARC Record Checker › BIMI Checker › DKIM Checker
IP & Network
8Retrieve Autonomous System Number details, identifying the ISP or orga...
› ASN Lookup › IP Geolocation › Open Port Checker
Reputation
8Calculate a holistic threat score based on domain age, typosquatting v...
› Domain Risk Assessment › Email Content Spam Check › HELO/EHLO String Validation
Web Security
12Detect invalid or looping HTTP redirects that damage SEO rankings and...
› Broken Redirect Finder › Canonical URL Check › HTTPS Enforcement Test
Eight checks worth running first
If any item fails, open its tool to diagnose and fix it.
Start with DMARCSecurity checks shouldn't cost anything
Live queries
Every scan hits live DNS resolvers, WHOIS servers and DNSBL zones directly — never a stale cache pretending to be current.
No account
Every tool runs without signup, payment or rate limits — type a domain and get an answer.
Explained results
Every result comes with a plain-language explanation and a concrete fix, not just pass/fail.
Globally accurate
DNS propagation checks query 8 real resolvers worldwide, not one server's local view.