free tools

Email & domain tools.

Check one part of a domain's posture from public records. Every tool is free, requires no signup, and produces a shareable result. MSPs can use one on a client domain, then monitor the whole book.

Email auth & DMARC

Inspect DNS, SPF, DKIM, and DMARC policy.

DNS lookup →

Query A, AAAA, CNAME, MX, NS, SOA, TXT, and CAA records in parallel and share one result.

SPF record checker →

Follow every include, count the 10-lookup limit, and flag syntax errors or unsafe policies.

DMARC record checker →

Parse every DMARC tag, grade the policy, and flag weak enforcement or missing reporting.

DKIM record checker →

Probe common selectors, validate each public key, and flag weak, revoked, or broken records.

SSL & domain expiry

Verify certificates, registration, and renewal dates.

SSL certificate checker →

Verify the served certificate, hostname, chain of trust, issuer, and exact days to expiry.

WHOIS lookup →

Read registrar, expiry, nameservers, and transfer-lock status from the registry over RDAP.

Look-alikes

Find registered variants and mail-capable look-alikes.

Typosquatting checker →

Generate typos, homoglyphs, and TLD swaps, then flag registered and mail-capable variants.

Blacklists

Test domain and mail infrastructure against 20+ blocklists.

Email blacklist checker →

Check mail server IPs and the domain against 20+ blocklists, with reasons and delisting links.

everything at once

Run all four checks together.

Scan email auth & DMARC, SSL & domain expiry, look-alikes, and 20+ blacklists from public records. One shareable result, free and without signup.

scan a client domain