Free · no sign-up · 30 seconds
What can a criminal see, and fake, about your company?
Type your company's domain. We check whether anyone can send email as you, whether lookalike domains are registered to fool your customers, whether your site has been in a known data breach, and whether your website is set up safely.
We only look at public information: DNS records, your website's response, and Have I Been Pwned's public breach list.
Website
Lookalike domains
Known breaches
Get told when something changes
New lookalike domains get registered every week, and email settings break when someone changes providers. Monitoring re-checks your domain weekly and emails you when a new lookalike appears, your email protection breaks, or your site shows up in a new breach. $9 a month per domain.
What we check
Email spoofing
SPF, DKIM and DMARC are the three DNS records that stop criminals sending invoices "from" your domain. Without DMARC set to quarantine or reject, fake emails are usually delivered. More
Lookalike domains
Typos like yourc0mpany.com or yourcompany-billing.com that phishers register to trick your customers and staff. We flag the ones that are registered and the ones that can receive email. More
Known breaches
Whether your website itself appears in Have I Been Pwned's public list of breached sites, and what data leaked. How leaked data is used
Website basics
HTTPS, HSTS, protection against framing, and whether your server announces its software version to attackers.
Questions
Is this a "dark web scan"?
Partly. Leaked company data is traded on criminal forums, and the reputable way to see it is through breach databases like Have I Been Pwned, which we query. We never buy, download or touch stolen data ourselves. How dark web monitoring really works.
Do you store my domain?
No. Results are cached for a few minutes so repeat checks are fast. Your email address is stored only if you join the monitoring waitlist.
My grade is bad. What first?
Fix the red items, starting with DMARC. Each finding includes the exact fix, and most take an IT person under an hour.