PETM by SH Consulting.

Dangling DNS Check

Find expired and unregistered domains your DNS still trusts: in SPF includes, DMARC reporting addresses, NS and MX records, CNAMEs and certificate records. Verify an email at your domain to run the scan.

What It Checks

1.
2.
3.
4.
5.
We only scan domains you control, so we'll send a code to an email at that domain. The check is free

Why This Matters

Domains expire quietly. DNS records that reference them don’t. We registered an expired DMARC reporting domain for $10 and started receiving reports for 86 organizations, including a NYSE-listed company and two US county governments. This tool finds the same kind of gap in your own DNS before someone else does.

Found something? Talk to us about your results.

Most issues take one DNS change to fix. We'll walk
you through it.

Book a Call →
All consultations are confidential. We're happy to sign NDAs for sensitive discussions.
Try dmarc.cc — check DMARC for 200 domains at once. Built by SH Consulting ✕