Find expired and unregistered domains your DNS still trusts: in SPF includes, DMARC reporting addresses, NS and MX records, CNAMEs and certificate records. Verify an email at your domain to run the scan.

Domains in your SPF record that have expired or were never registered. Whoever registers one can send mail that passes SPF as you.
rua/ruf addresses on dead domains. Whoever registers one receives your DMARC reports, which map your mail infrastructure.
Delegations to nameserver domains that no longer exist. Whoever registers one controls your DNS.
Mail routed to domains that no longer exist. Whoever registers one can receive your mail.
Subdomains pointing at expired domains or abandoned services, the classic subdomain takeover.


Domains expire quietly. DNS records that reference them don’t. We registered an expired DMARC reporting domain for $10 and started receiving reports for 86 organizations, including a NYSE-listed company and two US county governments. This tool finds the same kind of gap in your own DNS before someone else does.
Most issues take one DNS change to fix. We'll walk
you through it.
