Dangling DNS Check

Your DNS records point to other people's domains. SPF includes, DMARC report addresses, MX, NS. When one of those domains expires, or was mistyped from day one, anyone can register it for a few dollars. After that they can send email as you or read your DMARC reports.

We found this in 43 US government domains. One county had a typo in its SPF record that let 32,066 IP addresses send email in its name.

So we built a free check. Enter a work email at your domain, confirm the 6-digit code, and you get a report on SPF, DMARC, MX, NS, MTA-STS and TLS-RPT. It shows every domain your DNS trusts that has expired or was never registered.

Most findings take one DNS change to fix.