Domain check: SPF, DKIM, DMARC, DNS, TLS and registration in one view
Sender Policy Framework: which servers may send mail for the domain
DomainKeys signing keys under common selectors
Policy for mail that fails SPF and DKIM alignment
Mail servers, their addresses and the provider
Enforced TLS for inbound mail and TLS reports
Mail and web IPs against 18 DNS blocklists
DNS
Nameservers and whether their SOA serials agree
IPv4 and IPv6 addresses and the network owner
Which certificate authorities may issue
Every TXT record at the name
Registrar, dates, status and DNSSEC via RDAP
Web
Certificate on 443: names, issuer, expiry, protocol
Redirects from http:// to the final page, HSTS
Subnet
IPv4 calculator: CIDR, or address and mask
Header parse
Received hops and delays, SPF/DKIM/DMARC results, SCL and BCL
Connection
Your public IPv4/IPv6, reverse DNS, ISP and rough location
Browser
User agent, screen, language, Do Not Track, WebRTC local IP leak
Weather
Conditions at your location from Open-Meteo
Advanced
Advanced · Mail
Expand every include and redirect into a tree, count DNS lookups and void lookups, list the resolved sending IPs
Try an extended selector list; add your own selector here
Parse pct/sp/adkim/aspf/fo/ri and check each external report domain authorises this sender
default._bimi logo and whether a VMC certificate is referenced and reachable
Fetch the policy file: mode, mx list, max_age, and the TLS-RPT destination
Connect to each MX on 25: banner, EHLO, STARTTLS and the presented certificate
Microsoft 365 (tenant ID, federation) and Google Workspace fingerprints
Advanced · DNS
DS at the parent, DNSKEY in the zone, and the validating resolver's verdict
Query several public resolvers side by side and flag any disagreement
Test each nameserver for an open AXFR zone transfer
A name wordlist plus Certificate Transparency history; lists the ones that resolve
Dangling CNAMEs pointing at decommissioned GitHub/S3/Azure/Heroku-style services
ASN, network owner, location and reverse DNS for every resolved A/AAAA and MX IP
Advanced · Web
CSP, HSTS, X-Frame-Options, X-Content-Type-Options, Referrer-Policy, Permissions-Policy, COOP/COEP → a letter grade
Full chain leaf → root: key type and size, SANs, must-staple, days to expiry
Every certificate ever logged for the domain and its subdomains (crt.sh)
Server, X-Powered-By, CMS, CDN and WAF
Every hop from http:// and https://, flagging any plaintext endpoint
Advanced · Tools
Light TCP connect check on 25, 80, 443, 465, 587, 993 — not a full scan
IPv6 subnet
IPv6 calculator: prefix, network, host count
Record builder
Generate a valid SPF, DMARC or DKIM record from the fields
Report diff
Paste an earlier Copy-report and see what changed since