Breach CheckHow secure is your domain?
Can scammers send emails in your name? Is your website properly secured? The check reads public records and requests your homepage once – nothing more.
- Free
- Public data only
- A single page request
Check domain
Only check domains that you own or are responsible for. We read public DNS records and request the homepage once – no scans, no attacks.
Result for
Email security
Website security
We store neither the domain nor the result.
What is checked
- Mail servers (MX)Which servers accept emails for the domain.
- SPFWhich servers may send emails in the name of the domain.
- DMARCWhat recipients should do with forged emails – and whether you receive reports about them.
- HTTPS and certificateWhether the website is reachable encrypted and the certificate stays valid.
- Security headersProtective switches such as HSTS, Content Security Policy and protection against embedding.
What next?
Most points can be fixed with a few entries at your domain or hosting provider.