← All tools Risk Brief

Could someone send your AP team
an invoice pretending to be you?

Type in your company domain and give us about ten seconds. We run a sweep of public records across your domain, lookalike domains, and your vendor and supplier footprint. Checks include DMARC enforcement, SPF/DKIM posture, newly registered lookalike domains with live MX or SPF records, and whether your vendors, including overseas suppliers, can be spoofed or have the same gaps. That's the setup behind most fake invoices and "we've changed our bank details" scams.

We only read public records. Nobody at your company is contacted, and you don't need an account.

Point-in-time analysis of publicly available data. No private systems were accessed or tested. Listed domains are flagged for similarity, not a finding of malicious intent.