DomainRef - domain and email security check
Working · 2.0 sPay-per-call domain and email security check: SPF, DKIM, DMARC, TLS, DNSSEC, BIMI, with exact fixes.
666 servers in Security
Pay-per-call domain and email security check: SPF, DKIM, DMARC, TLS, DNSSEC, BIMI, with exact fixes.
Find hidden prompt-injection text: ASCII smuggling, zero-width/emoji stego, bidi, homoglyphs.
Scan a site or AI-built app for exposed databases, keys and MCP endpoints, then verify the fixes.
DMARC/SPF/DKIM/MX checks, email score, 100-domain bulk score, webhook watch alerts (x402 USDC).
Check emails before you send, and get a $1 SPF/DKIM/DMARC fix plan for your domain. Pay per call.
Verify a business before an agent pays, signs or buys: registry-cited decision and signed receipt.

Lets coding agents check their own code for leaked secrets, risky dependencies and AI-code mistakes
Unit 42 malware analysis & threat research. $0.01/query. Register in-session — free testnet funds.
Free, read-only email and DNS checks: SPF, DKIM, DMARC, MX, DNS records, blocklists, domain health.
{"jsonrpc":"2.0","id":1,"method":"tools/call","params":{"name":"whoami","arguments":{}}} free no key
Public read-only demo of Netmon's network monitoring tools over a recorded snapshot.
{"jsonrpc":"2.0","id":1,"method":"tools/call","params":{"name":"whoami","arguments":{}}} free no key
Twelve tools: token, wallet, contract and site security. Two free, the rest $1 in USDC over x402.

Check a domain's email DNS, whether Gmail and Outlook accept its mail, and its registration.
Flags memecoins impersonating real brands, official tokens and tokenized stocks. Read-only.
55 tools, 7 Resources, Sigma rules, email SPF/DMARC, MITRE, CVE/KEV, risk_score. No key.
Ransomware claim lookups, IOC and CVE intel, group intel, bulk checks and watch alerts (x402 USDC).
Domain threat checks, a 30-day domain watch, TLS/DNS/email-auth checks and a $2 site audit (x402).
Check text before your agent reads it: hidden instructions, invisible text and links that leak data.
Check a domain's DMARC, SPF, DKIM, MX, BIMI and MTA-STS records. Generate SPF and DMARC records.

Check a suspicious email, SMS, WhatsApp message or link for scam signals (Netherlands, Belgium).
Add a text box that proves a human typed it, not AI. Code for any framework; verify proof tokens.
Agent routing, safety preflight, execution receipts, best execution and verified outcomes.
Verified AI-agent outcomes: secret scanning, JSON cleanup, dedupe, anomaly and schema checks.