Test any domain, for real.

Checks SPF, DMARC, MX, CAA, HTTPS and security headers against live public DNS and the site itself.

Yuna Kim · Security Researcher

The domain risk scanner

Transcript

[Yuna, generated presenter audio, 92% speed] I'm Yuna Kim from PhishRoot. RiskRadar reviews your public domain signals through passive checks without exploit traffic.

Yuna Kim · Security Researcher

Scanner walkthrough

Transcript

[Yuna, AI-generated presenter audio, 92% speed] I'm Yuna Kim from PhishRoot. RiskRadar reviews your public domain signals through passive checks without exploit traffic. [Off-camera narration, synthetic TTS voice, different from presenter] This is the real PhishRoot domain scanner, Risk Radar, recorded signed out. Checks are passive. They read public DNS records like SPF, DMARC, MX, and CAA, plus HTTPS and security headers. No exploit traffic is sent. Running a scan needs a free account, so this signed-out session shows the sign-in path instead of results. This is the account form. We're not submitting it in this recording. Signed in, results include a letter grade, a score out of one hundred, findings grouped by severity, and fixes you can copy. They're described here, not shown.