Check any domain for free

You can check any domain without adding it to your account. The result is not saved unless you choose to add the domain.

The Check tab (iOS)

Type a domain and tap Check. Suggestions list the domains you already watch and the last ten you checked on this phone. Six checks run:

1. DNS & registration
2. SSL certificate
3. Email authentication
4. Security headers & exposure
5. Content & SEO
6. Accessibility

The ring counts them as they answer, each row picks up a Pass / n to review / n failing tag as its result lands, and Cancel keeps whatever already settled. The summary is one sentence built from the checks that ran ("Email authentication is the problem: DMARC Record and DKIM Record failed."). Tap a check for its findings, why each matters and, where it is a single DNS record, the exact record to add. From the result you can Add to watched domains or Ask NHM about this domain.

Signed out

The same check runs from the welcome screen. The two on-device checks (Content & SEO, Accessibility) run for anyone. The four server-side checks say "Needs an account", because since 2026-08-26 the server answers 401 to a scan request with no session. The result offers a free account.

The App Clip

https://nhmohio.com/clip?domain=… opens a small version of the app without a download and runs the same check. One completed scan per device; a scan that could not reach the domain does not spend it. Both buttons on the limit screen open the App Store overlay. See The Check tab and the App Clip.

On the website

• Free Email & Domain Security Checkup at nhmohio.com/domain-checkup: SPF, DKIM, DMARC, MX and nameservers, with provider-specific steps for Microsoft 365 and Google Workspace. The signed-in report shows the full record text.
• Lookalike domain check at nhmohio.com/lookalike-domain-check: generates up to 100 variations of your domain and checks which are registered, paying most attention to whether one can receive mail. This one is public and needs no account, because it reads DNS, RDAP and certificate logs and never touches the other party's server.
• Free IT checkup, the password checker and the phishing quiz are under nhmohio.com/tools.

Why scanning needs an account

Each check runs real DNS lookups, TLS handshakes and page fetches. Scanning from the website and the app stays free; it just is not anonymous. Scripted access (the API and MCP) needs Pro or higher.

Domains the public tools refuse

The public and add-time checks will not scan major banks, government and military domains (.gov, .mil, .int, .edu), and the largest platforms, retailers, telecoms, airlines, insurers and media sites. A customer who genuinely owns one of those proves it per domain (DNS record, file, or an email at that domain) and the block lifts for that domain only. See Scan clearance.