Just the domain, no need for “https://” or “www.”

No sign up, no account, nothing to confirm. Your results appear below the moment you click scan.

This scan only checks information that's already publicly visible. It never logs in to your Microsoft 365 tenant or any other system.