Is your DNS up to snuff?
72 automated checks across DNS health, email authentication, DNSSEC, and blacklists. Plain-English results in under 5 seconds. No account required.
72 checks. 8 categories. One report.
Every check that matters for a healthy domain and deliverable email — run automatically, explained in plain English.
Parent Zone
Confirms your domain is properly delegated from its TLD registry. If the parent zone doesn't recognise your nameservers, nothing downstream works correctly.
Nameservers
Verifies redundancy, consistency, and correct configuration. All NS records must return the same answers. No single point of failure.
Start of Authority
Validates SOA record timing parameters and zone health. Problems here cause stale caches, slow propagation, and resolver failures — silently.
Mail Servers
Verifies MX record syntax, priority ordering, hostname resolution, and SMTP validity. A misconfigured MX means bounced email with no visible error.
Email Authentication
SPF, DKIM, DMARC, and BIMI — the four records that determine whether your email reaches the inbox or gets flagged as spam.
Web Presence
HTTP/HTTPS reachability, SSL certificate validity and expiry, redirect chain depth, HSTS headers, and mixed-content signals.
DNSSEC
Full chain-of-trust verification from root to zone. Catches signing errors, expired signatures, and missing DS records.
Blacklists
Cross-references your domain and mail server IPs against 50+ real-time block lists. A listing here means your email is being rejected.
Not just data. A fix you can copy and paste.
Most DNS tools dump raw records at you and leave you to figure out what they mean. DNSSnuff reads them for you.
Every check runs against known best-practice standards. When something's wrong, you get a plain-English explanation — and a ready-to-paste remediation: the exact DNS record to add, the registrar steps, or the email to hand your IT provider.
Paste it into ChatGPT or Claude. Done.
v=DMARC1; p=none; rua=mailto:[email protected]p=none — anyone can send email claiming to be from your domain without being blocked. Change to p=quarantine or p=reject.v=spf1 include:_spf.google.com ~all~all (softfail). Unauthorised servers can still send as your domain. Change ~all to -all.TTL: 172800 | Refresh: 10800 | Retry: 3600Four steps. Under five seconds.
Enter any domain
No account required for a free report. Type the domain, press run.
72 checks run automatically
DNS health, email authentication, SSL, DNSSEC, and blacklist lookups — all in parallel, in seconds.
Read the verdict
Results are severity-ranked. Critical issues first. Plain-English explanation for every finding.
Copy the fix
Every finding includes a ready-to-paste remediation. Paste it into ChatGPT or Claude. Done.
Built for anyone who can't afford a DNS surprise
Developers & engineers
Run a report before you deploy. Catch misconfigured MX records, missing DMARC policies, broken SSL chains, or incorrect nameserver delegation before they turn into 11pm support calls.
Use it as a pre-deployment checklist. Every time.
IT teams & sysadmins
Monitor your full domain estate. Get alerted the moment anything changes — a misconfigured record, a new blacklist listing, an expiring certificate — before your users notice.
Set it up once. Let it watch.
MSPs & agencies
White-label DNS health reports under your own branding. Deliver professional domain audits to every client, run from a single multi-domain dashboard, via API if you need it.
Look like the expert. Because you are.
What you get
Copy-ready remediation
Every finding outputs the exact DNS record to add, registrar steps, and a pre-written email for your IT provider.
Instant diagnosis
Full 72-check audit on any domain in under 5 seconds.
Email deliverability focus
SPF, DKIM, DMARC, and BIMI — the checks most tools miss or misread.
Health score & letter grade
A single score that tells you where you stand at a glance.
"Fix This First" priority stack
Results ordered by severity so you know what actually matters.
Shareable report URLs
Send a permanent link to your report — no login required for the recipient.
Historical trackingPro
See what changed and when. Correlate DNS changes with delivery issues.
Change alertsPro
Email notification the moment anything on your domain changes.
AI Prompt buttonPro
One click generates a Claude/ChatGPT-ready prompt with the finding, raw data, and fix pre-loaded.
White-label reportsAgency
Your logo, your branding, your client relationships.
The report is always free.
Run up to 3 checks per month at no cost — no account, no credit card. Pro adds full AI-ready remediation, report history, and change alerts from $19/month.
- 3 domain checks per month
- All 72 DNS checks
- Health Score + letter grade
- Fix This First priority stack
- Shareable URLs (24-hour expiry)
- 25 domain checks per month
- Full AI-ready remediation
- AI Prompt button (Claude/ChatGPT)
- 90-day report history
- Change alerts & daily monitoring
- PDF + JSON export
- Unlimited domain checks
- White-label PDF (your logo)
- REST API + webhooks
- Permanent shareable URLs
- 12-month report history
Find out what's wrong with your DNS right now.
It's free. It takes five seconds. And it might save you from a very bad day.
No account required. Results in under 5 seconds.