dns.rehab

Your DNS needs rehab.

Enter a domain. Get a graded audit — nameservers, mail authentication, blacklists, LLM policy — with every verdict explained and every problem priced to fix. No false alarms on managed DNS; we know a Cloudflare serial when we see one.

The deep audit

Delegation, SOA timers, open recursion, glue — the intodns-class walk, provider-aware.

SPF

The RFC 7208 walk with the 10-lookup budget counted as it is spent.

DMARC

Policy, alignment and rua — the none → quarantine → reject ladder.

DKIM

Selector probing and key strength.

Blacklists

A curated list of the zones that matter, each with its delisting path.

MTA-STS + TLSRPT

Enforce TLS for inbound mail and get failure reports.

llms.txt

The file AI agents read about you — graded against the spec.

AI crawler policy

GPTBot, ClaudeBot, Google-Extended: choose instead of drifting.

Header analyzer

Why is my mail in spam? Paste headers, read the answer.