DNS Special Operations Command
Live Diagnostics
"It's the only free tool that tells you not just what's wrong with your DNS or email setup, but what happens to everything else you depend on when it breaks."
What is DNS SOC? [legend]
DNS SOC runs live DNS, email-authentication, and infrastructure-risk checks against any domain, entirely in your browser — no backend, no account, nothing stored except optional local drift snapshots. Enter a domain above and hit Run diagnostics.
Reading the results: a green dot means the check passed, amber means worth a look, red means a real problem, and blue is informational only. The LIVE tag means a section queries real, current data; SIMULATED means it's a preview of a feature that needs backend infrastructure this browser-only tool can't provide (see each section's own note for specifics).
Records, DNSSEC status, SPF/DMARC/MTA-STS checks below are live — fetched from your browser via public DNS-over-HTTPS resolvers (Cloudflare, Google) in real time. The regional hop trace at the bottom is a simulated preview of the distributed worker-mesh trace from the spec, which needs real probe nodes deployed in each region to be real.
DNS Records & Validity
Authoritative Records
LIVE— run diagnostics —
DNSSEC Chain Status
LIVE— run diagnostics —
Propagation ETA
LIVE— run diagnostics —
Subdomain Takeover Check
LIVE — new— run diagnostics —
Email & Mail Security
Email Authentication (SPF / DMARC / MTA-STS / DKIM)
LIVE— run diagnostics —
DANE / TLSA (Mail)
LIVE — new— run diagnostics —
Mail Security Gateway
LIVE — new— run diagnostics —
Reverse DNS (PTR)
LIVE — new— run diagnostics —
Autodiscover / SRV Records
LIVE — new— run diagnostics —
Blacklist / DNSBL Check
LIVE — newchecked against 8 lists: Spamhaus ZEN, SpamCop, Barracuda, SORBS, CBL (abuseat.org), UCEPROTECT Level 1, DroneBL, Blocklist.de — for both the web IP and the mail IP. Note: Spamhaus's free zone blocks queries from public DNS resolvers (which is how this browser-only tool works) and returns "no data" for that zone rather than a real result — this is a known limitation of Spamhaus's own access policy, not a bug in this tool.
— run diagnostics —
Infrastructure Risk
Blast Radius Map
LIVE— run diagnostics —
Bogon / Reserved-Space Check
LIVE — new— run diagnostics —
Domain Expiry
LIVE — new— run diagnostics —
Known Data Breach History
LIVE — new— run diagnostics —
Performance & Change Tracking
Connection Waterfall
LIVE— run diagnostics —
Resolver Speed & Propagation Check
LIVE— run diagnostics —
Regional Trace (v2 preview)
SIMULATED— run diagnostics —
"By way of deception, thou shalt make war"
All checks are run client-side in your browser. Domain names submitted are sent to third-party public lookup services to perform diagnostics — Each governed by that service's own privacy policy. Drift-detection snapshots are stored locally in your browser only; nothing is sent to or stored on any server operated by us. This tool is provided "as is," for informational and diagnostic purposes only, with no warranty of accuracy or completeness, and is not a substitute for a professional security assessment. It is not affiliated with, endorsed by, or sponsored by any third party referenced in its output; all trademarks are the property of their respective owners and are used solely for identification.
© 2026 Xaephyr Reliance Group Inc. All rights reserved.
© 2026 Xaephyr Reliance Group Inc. All rights reserved.