Personal project / 2026
dns.xtra.wtf
A postmortem-style DNS audit tool that turns raw records into incident-ready findings.
dns.xtra.wtf normalizes a domain or URL, queries Cloudflare DNS-over-HTTPS, and runs a full audit across A, AAAA, MX, NS, TXT, CNAME, SOA, DS, and DNSKEY records.
The diagnostic engine checks core reachability, root/WWW alignment, TTL strategy, resolver latency, DNSSEC deployment, SPF lookup complexity, DMARC enforcement, DKIM selector discovery, MTA-STS, and BIMI.
Results are framed like an incident report, with audit IDs, categorized findings, critical issues, a raw authoritative data dump, and a shareable report URL.
Highlights
- Cloudflare DoH queries with measured resolver latency
- Mail security checks for SPF, DMARC, DKIM, MTA-STS, and BIMI
- Core DNS health checks for reachability, TTLs, WWW parity, and DNSSEC
- Postmortem UI with categorized findings, raw records, and share links
Built with
- React
- Vite
- JavaScript
- Vitest
- DNS-over-HTTPS