Built a DNS toolkit with a private resolver backend — propagation, DNSSEC, RBL, WHOIS/RDAP, health check
A few things that bugged me about existing DNS tools:
They use 8.8.8.8 or 1.1.1.1 as resolvers. Fine for basic lookups, but for RBL checks this violates most operators' terms and gives unreliable results. I run a private Unbound instance.
WHOIS via port 43 hangs constantly. I rewrote it to use RDAP (IANA bootstrap → per-TLD endpoint) with a 10s whois binary fallback.
DNS propagation tools usually omit SERIAL, which is the most useful thing to check when you're waiting for a zone change to propagate. Mine includes it.
Tools: DNS lookup (all record types), propagation (with SERIAL), DNSSEC check, reverse DNS, DNS Health Check, WHOIS/RDAP, blacklist check across 50+ RBLs, SPF/DMARC/DKIM builders, TLS scanner.
Feedback welcome, especially on resolver accuracy or missing record types.