FFindUtilsinfindutils.hashnode.dev·1d ago · 8 min readWhy Is My Email Going to Spam? A Browser-Only Triage for SPF, DKIM, DMARC, PTR and BlocklistsFew things are as quietly maddening as a perfectly normal email landing in someone's spam folder. A password reset, an invoice, a reply to a customer: gone, filed next to fake lottery wins. The good n00
UEUsama Ejazinusamaejaz.hashnode.dev·1d ago · 9 min readDNSSEC When Moving a Blog's DNS: Remove the DS Record Before the Nameservers ChangeDNSSEC can only break a blog migration at one moment: when the domain's nameservers change. Everything else about a host move leaves it alone. Here is the failure. Your registrar holds a DS record tha00
TKTejas Kaleinthetejascodes.hashnode.dev·1d ago · 11 min readI traced a DNS lookup step by step with dig. Here's what I foundIn part 1, I explained what DNS records are. But I left one question open: who actually stores those records, and how does DNS find them out of the whole internet? So I treated a DNS lookup like a gam00
Aacidvegasinacidvegas.hashnode.dev·3d ago · 28 min readCan Someone Turn Down the Volume?I run a honeypot cluster comprised of hundreds of open recursive resolvers, deliberately, with every query logged into Elasticsearch: source address, source port, query name, record type, protocol, fl00
UEUsama Ejazinusamaejaz.hashnode.dev·3d ago · 9 min readCAA Records and Your Blog Host: Which Record Applies, and Which CA to AllowIf your blog host says the domain is connected but the HTTPS certificate never shows up, and your DNS zone has a CAA record, that record probably doesn't name the certificate authority your host uses.00
Aacidvegasinacidvegas.hashnode.dev·3d ago · 16 min readThe Mystery of ASJO.ORGI have an obsession with internet anomalies. Weird traffic patterns, unexplained phenomena in protocol-level data, the kind of stuff that makes you open 40 browser tabs at 2 AM. I run a DNS honeypot c00
EBElijah Browninelijahbrown.hashnode.dev·3d ago · 7 min readA DNS timeout is not an invalid email addressLaravel makes it very easy to check that an email address has a working domain behind it. You add email:rfc,dns to a rule and move on. Most of the time that is fine. The trouble is the small number of00
WWWinters Worksinwintersworks.hashnode.dev·3d ago · 7 min readClean a signup list before you send: syntax, MX and disposable-address checks in PythonDisclosure: Winters Works built and sells the Apify Actor mentioned in the second half. All the code below was run on 2026-10-10. Before you import a signup list into your email tool, a few minutes o00
SSMTPCartinsmtpcart.hashnode.dev·5d ago · 5 min readSPF, DKIM and DMARC for Transactional Email: A Practical Setup ChecklistWhy your order confirmations land in spam, and the three DNS records that fix most of it. Your checkout works. The customer pays. Then the order confirmation lands in their spam folder, or never arriv00
JSJayesh Sojitrainjayesh-sojitra.hashnode.dev·5d ago · 4 min readRoute 53 Explained: DNS Basics for AWSDNS translates a name people type (app.example.com) into an address machines use (an IP or an AWS endpoint). Route 53 is AWS's DNS service, and it's also a domain registrar and a health-checking tool.00