dug

press d for dark mode

Live domain and network diagnostics. Every screen is a lookup made when you asked for it: nothing is precomputed, nothing is stored between requests, and each answer is labelled with how old it is.

[ reading a screen ]
the verdict
the answer in one sentence
the blocks
the evidence for it
[*] live
answered just now
[~] cached
held under its own ttl, age shown
degraded
an upstream failed, the rest still answered
none
checked and absent, not skipped
[ not here ]
  • monitoring and alertsnothing is stored between queries
  • registrant lookupredacted at source, and there is an official channel
  • reaching private spaceevery destination is validated, on every command
[ the guard ]
checked
in the dialer, after the name resolves and before connect
covers
every candidate address, not just the first
refuses
private, loopback, link-local, cgnat and reserved space
ipv4-in-ipv6
judged by the address inside, not the wrapper
ports
an allowlist; PORTS waives it and nothing else
[ resolvers ]
  • Cloudflare1.1.1.1
  • Google8.8.8.8
  • Quad99.9.9.9
  • OpenDNS208.67.222.222
  • AdGuard94.140.14.14
  • Control D76.76.2.0
[ machine readable ]