Real-Time Deep Inspection

DNS Resolvers & Security Check

Inspect active DNS resolvers, dual-stack client IPs, EDNS Client Subnet (ECS) advertisement, and DNSSEC cryptographic signature validation.

🛡️

Running deep inspection...

Testing active DNS resolvers and cryptographic signature validation.

Your IP addresses (show more):

detecting IP addresses...

Your DNS resolvers: detecting...

detecting DNS resolvers...

Your DNS security (DNSSEC): pending...

Signature	ECDSA P-256	ECDSA P-384	Ed25519	MLDSA44
Invalid	...	...	...	...
Expired	...	...	...	...
Missing	...	...	...	...

Like this tool? Star us on GitHub (brianshea2/addr.tools).

Code snippet for blockads-android to test DNS leak and DNSSEC validation:

// 1. Fetch probe configuration
val init = httpClient.get("https://edge-dns.pwhs.app/api/dns-leak/init").body<DnsLeakInitResponse>()

// 2. Resolve probe domains via Android device DNS
coroutineScope {
    init.probeDomains.forEach { domain ->
        launch(Dispatchers.IO) {
            runCatching { java.net.InetAddress.getAllByName(domain) }
        }
    }
}

// 3. Connect to WebSocket watcher to receive resolvers in real time:
// val ws = okHttpClient.newWebSocket(Request.Builder().url(init.wsUrl).build(), listener)
// Or send discovered resolver IPs to: POST https://edge-dns.pwhs.app/api/dns-leak/analyze

All endpoints support CORS (*) for cross-platform usage:

GET  /api/dns-leak/init          # Session, probe domains, and DNSSEC suite
GET  /api/dns-leak/myip          # Client public IP, ASN & Location
GET  /api/dns-leak/enrich?ip=... # Geo, Org & Reverse DNS PTR/NS for any resolver
POST /api/dns-leak/analyze       # Evaluate resolver list for leaks & ECS exposure

Interactive Swagger UI and raw OpenAPI 3.0 specification:

Download openapi.json Open Swagger Docs