How it works


It starts with a unique request to our DNS server so that we can identify what DNS server made the request on your behalf.


When you click the Check my DNS button, we search the DNS server logs for your unique request and find the IP address of the server that made the request on your behalf.


We then scan our database to see if that DNS server is a recognized server that we’ve seen before and if any suspicious activity has been reported from it. We look up it’s Reverse DNS (PTR record) and the IP address's registered owner with ARIN.

Why is this important?

DNS Hijacking

Every single time you type an address into your address bar your internet connected device it makes a request to a DNS server to get the actual (iP) Internet address. More and more malware is targeting your DNS requests so that you use a malicious DNS server instead of the one you have configured.

Before this tool you had to know how and where to look in your device to see what DNS you were using and in many cases the actual DNS server that makes the request for you is decided up stream from you by your home router or wireless access point. In either case this tool easily exposes the actual server that made the request on your behalf and tells you if it’s a trusted source or not.