Watch DNS get exonerated, in real time.

This is the view from the authority's side. Every line was recorded by a signing authority at the moment it answered, then verified against the signing key before it appeared here — so nothing is a probe's claim. The resolver exit, the latency, the verdict: all decoded from the signed receipt. Don't believe us — the signatures verify.

A PROVEN line is DNS's alibi: the query reached the genuine authority and the answer returned unmodified. A SUSPECT line means the exit the authority saw did not match what the client configured — a path worth investigating. Absence is never shown as failure. The resolver exit is masked to a network for privacy; a known public resolver is named. Add your own vantage →