Sources

Names we resolve and databases we check.

Status badges reflect this instance: green means the resolver or feed is loaded, amber means a license or key is still required, gray means it is configured off.

Targets

What you can look up

IP

RDAP, reverse DNS, GeoIP, RPKI origin-AS and reputation.

8.8.8.8

CIDR / ASN

RIR delegated stats, RDAP/WHOIS for ASNs, and optional local RPKI prefix lists.

8.8.8.0/24AS15169

Web3 names

Namespaces this console can resolve

ENS

Ethereum Name Service on mainnet via Universal Resolver.

.eth

vitalik.eth

Unstoppable Domains

Direct UNS/CNS resolution from the Ethereum registry.

.888.anime.binanceus.bitcoin.blockchain.crypto.dao.go.hi.klever.kresus.manga.nft.polygon.wallet.x.zil

brad.cryptoexample.nft

Handshake

Local hnsd DNS resolver. Query as hns:name.

hns:handshake

Reputation

Databases we check against

Operator CSV

Local indicators you load yourself: domains, hosts and CIDRs.

evil.example

FireHOL

IP and CIDR prefixes from a downloaded FireHOL netset (level1 by default).

203.0.113.10

URLhaus

Malware hosts from the abuse.ch URLhaus CSV dump. Needs an Auth-Key. Local lookup only.

Spamhaus DROP

Do-not-route prefixes and ASNs from the downloaded DROP JSON. Not the live DNSBL.

PhishTank

Phishing hosts from the hourly PhishTank JSON dump. Needs an app key. Local lookup only; idle if signup is closed.

Local data

Snapshots used for enrichment

IANA TLD list

Whether a domain uses a listed public TLD.

Public Suffix List

eTLD+1 and registrable-domain boundaries.

RIR delegated stats

IP, CIDR and ASN allocations from AFRINIC, APNIC, ARIN, LACNIC and RIPE.

8.8.8.0/24AS15169

Cloud & CDN ranges

Provider tag for IPs and CIDRs from AWS, Google Cloud, Azure, Cloudflare, Oracle, Fastly and DigitalOcean published lists (cloudsync), plus an origin-AS map for providers without one.

3.5.141.7104.16.132.229

Tor exits & iCloud Private Relay

Tags an IP as a Tor exit node or an iCloud Private Relay egress address, from the Tor Project bulk exit list and Apple's published egress ranges (cloudsync, every 3 h).

RPKI VRPs

Origin AS for an IP and announced prefixes for an ASN, from a local ROA JSON file. Off by default.

8.8.8.8AS15169

GeoLite2 City

Country and city for IPs from a local MMDB. This product includes GeoLite2 data created by MaxMind, available from https://www.maxmind.com.

8.8.8.8

GeoLite2 Country

ISO country fallback when City is missing. Same MaxMind license as City.

8.8.8.8

GeoLite2 ASN

Origin ASN and org for IPs when RDAP omits OriginAS (common on ARIN). Local MMDB only.

8.8.8.8