DNS Log Monitor

Free online DNS log monitor. Real-time DNS query logging — get a subdomain and see every DNS lookup instantly. Useful for SSRF detection, DNS propagation tracking, and security testing.

dig.pm — Real-time DNS Query Log

dig.pm provides real-time DNS query logging. Get a subdomain, trigger DNS lookups, and watch them appear instantly.

Open dig.pm

Opens in a new tab. dig.pm blocks iframe embedding for security.

How to Use DNS Log Monitor

1

Get a Subdomain

dig.pm gives you a random subdomain like abc123.dig.pm. Any DNS query hitting this subdomain is logged in real-time — no setup required, just copy the subdomain.

2

Trigger a DNS Query

Use the subdomain anywhere that causes a DNS lookup: ping it from terminal, curl it, paste it into a URL, use it as a callback address in a payload, or add random prefixes (xxx.abc123.dig.pm) — all of them get logged.

3

Watch the Log

Every DNS query appears instantly in the log below with timestamp, source IP, query type, and the full domain that was looked up. The page auto-refreshes as new queries arrive.

Frequently Asked Questions

What is DNS logging used for?

DNS log tools are commonly used for: detecting out-of-band (OOB) vulnerabilities like XXE, SSRF, and blind command injection, verifying that a DNS change has propagated globally, debugging DNS resolution issues, testing DNS-based service discovery, and security research where you need to confirm external interaction.

How does dig.pm work?

dig.pm runs an authoritative DNS server. When you get a subdomain, the DNS server is configured to respond authoritatively for anything under that subdomain. Any DNS query for your subdomain (or deeper levels like xxx.your-subdomain.dig.pm) reaches their server, which logs it and responds. It's the same principle as dnslog.cn, Burp Collaborator, and interactsh.

Are my DNS queries public?

The subdomain is randomly generated and accessible to anyone who knows it. Keep your subdomain token private if you're using it for security testing. If you need private DNS logs, consider running your own interactsh server or using a service with authentication.

What DNS record types are logged?

dig.pm logs all DNS query types — A, AAAA, MX, TXT, CNAME, NS, and others. The log shows each query's type, source IP address, timestamp, and the full queried domain. This is particularly useful for SSRF testing where you control the domain prefix but not the DNS query type.

How to Use dig.pm for DNS Logging

dig.pm is a real-time DNS logging service. Every DNS query that reaches its server gets logged and displayed instantly. No account, no setup — just copy the subdomain and start triggering queries.

Typical Workflow

  1. dig.pm assigns you a random subdomain like a1b2c3.dig.pm
  2. Copy it and use it in your test — as a webhook URL, SSRF target, or just ping a1b2c3.dig.pm
  3. The DNS query hits dig.pm's authoritative server and appears in the log
  4. Use random prefixes like test123.a1b2c3.dig.pm to create unique identifiers per test

Common Use Cases

  • SSRF Detection: Use the subdomain as a target URL in SSRF payloads — if the server resolves it, you see the DNS query in the log
  • Blind XXE: Reference the subdomain in an XML external entity — DNS queries confirm the XXE was processed
  • DNS Propagation: Make a DNS change, then query your subdomain from different locations to see when resolvers pick up the change
  • Reverse DNS Tracking: Embed the subdomain in email images or links to track opens (note: many email clients pre-fetch DNS, so results may not be definitive)