Dig over DoH
A DNS lookup that queries a public DNS-over-HTTPS resolver (Cloudflare, Google, doh.sb or DNS4EU) directly and shows the records: your query goes straight to the resolver you pick, seen by no pah.moi server.
This is generated in browser and is not sent to pah.moi servers.
About this tool4 paragraphs
Choose any record type from the grouped list, from the everyday A / AAAA / MX to service, security and DNSSEC records. A PTR lookup takes a plain IP address and shows you the reverse name it actually queried.
Expert mode adds Inspect zone, which reports the DNSSEC keys, algorithms, signature lifetimes and a plain-language verdict, along with common warnings (missing CAA, odd TTLs, wildcards, missing IPv6). You can also query every resolver at once and compare them.
The provider list is limited to services verified for direct browser access. This page is only allowed to contact hosts named in advance in the site's security policy, and that list cannot include a resolver you have not typed yet. Allowing any address would mean allowing this page to send data anywhere, which is what the policy is there to stop. To query your own resolver, use a shell: curl against its supported DoH API, or dig itself.
DNS4EU uses its unfiltered profile; court-ordered domain blocks still apply.