Made in / Donate

DNS lookup

Everything DNS says about a domain: traced from the root servers down, every record type asked of the domain's own nameservers, each nameserver checked, then every hostname and policy record it points at followed, with SPF, DMARC, DKIM and DNSSEC checked along the way.

Try example.com, gmail.com, www.github.com, dnssec-failed.org, 1.1.1.1. A URL, e-mail address or IP address works too.

2001:4860:4802:32::a

a.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.2.3.0.0.2.0.8.4.0.6.8.4.1.0.0.2.ip6.arpa

Zone 0.6.8.4.1.0.0.2.ip6.arpa89 queries in 2.2 s2026-11-09 05:25:03 UTCNot DNSSEC-signed

WHOIS for 2001:4860:4802:32::a →TextJSON
  • Warning Nameservers disagree on the SOA serial (1016230534 on ns1.google.com; 1016687210 on ns2.google.com, ns3.google.com, ns4.google.com). Normal when two DNS providers serve the zone, each numbering its own copy; otherwise some servers haven't picked up the latest change.
  • Note 0.6.8.4.1.0.0.2.ip6.arpa isn't signed with DNSSEC, so resolvers can't tell forged answers from real ones.

Records

Asked directly of ns4.google.com (216.239.38.10), an authoritative server: no cache in between, so these are the live values.

PTR Reverse pointer

86400PTRns1.google.com.
ANY query: 1 records
86400PTRns1.google.com.

No records of type A, AAAA, CNAME, DNAME, NS, SOA, MX, TXT, CAA, HTTPS, SVCB, SRV, NAPTR, DS, DNSKEY, CDS, CDNSKEY, NSEC3PARAM, TLSA, SSHFP, LOC, HINFO, RP, URI, SPF, OPENPGPKEY, ZONEMD, CSYNC.

Resolution trace

  1. .asked j.root-servers.net 192.58.128.3038 ms

    Referral to ip6.arpa. signed (3 DS)

    • a.ip6-servers.arpa 199.180.182.53 2620:37:e000::53
    • b.ip6-servers.arpa 199.253.182.182 2001:500:86::86
    • c.ip6-servers.arpa 196.216.169.11 2001:43f8:110::11
    • d.ip6-servers.arpa 200.7.86.53 2001:13c7:7012::53
    • e.ip6-servers.arpa 203.119.86.101 2001:dd8:6::101
    • f.ip6-servers.arpa 193.0.9.2 2a13:27c0:30::2
  2. ip6.arpa.asked a.ip6-servers.arpa 199.180.182.5391 ms

    Referral to 8.4.1.0.0.2.ip6.arpa. signed (1 DS)

    • u.arin.net 204.61.216.50 2001:500:14:6050:ad::1
    • x.arin.net 199.180.180.63 2001:500:f0::63
    • y.arin.net 192.82.134.30 2001:500:127::30
    • z.arin.net 199.180.180.63 2001:500:f0::63
    • arin.authdns.ripe.net 193.0.9.10 2a13:27c0:30::10
    • r.arin.net 199.180.180.63 2001:500:f0::63

    No glue for u.arin.net, x.arin.net, y.arin.net, z.arin.net, arin.authdns.ripe.net, r.arin.net: addresses looked up via a resolver.

    200.7.86.53 failed: NOERROR

  3. 8.4.1.0.0.2.ip6.arpa.asked arin.authdns.ripe.net 193.0.9.1011 ms

    Referral to 0.6.8.4.1.0.0.2.ip6.arpa. unsigned delegation

    • ns1.google.com 216.239.32.10 2001:4860:4802:32::a
    • ns2.google.com 216.239.34.10 2001:4860:4802:34::a
    • ns3.google.com 216.239.36.10 2001:4860:4802:36::a
    • ns4.google.com 216.239.38.10 2001:4860:4802:38::a

    No glue for ns1.google.com, ns2.google.com, ns3.google.com, ns4.google.com: addresses looked up via a resolver.

  4. 0.6.8.4.1.0.0.2.ip6.arpa.asked ns4.google.com 216.239.38.106.2 ms

    Answer (authoritative):

    a.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.2.3.0.0.2.0.8.4.0.6.8.4.1.0.0.2.ip6.arpa.86400PTRns1.google.com.

Nameservers

Every address of every nameserver, asked for 0.6.8.4.1.0.0.2.ip6.arpa's SOA. "Parent" means the 8.4.1.0.0.2.ip6.arpa zone delegates to it; "zone" means 0.6.8.4.1.0.0.2.ip6.arpa lists it itself.

NameserverListed inAddressStatusSerialTime
ns1.google.comparent216.239.32.10 glueauthoritative101623053414 ms
2001:4860:4802:32::a glueauthoritative101623053413 ms
ns2.google.comparent216.239.34.10 glueauthoritative101668721027 ms
2001:4860:4802:34::a glueauthoritative101668721027 ms
ns3.google.comparent216.239.36.10 glueauthoritative101668721013 ms
2001:4860:4802:36::a glueauthoritative101668721013 ms
ns4.google.comparent216.239.38.10 glueauthoritative10166872106.2 ms
2001:4860:4802:38::a glueauthoritative10166872106.7 ms

DNSSEC

0.6.8.4.1.0.0.2.ip6.arpa isn't signed: no DS at the parent and no DNSKEY in the zone.

Hosts and reverse DNS

Every hostname the records point at, resolved to its addresses; each address's PTR (reverse DNS), with ✓ where the PTR name resolves back to the same address.

HostAddressReverse DNS (PTR)
ns1.google.com
nameserver · PTR target
216.239.32.10ns1.google.com ✓
2001:4860:4802:32::ans1.google.com ✓
ns2.google.com
nameserver
216.239.34.10ns2.google.com ✓
2001:4860:4802:34::ans2.google.com ✓
ns3.google.com
nameserver
216.239.36.10ns3.google.com ✓
2001:4860:4802:36::ans3.google.com ✓
ns4.google.com
nameserver
216.239.38.10ns4.google.com ✓
2001:4860:4802:38::ans4.google.com ✓

Public resolvers

What four public resolvers answer right now, from their caches. Highlighted values differ from the authoritative answer: either a recent change they haven't picked up yet (the TTL says how long until they do), or, for A and AAAA, a CDN or geo-routed site handing each resolver location its own addresses.

ResolverPTR
Cloudflare 1.1.1.1ns1.google.com.
TTL 86400
Google 8.8.8.8ns1.google.com.
TTL 21600
Quad9 9.9.9.9timed out
OpenDNS 208.67.222.222ns1.google.com.
TTL 86400

Text dump

; DNS report for a.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.2.3.0.0.2.0.8.4.0.6.8.4.1.0.0.2.ip6.arpa (2001:4860:4802:32::a)
; 2026-11-09 05:25:03 UTC, 89 queries in 2.19 s, zone 0.6.8.4.1.0.0.2.ip6.arpa

;; FINDINGS
;  [WARN] Nameservers disagree on the SOA serial (1016230534 on ns1.google.com; 1016687210 on ns2.google.com, ns3.google.com, ns4.google.com). Normal when two DNS providers serve the zone, each numbering its own copy; otherwise some servers haven't picked up the latest change.
;  [INFO] 0.6.8.4.1.0.0.2.ip6.arpa isn't signed with DNSSEC, so resolvers can't tell forged answers from real ones.

;; RECORDS (authoritative, from ns4.google.com (216.239.38.10))
a.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.2.3.0.0.2.0.8.4.0.6.8.4.1.0.0.2.ip6.arpa.	86400	IN	PTR	ns1.google.com.

;; TRACE
;  a.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.2.3.0.0.2.0.8.4.0.6.8.4.1.0.0.2.ip6.arpa PTR
;  . @j.root-servers.net (192.58.128.30) 38 ms [NOERROR qr]: referral to ip6.arpa.
ip6.arpa.		NS	a.ip6-servers.arpa.	; 199.180.182.53 2620:37:e000::53
ip6.arpa.		NS	b.ip6-servers.arpa.	; 199.253.182.182 2001:500:86::86
ip6.arpa.		NS	c.ip6-servers.arpa.	; 196.216.169.11 2001:43f8:110::11
ip6.arpa.		NS	d.ip6-servers.arpa.	; 200.7.86.53 2001:13c7:7012::53
ip6.arpa.		NS	e.ip6-servers.arpa.	; 203.119.86.101 2001:dd8:6::101
ip6.arpa.		NS	f.ip6-servers.arpa.	; 193.0.9.2 2a13:27c0:30::2
ip6.arpa.	86400	IN	DS	13880 8 2 068554EFCB5861F42AF93EF8E79C442A86C16FC5652E6B6D2419ED527F344D17
ip6.arpa.	86400	IN	DS	45094 8 2 E6B54E0A20CE1EDBFCB6879C02F5782059CECB043A31D804A04AFA51AF01D5FB
ip6.arpa.	86400	IN	DS	64060 8 2 8A11501086330132BE2C23F22DEDF0634AD5FF668B4AA1988E172C6A2A4E5F7B
;  ip6.arpa. @a.ip6-servers.arpa (199.180.182.53) 91 ms [NOERROR qr]: referral to 8.4.1.0.0.2.ip6.arpa.
8.4.1.0.0.2.ip6.arpa.		NS	u.arin.net.	; 204.61.216.50 2001:500:14:6050:ad::1
8.4.1.0.0.2.ip6.arpa.		NS	x.arin.net.	; 199.180.180.63 2001:500:f0::63
8.4.1.0.0.2.ip6.arpa.		NS	y.arin.net.	; 192.82.134.30 2001:500:127::30
8.4.1.0.0.2.ip6.arpa.		NS	z.arin.net.	; 199.180.180.63 2001:500:f0::63
8.4.1.0.0.2.ip6.arpa.		NS	arin.authdns.ripe.net.	; 193.0.9.10 2a13:27c0:30::10
8.4.1.0.0.2.ip6.arpa.		NS	r.arin.net.	; 199.180.180.63 2001:500:f0::63
8.4.1.0.0.2.ip6.arpa.	86400	IN	DS	37714 8 2 EEF58C48BDDB0C677FA70E67F45EC5818C3C7950F8672103353E8DE9609E3719
;  8.4.1.0.0.2.ip6.arpa. @arin.authdns.ripe.net (193.0.9.10) 11 ms [NOERROR qr]: referral to 0.6.8.4.1.0.0.2.ip6.arpa.
0.6.8.4.1.0.0.2.ip6.arpa.		NS	ns1.google.com.	; 216.239.32.10 2001:4860:4802:32::a
0.6.8.4.1.0.0.2.ip6.arpa.		NS	ns2.google.com.	; 216.239.34.10 2001:4860:4802:34::a
0.6.8.4.1.0.0.2.ip6.arpa.		NS	ns3.google.com.	; 216.239.36.10 2001:4860:4802:36::a
0.6.8.4.1.0.0.2.ip6.arpa.		NS	ns4.google.com.	; 216.239.38.10 2001:4860:4802:38::a
;  0.6.8.4.1.0.0.2.ip6.arpa. @ns4.google.com (216.239.38.10) 6.2 ms [NOERROR qr aa]: answer
a.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.2.3.0.0.2.0.8.4.0.6.8.4.1.0.0.2.ip6.arpa.	86400	IN	PTR	ns1.google.com.

;; NAMESERVERS (SOA asked of each address)
;  ns1.google.com [parent]
;    216.239.32.10                           ok                        1016230534  14 ms
;    2001:4860:4802:32::a                    ok                        1016230534  13 ms
;  ns2.google.com [parent]
;    216.239.34.10                           ok                        1016687210  27 ms
;    2001:4860:4802:34::a                    ok                        1016687210  27 ms
;  ns3.google.com [parent]
;    216.239.36.10                           ok                        1016687210  13 ms
;    2001:4860:4802:36::a                    ok                        1016687210  13 ms
;  ns4.google.com [parent]
;    216.239.38.10                           ok                        1016687210  6.2 ms
;    2001:4860:4802:38::a                    ok                        1016687210  6.7 ms

;; DNSSEC: unsigned

;; HOSTS
;  ns1.google.com (nameserver; PTR target)
;    216.239.32.10                           PTR ns1.google.com (confirmed)
;    2001:4860:4802:32::a                    PTR ns1.google.com (confirmed)
;  ns2.google.com (nameserver)
;    216.239.34.10                           PTR ns2.google.com (confirmed)
;    2001:4860:4802:34::a                    PTR ns2.google.com (confirmed)
;  ns3.google.com (nameserver)
;    216.239.36.10                           PTR ns3.google.com (confirmed)
;    2001:4860:4802:36::a                    PTR ns3.google.com (confirmed)
;  ns4.google.com (nameserver)
;    216.239.38.10                           PTR ns4.google.com (confirmed)
;    2001:4860:4802:38::a                    PTR ns4.google.com (confirmed)

;; PUBLIC RESOLVERS
;  Cloudflare PTR   ns1.google.com.  ttl 86400
;  Google     PTR   ns1.google.com.  ttl 21600
;  Quad9      PTR   timed out
;  OpenDNS    PTR   ns1.google.com.  ttl 86400