Made in / Donate

DNS lookup

Everything DNS says about a domain: traced from the root servers down, every record type asked of the domain's own nameservers, each nameserver checked, then every hostname and policy record it points at followed, with SPF, DMARC, DKIM and DNSSEC checked along the way.

Try example.com, gmail.com, www.github.com, dnssec-failed.org, 1.1.1.1. A URL, e-mail address or IP address works too.

2001:4860:4802:34::a

a.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.4.3.0.0.2.0.8.4.0.6.8.4.1.0.0.2.ip6.arpa

Zone 0.6.8.4.1.0.0.2.ip6.arpa88 queries in 0.9 s2026-11-09 05:25:02 UTCNot DNSSEC-signed

WHOIS for 2001:4860:4802:34::a →TextJSON
  • Warning Nameservers disagree on the SOA serial (1016687210 on ns1.google.com, ns2.google.com, ns3.google.com, ns4.google.com; 1016230534 on ns3.google.com). Normal when two DNS providers serve the zone, each numbering its own copy; otherwise some servers haven't picked up the latest change.
  • Note 0.6.8.4.1.0.0.2.ip6.arpa isn't signed with DNSSEC, so resolvers can't tell forged answers from real ones.

Records

Asked directly of ns4.google.com (216.239.38.10), an authoritative server: no cache in between, so these are the live values.

PTR Reverse pointer

86400PTRns2.google.com.
ANY query: 1 records
86400PTRns2.google.com.

No records of type A, AAAA, CNAME, DNAME, NS, SOA, MX, TXT, CAA, HTTPS, SVCB, SRV, NAPTR, DS, DNSKEY, CDS, CDNSKEY, NSEC3PARAM, TLSA, SSHFP, LOC, HINFO, RP, URI, SPF, OPENPGPKEY, ZONEMD, CSYNC.

Resolution trace

  1. .asked e.root-servers.net 192.203.230.105.8 ms

    Referral to ip6.arpa. signed (3 DS)

    • a.ip6-servers.arpa 199.180.182.53 2620:37:e000::53
    • b.ip6-servers.arpa 199.253.182.182 2001:500:86::86
    • c.ip6-servers.arpa 196.216.169.11 2001:43f8:110::11
    • d.ip6-servers.arpa 200.7.86.53 2001:13c7:7012::53
    • e.ip6-servers.arpa 203.119.86.101 2001:dd8:6::101
    • f.ip6-servers.arpa 193.0.9.2 2a13:27c0:30::2

    192.36.148.17 failed: NOERROR

  2. ip6.arpa.asked d.ip6-servers.arpa 200.7.86.53118 ms

    Referral to 8.4.1.0.0.2.ip6.arpa. signed (1 DS)

    • y.arin.net 192.82.134.30 2001:500:127::30
    • r.arin.net 199.180.180.63 2001:500:f0::63
    • arin.authdns.ripe.net 193.0.9.10 2a13:27c0:30::10
    • u.arin.net 204.61.216.50 2001:500:14:6050:ad::1
    • x.arin.net 199.180.180.63 2001:500:f0::63
    • z.arin.net 199.180.180.63 2001:500:f0::63

    No glue for y.arin.net, r.arin.net, arin.authdns.ripe.net, u.arin.net, x.arin.net, z.arin.net: addresses looked up via a resolver.

    203.119.86.101 failed: NOERROR

  3. 8.4.1.0.0.2.ip6.arpa.asked r.arin.net 199.180.180.6390 ms

    Referral to 0.6.8.4.1.0.0.2.ip6.arpa. unsigned delegation

    • ns4.google.com 216.239.38.10 2001:4860:4802:38::a
    • ns3.google.com 216.239.36.10 2001:4860:4802:36::a
    • ns1.google.com 216.239.32.10 2001:4860:4802:32::a
    • ns2.google.com 216.239.34.10 2001:4860:4802:34::a

    No glue for ns4.google.com, ns3.google.com, ns1.google.com, ns2.google.com: addresses looked up via a resolver.

    199.180.180.63 failed: NOERROR

  4. 0.6.8.4.1.0.0.2.ip6.arpa.asked ns3.google.com 216.239.36.1013 ms

    Answer (authoritative):

    a.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.4.3.0.0.2.0.8.4.0.6.8.4.1.0.0.2.ip6.arpa.86400PTRns2.google.com.

Nameservers

Every address of every nameserver, asked for 0.6.8.4.1.0.0.2.ip6.arpa's SOA. "Parent" means the 8.4.1.0.0.2.ip6.arpa zone delegates to it; "zone" means 0.6.8.4.1.0.0.2.ip6.arpa lists it itself.

NameserverListed inAddressStatusSerialTime
ns1.google.comparent216.239.32.10 glueauthoritative101668721013 ms
2001:4860:4802:32::a glueauthoritative101668721014 ms
ns2.google.comparent216.239.34.10 glueauthoritative101668721026 ms
2001:4860:4802:34::a glueauthoritative101668721026 ms
ns3.google.comparent216.239.36.10 glueauthoritative101623053413 ms
2001:4860:4802:36::a glueauthoritative101668721013 ms
ns4.google.comparent216.239.38.10 glueauthoritative10166872106.2 ms
2001:4860:4802:38::a glueauthoritative10166872106.3 ms

DNSSEC

0.6.8.4.1.0.0.2.ip6.arpa isn't signed: no DS at the parent and no DNSKEY in the zone.

Hosts and reverse DNS

Every hostname the records point at, resolved to its addresses; each address's PTR (reverse DNS), with ✓ where the PTR name resolves back to the same address.

HostAddressReverse DNS (PTR)
ns1.google.com
nameserver
216.239.32.10ns1.google.com ✓
2001:4860:4802:32::ans1.google.com ✓
ns2.google.com
nameserver · PTR target
216.239.34.10ns2.google.com ✓
2001:4860:4802:34::ans2.google.com ✓
ns3.google.com
nameserver
216.239.36.10ns3.google.com ✓
2001:4860:4802:36::ans3.google.com ✓
ns4.google.com
nameserver
216.239.38.10ns4.google.com ✓
2001:4860:4802:38::ans4.google.com ✓

Public resolvers

What four public resolvers answer right now, from their caches. Highlighted values differ from the authoritative answer: either a recent change they haven't picked up yet (the TTL says how long until they do), or, for A and AAAA, a CDN or geo-routed site handing each resolver location its own addresses.

ResolverPTR
Cloudflare 1.1.1.1ns2.google.com.
TTL 86389
Google 8.8.8.8ns2.google.com.
TTL 21600
Quad9 9.9.9.9ns2.google.com.
TTL 43200
OpenDNS 208.67.222.222ns2.google.com.
TTL 86400

Text dump

; DNS report for a.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.4.3.0.0.2.0.8.4.0.6.8.4.1.0.0.2.ip6.arpa (2001:4860:4802:34::a)
; 2026-11-09 05:25:02 UTC, 88 queries in 0.93 s, zone 0.6.8.4.1.0.0.2.ip6.arpa

;; FINDINGS
;  [WARN] Nameservers disagree on the SOA serial (1016687210 on ns1.google.com, ns2.google.com, ns3.google.com, ns4.google.com; 1016230534 on ns3.google.com). Normal when two DNS providers serve the zone, each numbering its own copy; otherwise some servers haven't picked up the latest change.
;  [INFO] 0.6.8.4.1.0.0.2.ip6.arpa isn't signed with DNSSEC, so resolvers can't tell forged answers from real ones.

;; RECORDS (authoritative, from ns4.google.com (216.239.38.10))
a.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.4.3.0.0.2.0.8.4.0.6.8.4.1.0.0.2.ip6.arpa.	86400	IN	PTR	ns2.google.com.

;; TRACE
;  a.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.4.3.0.0.2.0.8.4.0.6.8.4.1.0.0.2.ip6.arpa PTR
;  . @e.root-servers.net (192.203.230.10) 5.8 ms [NOERROR qr]: referral to ip6.arpa.
ip6.arpa.		NS	a.ip6-servers.arpa.	; 199.180.182.53 2620:37:e000::53
ip6.arpa.		NS	b.ip6-servers.arpa.	; 199.253.182.182 2001:500:86::86
ip6.arpa.		NS	c.ip6-servers.arpa.	; 196.216.169.11 2001:43f8:110::11
ip6.arpa.		NS	d.ip6-servers.arpa.	; 200.7.86.53 2001:13c7:7012::53
ip6.arpa.		NS	e.ip6-servers.arpa.	; 203.119.86.101 2001:dd8:6::101
ip6.arpa.		NS	f.ip6-servers.arpa.	; 193.0.9.2 2a13:27c0:30::2
ip6.arpa.	86400	IN	DS	13880 8 2 068554EFCB5861F42AF93EF8E79C442A86C16FC5652E6B6D2419ED527F344D17
ip6.arpa.	86400	IN	DS	45094 8 2 E6B54E0A20CE1EDBFCB6879C02F5782059CECB043A31D804A04AFA51AF01D5FB
ip6.arpa.	86400	IN	DS	64060 8 2 8A11501086330132BE2C23F22DEDF0634AD5FF668B4AA1988E172C6A2A4E5F7B
;  ip6.arpa. @d.ip6-servers.arpa (200.7.86.53) 118 ms [NOERROR qr]: referral to 8.4.1.0.0.2.ip6.arpa.
8.4.1.0.0.2.ip6.arpa.		NS	y.arin.net.	; 192.82.134.30 2001:500:127::30
8.4.1.0.0.2.ip6.arpa.		NS	r.arin.net.	; 199.180.180.63 2001:500:f0::63
8.4.1.0.0.2.ip6.arpa.		NS	arin.authdns.ripe.net.	; 193.0.9.10 2a13:27c0:30::10
8.4.1.0.0.2.ip6.arpa.		NS	u.arin.net.	; 204.61.216.50 2001:500:14:6050:ad::1
8.4.1.0.0.2.ip6.arpa.		NS	x.arin.net.	; 199.180.180.63 2001:500:f0::63
8.4.1.0.0.2.ip6.arpa.		NS	z.arin.net.	; 199.180.180.63 2001:500:f0::63
8.4.1.0.0.2.ip6.arpa.	86400	IN	DS	37714 8 2 EEF58C48BDDB0C677FA70E67F45EC5818C3C7950F8672103353E8DE9609E3719
;  8.4.1.0.0.2.ip6.arpa. @r.arin.net (199.180.180.63) 90 ms [NOERROR qr]: referral to 0.6.8.4.1.0.0.2.ip6.arpa.
0.6.8.4.1.0.0.2.ip6.arpa.		NS	ns4.google.com.	; 216.239.38.10 2001:4860:4802:38::a
0.6.8.4.1.0.0.2.ip6.arpa.		NS	ns3.google.com.	; 216.239.36.10 2001:4860:4802:36::a
0.6.8.4.1.0.0.2.ip6.arpa.		NS	ns1.google.com.	; 216.239.32.10 2001:4860:4802:32::a
0.6.8.4.1.0.0.2.ip6.arpa.		NS	ns2.google.com.	; 216.239.34.10 2001:4860:4802:34::a
;  0.6.8.4.1.0.0.2.ip6.arpa. @ns3.google.com (216.239.36.10) 13 ms [NOERROR qr aa]: answer
a.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.4.3.0.0.2.0.8.4.0.6.8.4.1.0.0.2.ip6.arpa.	86400	IN	PTR	ns2.google.com.

;; NAMESERVERS (SOA asked of each address)
;  ns1.google.com [parent]
;    216.239.32.10                           ok                        1016687210  13 ms
;    2001:4860:4802:32::a                    ok                        1016687210  14 ms
;  ns2.google.com [parent]
;    216.239.34.10                           ok                        1016687210  26 ms
;    2001:4860:4802:34::a                    ok                        1016687210  26 ms
;  ns3.google.com [parent]
;    216.239.36.10                           ok                        1016230534  13 ms
;    2001:4860:4802:36::a                    ok                        1016687210  13 ms
;  ns4.google.com [parent]
;    216.239.38.10                           ok                        1016687210  6.2 ms
;    2001:4860:4802:38::a                    ok                        1016687210  6.3 ms

;; DNSSEC: unsigned

;; HOSTS
;  ns1.google.com (nameserver)
;    216.239.32.10                           PTR ns1.google.com (confirmed)
;    2001:4860:4802:32::a                    PTR ns1.google.com (confirmed)
;  ns2.google.com (nameserver; PTR target)
;    216.239.34.10                           PTR ns2.google.com (confirmed)
;    2001:4860:4802:34::a                    PTR ns2.google.com (confirmed)
;  ns3.google.com (nameserver)
;    216.239.36.10                           PTR ns3.google.com (confirmed)
;    2001:4860:4802:36::a                    PTR ns3.google.com (confirmed)
;  ns4.google.com (nameserver)
;    216.239.38.10                           PTR ns4.google.com (confirmed)
;    2001:4860:4802:38::a                    PTR ns4.google.com (confirmed)

;; PUBLIC RESOLVERS
;  Cloudflare PTR   ns2.google.com.  ttl 86389
;  Google     PTR   ns2.google.com.  ttl 21600
;  Quad9      PTR   ns2.google.com.  ttl 43200
;  OpenDNS    PTR   ns2.google.com.  ttl 86400