Made in / Donate

DNS lookup

Everything DNS says about a domain: traced from the root servers down, every record type asked of the domain's own nameservers, each nameserver checked, then every hostname and policy record it points at followed, with SPF, DMARC, DKIM and DNSSEC checked along the way.

Try example.com, gmail.com, www.github.com, dnssec-failed.org, 1.1.1.1. A URL, e-mail address or IP address works too.

2001:4860:4802:38::a

a.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.8.3.0.0.2.0.8.4.0.6.8.4.1.0.0.2.ip6.arpa

Zone 0.6.8.4.1.0.0.2.ip6.arpa88 queries in 0.7 s2026-11-09 05:25:02 UTCNot DNSSEC-signed

WHOIS for 2001:4860:4802:38::a →TextJSON
  • Warning Nameservers disagree on the SOA serial (1016230534 on ns1.google.com, ns3.google.com; 1016687210 on ns2.google.com, ns4.google.com). Normal when two DNS providers serve the zone, each numbering its own copy; otherwise some servers haven't picked up the latest change.
  • Note 0.6.8.4.1.0.0.2.ip6.arpa isn't signed with DNSSEC, so resolvers can't tell forged answers from real ones.

Records

Asked directly of ns4.google.com (216.239.38.10), an authoritative server: no cache in between, so these are the live values.

PTR Reverse pointer

86400PTRns4.google.com.
ANY query: 1 records
86400PTRns4.google.com.

No records of type A, AAAA, CNAME, DNAME, NS, SOA, MX, TXT, CAA, HTTPS, SVCB, SRV, NAPTR, DS, DNSKEY, CDS, CDNSKEY, NSEC3PARAM, TLSA, SSHFP, LOC, HINFO, RP, URI, SPF, OPENPGPKEY, ZONEMD, CSYNC.

Resolution trace

  1. .asked e.root-servers.net 192.203.230.105.7 ms

    Referral to ip6.arpa. signed (3 DS)

    • a.ip6-servers.arpa 199.180.182.53 2620:37:e000::53
    • b.ip6-servers.arpa 199.253.182.182 2001:500:86::86
    • c.ip6-servers.arpa 196.216.169.11 2001:43f8:110::11
    • d.ip6-servers.arpa 200.7.86.53 2001:13c7:7012::53
    • e.ip6-servers.arpa 203.119.86.101 2001:dd8:6::101
    • f.ip6-servers.arpa 193.0.9.2 2a13:27c0:30::2
  2. ip6.arpa.asked f.ip6-servers.arpa 193.0.9.212 ms

    Referral to 8.4.1.0.0.2.ip6.arpa. signed (1 DS)

    • r.arin.net 199.180.180.63 2001:500:f0::63
    • u.arin.net 204.61.216.50 2001:500:14:6050:ad::1
    • x.arin.net 199.180.180.63 2001:500:f0::63
    • y.arin.net 192.82.134.30 2001:500:127::30
    • z.arin.net 199.180.180.63 2001:500:f0::63
    • arin.authdns.ripe.net 193.0.9.10 2a13:27c0:30::10

    No glue for r.arin.net, u.arin.net, x.arin.net, y.arin.net, z.arin.net, arin.authdns.ripe.net: addresses looked up via a resolver.

  3. 8.4.1.0.0.2.ip6.arpa.asked y.arin.net 192.82.134.306.3 ms

    Referral to 0.6.8.4.1.0.0.2.ip6.arpa. unsigned delegation

    • ns4.google.com 216.239.38.10 2001:4860:4802:38::a
    • ns2.google.com 216.239.34.10 2001:4860:4802:34::a
    • ns1.google.com 216.239.32.10 2001:4860:4802:32::a
    • ns3.google.com 216.239.36.10 2001:4860:4802:36::a

    No glue for ns4.google.com, ns2.google.com, ns1.google.com, ns3.google.com: addresses looked up via a resolver.

  4. 0.6.8.4.1.0.0.2.ip6.arpa.asked ns3.google.com 216.239.36.1013 ms

    Answer (authoritative):

    a.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.8.3.0.0.2.0.8.4.0.6.8.4.1.0.0.2.ip6.arpa.86400PTRns4.google.com.

Nameservers

Every address of every nameserver, asked for 0.6.8.4.1.0.0.2.ip6.arpa's SOA. "Parent" means the 8.4.1.0.0.2.ip6.arpa zone delegates to it; "zone" means 0.6.8.4.1.0.0.2.ip6.arpa lists it itself.

NameserverListed inAddressStatusSerialTime
ns1.google.comparent216.239.32.10 glueauthoritative101623053413 ms
2001:4860:4802:32::a glueauthoritative101623053414 ms
ns2.google.comparent216.239.34.10 glueauthoritative101668721026 ms
2001:4860:4802:34::a glueauthoritative101668721026 ms
ns3.google.comparent216.239.36.10 glueauthoritative101623053413 ms
2001:4860:4802:36::a glueauthoritative101623053413 ms
ns4.google.comparent216.239.38.10 glueauthoritative10166872106.2 ms
2001:4860:4802:38::a glueauthoritative10166872106.4 ms

DNSSEC

0.6.8.4.1.0.0.2.ip6.arpa isn't signed: no DS at the parent and no DNSKEY in the zone.

Hosts and reverse DNS

Every hostname the records point at, resolved to its addresses; each address's PTR (reverse DNS), with ✓ where the PTR name resolves back to the same address.

HostAddressReverse DNS (PTR)
ns1.google.com
nameserver
216.239.32.10ns1.google.com ✓
2001:4860:4802:32::ans1.google.com ✓
ns2.google.com
nameserver
216.239.34.10ns2.google.com ✓
2001:4860:4802:34::ans2.google.com ✓
ns3.google.com
nameserver
216.239.36.10ns3.google.com ✓
2001:4860:4802:36::ans3.google.com ✓
ns4.google.com
nameserver · PTR target
216.239.38.10ns4.google.com ✓
2001:4860:4802:38::ans4.google.com ✓

Public resolvers

What four public resolvers answer right now, from their caches. Highlighted values differ from the authoritative answer: either a recent change they haven't picked up yet (the TTL says how long until they do), or, for A and AAAA, a CDN or geo-routed site handing each resolver location its own addresses.

ResolverPTR
Cloudflare 1.1.1.1ns4.google.com.
TTL 86396
Google 8.8.8.8ns4.google.com.
TTL 21600
Quad9 9.9.9.9ns4.google.com.
TTL 43200
OpenDNS 208.67.222.222ns4.google.com.
TTL 86400

Text dump

; DNS report for a.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.8.3.0.0.2.0.8.4.0.6.8.4.1.0.0.2.ip6.arpa (2001:4860:4802:38::a)
; 2026-11-09 05:25:02 UTC, 88 queries in 0.71 s, zone 0.6.8.4.1.0.0.2.ip6.arpa

;; FINDINGS
;  [WARN] Nameservers disagree on the SOA serial (1016230534 on ns1.google.com, ns3.google.com; 1016687210 on ns2.google.com, ns4.google.com). Normal when two DNS providers serve the zone, each numbering its own copy; otherwise some servers haven't picked up the latest change.
;  [INFO] 0.6.8.4.1.0.0.2.ip6.arpa isn't signed with DNSSEC, so resolvers can't tell forged answers from real ones.

;; RECORDS (authoritative, from ns4.google.com (216.239.38.10))
a.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.8.3.0.0.2.0.8.4.0.6.8.4.1.0.0.2.ip6.arpa.	86400	IN	PTR	ns4.google.com.

;; TRACE
;  a.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.8.3.0.0.2.0.8.4.0.6.8.4.1.0.0.2.ip6.arpa PTR
;  . @e.root-servers.net (192.203.230.10) 5.7 ms [NOERROR qr]: referral to ip6.arpa.
ip6.arpa.		NS	a.ip6-servers.arpa.	; 199.180.182.53 2620:37:e000::53
ip6.arpa.		NS	b.ip6-servers.arpa.	; 199.253.182.182 2001:500:86::86
ip6.arpa.		NS	c.ip6-servers.arpa.	; 196.216.169.11 2001:43f8:110::11
ip6.arpa.		NS	d.ip6-servers.arpa.	; 200.7.86.53 2001:13c7:7012::53
ip6.arpa.		NS	e.ip6-servers.arpa.	; 203.119.86.101 2001:dd8:6::101
ip6.arpa.		NS	f.ip6-servers.arpa.	; 193.0.9.2 2a13:27c0:30::2
ip6.arpa.	86400	IN	DS	13880 8 2 068554EFCB5861F42AF93EF8E79C442A86C16FC5652E6B6D2419ED527F344D17
ip6.arpa.	86400	IN	DS	45094 8 2 E6B54E0A20CE1EDBFCB6879C02F5782059CECB043A31D804A04AFA51AF01D5FB
ip6.arpa.	86400	IN	DS	64060 8 2 8A11501086330132BE2C23F22DEDF0634AD5FF668B4AA1988E172C6A2A4E5F7B
;  ip6.arpa. @f.ip6-servers.arpa (193.0.9.2) 12 ms [NOERROR qr]: referral to 8.4.1.0.0.2.ip6.arpa.
8.4.1.0.0.2.ip6.arpa.		NS	r.arin.net.	; 199.180.180.63 2001:500:f0::63
8.4.1.0.0.2.ip6.arpa.		NS	u.arin.net.	; 204.61.216.50 2001:500:14:6050:ad::1
8.4.1.0.0.2.ip6.arpa.		NS	x.arin.net.	; 199.180.180.63 2001:500:f0::63
8.4.1.0.0.2.ip6.arpa.		NS	y.arin.net.	; 192.82.134.30 2001:500:127::30
8.4.1.0.0.2.ip6.arpa.		NS	z.arin.net.	; 199.180.180.63 2001:500:f0::63
8.4.1.0.0.2.ip6.arpa.		NS	arin.authdns.ripe.net.	; 193.0.9.10 2a13:27c0:30::10
8.4.1.0.0.2.ip6.arpa.	86400	IN	DS	37714 8 2 EEF58C48BDDB0C677FA70E67F45EC5818C3C7950F8672103353E8DE9609E3719
;  8.4.1.0.0.2.ip6.arpa. @y.arin.net (192.82.134.30) 6.3 ms [NOERROR qr]: referral to 0.6.8.4.1.0.0.2.ip6.arpa.
0.6.8.4.1.0.0.2.ip6.arpa.		NS	ns4.google.com.	; 216.239.38.10 2001:4860:4802:38::a
0.6.8.4.1.0.0.2.ip6.arpa.		NS	ns2.google.com.	; 216.239.34.10 2001:4860:4802:34::a
0.6.8.4.1.0.0.2.ip6.arpa.		NS	ns1.google.com.	; 216.239.32.10 2001:4860:4802:32::a
0.6.8.4.1.0.0.2.ip6.arpa.		NS	ns3.google.com.	; 216.239.36.10 2001:4860:4802:36::a
;  0.6.8.4.1.0.0.2.ip6.arpa. @ns3.google.com (216.239.36.10) 13 ms [NOERROR qr aa]: answer
a.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.8.3.0.0.2.0.8.4.0.6.8.4.1.0.0.2.ip6.arpa.	86400	IN	PTR	ns4.google.com.

;; NAMESERVERS (SOA asked of each address)
;  ns1.google.com [parent]
;    216.239.32.10                           ok                        1016230534  13 ms
;    2001:4860:4802:32::a                    ok                        1016230534  14 ms
;  ns2.google.com [parent]
;    216.239.34.10                           ok                        1016687210  26 ms
;    2001:4860:4802:34::a                    ok                        1016687210  26 ms
;  ns3.google.com [parent]
;    216.239.36.10                           ok                        1016230534  13 ms
;    2001:4860:4802:36::a                    ok                        1016230534  13 ms
;  ns4.google.com [parent]
;    216.239.38.10                           ok                        1016687210  6.2 ms
;    2001:4860:4802:38::a                    ok                        1016687210  6.4 ms

;; DNSSEC: unsigned

;; HOSTS
;  ns1.google.com (nameserver)
;    216.239.32.10                           PTR ns1.google.com (confirmed)
;    2001:4860:4802:32::a                    PTR ns1.google.com (confirmed)
;  ns2.google.com (nameserver)
;    216.239.34.10                           PTR ns2.google.com (confirmed)
;    2001:4860:4802:34::a                    PTR ns2.google.com (confirmed)
;  ns3.google.com (nameserver)
;    216.239.36.10                           PTR ns3.google.com (confirmed)
;    2001:4860:4802:36::a                    PTR ns3.google.com (confirmed)
;  ns4.google.com (nameserver; PTR target)
;    216.239.38.10                           PTR ns4.google.com (confirmed)
;    2001:4860:4802:38::a                    PTR ns4.google.com (confirmed)

;; PUBLIC RESOLVERS
;  Cloudflare PTR   ns4.google.com.  ttl 86396
;  Google     PTR   ns4.google.com.  ttl 21600
;  Quad9      PTR   ns4.google.com.  ttl 43200
;  OpenDNS    PTR   ns4.google.com.  ttl 86400