DNS lookup
Everything DNS says about a domain: traced from the root servers down, every record type asked of the domain's own nameservers, each nameserver checked, then every hostname and policy record it points at followed, with SPF, DMARC, DKIM and DNSSEC checked along the way.
2a01:111:f403:f90a::4
4.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.a.0.9.f.3.0.4.f.1.1.1.0.1.0.a.2.ip6.arpa
Zone 1.1.1.0.1.0.a.2.ip6.arpa90 queries in 0.8 s2026-11-09 05:35:11 UTCNot DNSSEC-signed
- Note 1.1.1.0.1.0.a.2.ip6.arpa isn't signed with DNSSEC, so resolvers can't tell forged answers from real ones.
Records
Asked directly of ns1-03.azure-dns.com (13.107.236.3), an authoritative server: no cache in between, so these are the live values.
PTR Reverse pointer
| 3600 | PTR | mail-bnypr04cu00104.inbound.protection.outlook.com. |
ANY query: refused politely (RFC 8482)
| 300 | HINFO | "RFC8482" "" |
No records of type A, AAAA, CNAME, DNAME, NS, SOA, MX, TXT, CAA, HTTPS, SVCB, SRV, NAPTR, DS, DNSKEY, CDS, CDNSKEY, NSEC3PARAM, TLSA, SSHFP, LOC, HINFO, RP, URI, SPF, OPENPGPKEY, ZONEMD, CSYNC.
Resolution trace
- .asked m.root-servers.net 202.12.27.3314 ms
Referral to ip6.arpa. signed (3 DS)
- f.ip6-servers.arpa 193.0.9.2 2a13:27c0:30::2
- d.ip6-servers.arpa 200.7.86.53 2001:13c7:7012::53
- a.ip6-servers.arpa 199.180.182.53 2620:37:e000::53
- c.ip6-servers.arpa 196.216.169.11 2001:43f8:110::11
- b.ip6-servers.arpa 199.253.182.182 2001:500:86::86
- e.ip6-servers.arpa 203.119.86.101 2001:dd8:6::101
193.0.14.129 failed: NOERROR
- ip6.arpa.asked a.ip6-servers.arpa 199.180.182.5390 ms
Referral to 0.a.2.ip6.arpa. signed (1 DS)
- ns3.lacnic.net 200.3.13.14 2001:13c7:7002:3000::14
- ns3.afrinic.net 204.61.216.100 2001:500:14:6100:ad::1
- rirns.arin.net 199.253.249.53 2620:38:2000::53
- pri.authdns.ripe.net 193.0.9.5 2a13:27c0:30::5
- ns4.apnic.net 202.12.31.53 2001:dd8:12::53
No glue for ns3.lacnic.net, ns3.afrinic.net, rirns.arin.net, pri.authdns.ripe.net, ns4.apnic.net: addresses looked up via a resolver.
196.216.169.11 failed: NOERROR
- 0.a.2.ip6.arpa.asked ns3.afrinic.net 204.61.216.1005.6 ms
Referral to 1.1.1.0.1.0.a.2.ip6.arpa. unsigned delegation
- ns1-03.azure-dns.com 13.107.236.3 2603:1061:0:700::3
- ns4-03.azure-dns.info 208.84.5.3 2620:1ec:bda:700::3
- ns3-03.azure-dns.org 204.14.183.3 2a01:111:4000:700::3
- ns2-03.azure-dns.net 150.171.21.3 2620:1ec:8ec:700::3
No glue for ns1-03.azure-dns.com, ns4-03.azure-dns.info, ns3-03.azure-dns.org, ns2-03.azure-dns.net: addresses looked up via a resolver.
- 1.1.1.0.1.0.a.2.ip6.arpa.asked ns2-03.azure-dns.net 150.171.21.36.5 ms
Answer (authoritative):
4.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.a.0.9.f.3.0.4.f.1.1.1.0.1.0.a.2.ip6.arpa. 3600 PTR mail-bnypr04cu00104.inbound.protection.outlook.com.
Nameservers
Every address of every nameserver, asked for 1.1.1.0.1.0.a.2.ip6.arpa's SOA. "Parent" means the 0.a.2.ip6.arpa zone delegates to it; "zone" means 1.1.1.0.1.0.a.2.ip6.arpa lists it itself.
| Nameserver | Listed in | Address | Status | Serial | Time |
|---|---|---|---|---|---|
| ns1-03.azure-dns.com | parent + zone | 13.107.236.3 glue | authoritative | 1 | 6.2 ms |
| 2603:1061:0:700::3 glue | authoritative | 1 | 7.9 ms | ||
| ns2-03.azure-dns.net | parent + zone | 150.171.21.3 glue | authoritative | 1 | 6.7 ms |
| 2620:1ec:8ec:700::3 glue | authoritative | 1 | 8.0 ms | ||
| ns3-03.azure-dns.org | parent + zone | 204.14.183.3 glue | authoritative | 1 | 6.7 ms |
| 2a01:111:4000:700::3 glue | authoritative | 1 | 8.3 ms | ||
| ns4-03.azure-dns.info | parent + zone | 208.84.5.3 glue | authoritative | 1 | 6.7 ms |
| 2620:1ec:bda:700::3 glue | authoritative | 1 | 8.6 ms |
DNSSEC
1.1.1.0.1.0.a.2.ip6.arpa isn't signed: no DS at the parent and no DNSKEY in the zone.
Hosts and reverse DNS
Every hostname the records point at, resolved to its addresses; each address's PTR (reverse DNS), with ✓ where the PTR name resolves back to the same address.
| Host | Address | Reverse DNS (PTR) |
|---|---|---|
ns1-03.azure-dns.com nameserver | 13.107.236.3 | ns1-03.azure-dns.com ✓ |
| 2603:1061:0:700::3 | ns1-03.azure-dns.com ✓ | |
ns2-03.azure-dns.net nameserver | 150.171.21.3 | ns2-03.azure-dns.net ✓ |
| 2620:1ec:8ec:700::3 | ns2-03.azure-dns.net ✓ | |
ns3-03.azure-dns.org nameserver | 204.14.183.3 | ns3-03.azure-dns.org ✓ |
| 2a01:111:4000:700::3 | ns3-03.azure-dns.org ✓ | |
ns4-03.azure-dns.info nameserver | 208.84.5.3 | ns4-03.azure-dns.info ✓ |
| 2620:1ec:bda:700::3 | ns4-03.azure-dns.info ✓ | |
mail-bnypr04cu00104.inbound.protection.outlook.com PTR target | 52.101.60.148 | mail-bnypr04cu00104.inbound.protection.outlook.com ✓ |
| 2a01:111:f403:f90a::4 | mail-bnypr04cu00104.inbound.protection.outlook.com ✓ |
Public resolvers
What four public resolvers answer right now, from their caches. Highlighted values differ from the authoritative answer: either a recent change they haven't picked up yet (the TTL says how long until they do), or, for A and AAAA, a CDN or geo-routed site handing each resolver location its own addresses.
| Resolver | PTR |
|---|---|
| Cloudflare 1.1.1.1 | mail-bnypr04cu00104.inbound.protection.outlook.com. TTL 3600 |
| Google 8.8.8.8 | mail-bnypr04cu00104.inbound.protection.outlook.com. TTL 774 |
| Quad9 9.9.9.9 | mail-bnypr04cu00104.inbound.protection.outlook.com. TTL 3600 |
| OpenDNS 208.67.222.222 | mail-bnypr04cu00104.inbound.protection.outlook.com. TTL 3600 |
Text dump
; DNS report for 4.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.a.0.9.f.3.0.4.f.1.1.1.0.1.0.a.2.ip6.arpa (2a01:111:f403:f90a::4) ; 2026-11-09 05:35:11 UTC, 90 queries in 0.80 s, zone 1.1.1.0.1.0.a.2.ip6.arpa ;; FINDINGS ; [INFO] 1.1.1.0.1.0.a.2.ip6.arpa isn't signed with DNSSEC, so resolvers can't tell forged answers from real ones. ;; RECORDS (authoritative, from ns1-03.azure-dns.com (13.107.236.3)) 4.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.a.0.9.f.3.0.4.f.1.1.1.0.1.0.a.2.ip6.arpa. 3600 IN PTR mail-bnypr04cu00104.inbound.protection.outlook.com. ;; TRACE ; 4.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.a.0.9.f.3.0.4.f.1.1.1.0.1.0.a.2.ip6.arpa PTR ; . @m.root-servers.net (202.12.27.33) 14 ms [NOERROR qr]: referral to ip6.arpa. ip6.arpa. NS f.ip6-servers.arpa. ; 193.0.9.2 2a13:27c0:30::2 ip6.arpa. NS d.ip6-servers.arpa. ; 200.7.86.53 2001:13c7:7012::53 ip6.arpa. NS a.ip6-servers.arpa. ; 199.180.182.53 2620:37:e000::53 ip6.arpa. NS c.ip6-servers.arpa. ; 196.216.169.11 2001:43f8:110::11 ip6.arpa. NS b.ip6-servers.arpa. ; 199.253.182.182 2001:500:86::86 ip6.arpa. NS e.ip6-servers.arpa. ; 203.119.86.101 2001:dd8:6::101 ip6.arpa. 86400 IN DS 13880 8 2 068554EFCB5861F42AF93EF8E79C442A86C16FC5652E6B6D2419ED527F344D17 ip6.arpa. 86400 IN DS 45094 8 2 E6B54E0A20CE1EDBFCB6879C02F5782059CECB043A31D804A04AFA51AF01D5FB ip6.arpa. 86400 IN DS 64060 8 2 8A11501086330132BE2C23F22DEDF0634AD5FF668B4AA1988E172C6A2A4E5F7B ; ip6.arpa. @a.ip6-servers.arpa (199.180.182.53) 90 ms [NOERROR qr]: referral to 0.a.2.ip6.arpa. 0.a.2.ip6.arpa. NS ns3.lacnic.net. ; 200.3.13.14 2001:13c7:7002:3000::14 0.a.2.ip6.arpa. NS ns3.afrinic.net. ; 204.61.216.100 2001:500:14:6100:ad::1 0.a.2.ip6.arpa. NS rirns.arin.net. ; 199.253.249.53 2620:38:2000::53 0.a.2.ip6.arpa. NS pri.authdns.ripe.net. ; 193.0.9.5 2a13:27c0:30::5 0.a.2.ip6.arpa. NS ns4.apnic.net. ; 202.12.31.53 2001:dd8:12::53 0.a.2.ip6.arpa. 86400 IN DS 6737 13 2 F346C2BE7A1D04F367DC2B24556FA5F6AE515F4C005C7D44508B31E8D79C9694 ; 0.a.2.ip6.arpa. @ns3.afrinic.net (204.61.216.100) 5.6 ms [NOERROR qr]: referral to 1.1.1.0.1.0.a.2.ip6.arpa. 1.1.1.0.1.0.a.2.ip6.arpa. NS ns1-03.azure-dns.com. ; 13.107.236.3 2603:1061:0:700::3 1.1.1.0.1.0.a.2.ip6.arpa. NS ns4-03.azure-dns.info. ; 208.84.5.3 2620:1ec:bda:700::3 1.1.1.0.1.0.a.2.ip6.arpa. NS ns3-03.azure-dns.org. ; 204.14.183.3 2a01:111:4000:700::3 1.1.1.0.1.0.a.2.ip6.arpa. NS ns2-03.azure-dns.net. ; 150.171.21.3 2620:1ec:8ec:700::3 ; 1.1.1.0.1.0.a.2.ip6.arpa. @ns2-03.azure-dns.net (150.171.21.3) 6.5 ms [NOERROR qr aa]: answer 4.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.a.0.9.f.3.0.4.f.1.1.1.0.1.0.a.2.ip6.arpa. 3600 IN PTR mail-bnypr04cu00104.inbound.protection.outlook.com. ;; NAMESERVERS (SOA asked of each address) ; ns1-03.azure-dns.com [parent+zone] ; 13.107.236.3 ok 1 6.2 ms ; 2603:1061:0:700::3 ok 1 7.9 ms ; ns2-03.azure-dns.net [parent+zone] ; 150.171.21.3 ok 1 6.7 ms ; 2620:1ec:8ec:700::3 ok 1 8.0 ms ; ns3-03.azure-dns.org [parent+zone] ; 204.14.183.3 ok 1 6.7 ms ; 2a01:111:4000:700::3 ok 1 8.3 ms ; ns4-03.azure-dns.info [parent+zone] ; 208.84.5.3 ok 1 6.7 ms ; 2620:1ec:bda:700::3 ok 1 8.6 ms ;; DNSSEC: unsigned ;; HOSTS ; ns1-03.azure-dns.com (nameserver) ; 13.107.236.3 PTR ns1-03.azure-dns.com (confirmed) ; 2603:1061:0:700::3 PTR ns1-03.azure-dns.com (confirmed) ; ns2-03.azure-dns.net (nameserver) ; 150.171.21.3 PTR ns2-03.azure-dns.net (confirmed) ; 2620:1ec:8ec:700::3 PTR ns2-03.azure-dns.net (confirmed) ; ns3-03.azure-dns.org (nameserver) ; 204.14.183.3 PTR ns3-03.azure-dns.org (confirmed) ; 2a01:111:4000:700::3 PTR ns3-03.azure-dns.org (confirmed) ; ns4-03.azure-dns.info (nameserver) ; 208.84.5.3 PTR ns4-03.azure-dns.info (confirmed) ; 2620:1ec:bda:700::3 PTR ns4-03.azure-dns.info (confirmed) ; mail-bnypr04cu00104.inbound.protection.outlook.com (PTR target) ; 52.101.60.148 PTR mail-bnypr04cu00104.inbound.protection.outlook.com (confirmed) ; 2a01:111:f403:f90a::4 PTR mail-bnypr04cu00104.inbound.protection.outlook.com (confirmed) ;; PUBLIC RESOLVERS ; Cloudflare PTR mail-bnypr04cu00104.inbound.protection.outlook.com. ttl 3600 ; Google PTR mail-bnypr04cu00104.inbound.protection.outlook.com. ttl 774 ; Quad9 PTR mail-bnypr04cu00104.inbound.protection.outlook.com. ttl 3600 ; OpenDNS PTR mail-bnypr04cu00104.inbound.protection.outlook.com. ttl 3600