Made in / Donate

DNS lookup

Everything DNS says about a domain: traced from the root servers down, every record type asked of the domain's own nameservers, each nameserver checked, then every hostname and policy record it points at followed, with SPF, DMARC, DKIM and DNSSEC checked along the way.

Try example.com, gmail.com, www.github.com, dnssec-failed.org, 1.1.1.1. A URL, e-mail address or IP address works too.

68.87.85.132

132.85.87.68.in-addr.arpa

Zone 87.68.in-addr.arpa96 queries in 2.1 s2026-11-09 05:22:47 UTCNot DNSSEC-signed

WHOIS for 68.87.85.132 →TextJSON
  • Note 87.68.in-addr.arpa isn't signed with DNSSEC, so resolvers can't tell forged answers from real ones.

Records

Asked directly of dns101.comcast.net (69.252.250.103), an authoritative server: no cache in between, so these are the live values.

PTR Reverse pointer

7200PTRdns102.comcast.net.
ANY query: 1 records
7200PTRdns102.comcast.net.

No records of type A, AAAA, CNAME, DNAME, NS, SOA, MX, TXT, CAA, HTTPS, SVCB, SRV, NAPTR, DS, DNSKEY, CDS, CDNSKEY, NSEC3PARAM, TLSA, SSHFP, LOC, HINFO, RP, URI, SPF, OPENPGPKEY, ZONEMD, CSYNC.

Resolution trace

  1. .asked d.root-servers.net 199.7.91.135.7 ms

    Referral to in-addr.arpa. signed (4 DS)

    • a.in-addr-servers.arpa 199.180.182.53 2620:37:e000::53
    • b.in-addr-servers.arpa 199.253.183.183 2001:500:87::87
    • c.in-addr-servers.arpa 196.216.169.10 2001:43f8:110::10
    • d.in-addr-servers.arpa 200.10.60.53 2001:13c7:7010::53
    • e.in-addr-servers.arpa 203.119.86.101 2001:dd8:6::101
    • f.in-addr-servers.arpa 193.0.9.1 2a13:27c0:30::1
  2. in-addr.arpa.asked c.in-addr-servers.arpa 196.216.169.10166 ms

    Referral to 68.in-addr.arpa. signed (1 DS)

    • r.arin.net 199.180.180.63 2001:500:f0::63
    • u.arin.net 204.61.216.50 2001:500:14:6050:ad::1
    • x.arin.net 199.180.180.63 2001:500:f0::63
    • y.arin.net 192.82.134.30 2001:500:127::30
    • z.arin.net 199.180.180.63 2001:500:f0::63
    • arin.authdns.ripe.net 193.0.9.10 2a13:27c0:30::10

    No glue for r.arin.net, u.arin.net, x.arin.net, y.arin.net, z.arin.net, arin.authdns.ripe.net: addresses looked up via a resolver.

  3. 68.in-addr.arpa.asked r.arin.net 199.180.180.6390 ms

    Referral to 87.68.in-addr.arpa. unsigned delegation

    • dns105.comcast.net 68.87.72.244 2001:558:100e:5:68:87:72:244
    • dns102.comcast.net 68.87.85.132 2001:558:1004:7:68:87:85:132
    • dns103.comcast.net 68.87.76.228 2001:558:1014:c:68:87:76:228
    • dns104.comcast.net 68.87.68.244 2001:558:100a:5:68:87:68:244
    • dns101.comcast.net 69.252.250.103 2001:558:fe23:8:69:252:250:103

    No glue for dns105.comcast.net, dns102.comcast.net, dns103.comcast.net, dns104.comcast.net, dns101.comcast.net: addresses looked up via a resolver.

    199.180.180.63 failed: NOERROR

  4. 87.68.in-addr.arpa.asked dns101.comcast.net 69.252.250.10399 ms

    Answer (authoritative):

    132.85.87.68.in-addr.arpa.7200PTRdns102.comcast.net.

    68.87.68.244 failed: NOERROR

Nameservers

Every address of every nameserver, asked for 87.68.in-addr.arpa's SOA. "Parent" means the 68.in-addr.arpa zone delegates to it; "zone" means 87.68.in-addr.arpa lists it itself.

NameserverListed inAddressStatusSerialTime
dns101.comcast.netparent + zone69.252.250.103 glueauthoritative646298 ms
2001:558:fe23:8:69:252:250:103 glueauthoritative646297 ms
dns102.comcast.netparent + zone68.87.85.132 glueauthoritative6462138 ms
2001:558:1004:7:68:87:85:132 glueauthoritative6462154 ms
dns103.comcast.netparent + zone68.87.76.228 glueauthoritative6462163 ms
2001:558:1014:c:68:87:76:228 glueauthoritative6462158 ms
dns104.comcast.netparent + zone68.87.68.244 glueauthoritative6462121 ms
2001:558:100a:5:68:87:68:244 glueauthoritative6462109 ms
dns105.comcast.netparent + zone68.87.72.244 glueauthoritative6462127 ms
2001:558:100e:5:68:87:72:244 glueauthoritative6462112 ms

DNSSEC

87.68.in-addr.arpa isn't signed: no DS at the parent and no DNSKEY in the zone.

Hosts and reverse DNS

Every hostname the records point at, resolved to its addresses; each address's PTR (reverse DNS), with ✓ where the PTR name resolves back to the same address.

HostAddressReverse DNS (PTR)
dns101.comcast.net
nameserver
69.252.250.103dns101.comcast.net ✓
2001:558:fe23:8:69:252:250:103dns101.comcast.net ✓
dns102.comcast.net
nameserver · PTR target
68.87.85.132dns102.comcast.net ✓
2001:558:1004:7:68:87:85:132dns102.comcast.net ✓
dns103.comcast.net
nameserver
68.87.76.228dns103.comcast.net ✓
2001:558:1014:c:68:87:76:228dns103.comcast.net ✓
dns104.comcast.net
nameserver
68.87.68.244dns104.comcast.net ✓
2001:558:100a:5:68:87:68:244dns104.comcast.net ✓
dns105.comcast.net
nameserver
68.87.72.244dns105.comcast.net ✓
2001:558:100e:5:68:87:72:244dns105.comcast.net ✓

Public resolvers

What four public resolvers answer right now, from their caches. Highlighted values differ from the authoritative answer: either a recent change they haven't picked up yet (the TTL says how long until they do), or, for A and AAAA, a CDN or geo-routed site handing each resolver location its own addresses.

ResolverPTR
Cloudflare 1.1.1.1dns102.comcast.net.
TTL 7200
Google 8.8.8.8dns102.comcast.net.
TTL 2380
Quad9 9.9.9.9dns102.comcast.net.
TTL 7200
OpenDNS 208.67.222.222dns102.comcast.net.
TTL 4585

Text dump

; DNS report for 132.85.87.68.in-addr.arpa (68.87.85.132)
; 2026-11-09 05:22:47 UTC, 96 queries in 2.11 s, zone 87.68.in-addr.arpa

;; FINDINGS
;  [INFO] 87.68.in-addr.arpa isn't signed with DNSSEC, so resolvers can't tell forged answers from real ones.

;; RECORDS (authoritative, from dns101.comcast.net (69.252.250.103))
132.85.87.68.in-addr.arpa.	7200	IN	PTR	dns102.comcast.net.

;; TRACE
;  132.85.87.68.in-addr.arpa PTR
;  . @d.root-servers.net (199.7.91.13) 5.7 ms [NOERROR qr]: referral to in-addr.arpa.
in-addr.arpa.		NS	a.in-addr-servers.arpa.	; 199.180.182.53 2620:37:e000::53
in-addr.arpa.		NS	b.in-addr-servers.arpa.	; 199.253.183.183 2001:500:87::87
in-addr.arpa.		NS	c.in-addr-servers.arpa.	; 196.216.169.10 2001:43f8:110::10
in-addr.arpa.		NS	d.in-addr-servers.arpa.	; 200.10.60.53 2001:13c7:7010::53
in-addr.arpa.		NS	e.in-addr-servers.arpa.	; 203.119.86.101 2001:dd8:6::101
in-addr.arpa.		NS	f.in-addr-servers.arpa.	; 193.0.9.1 2a13:27c0:30::1
in-addr.arpa.	86400	IN	DS	47054 8 2 5CAFCCEC201D1933B4C9F6A9C8F51E51F3B39979058AC21B8DF1B1F281CBC6F2
in-addr.arpa.	86400	IN	DS	53696 8 2 13E5501C56B20394DA921B51412D48B7089C5EB6957A7C58553C4D4D424F04DF
in-addr.arpa.	86400	IN	DS	54956 8 2 E0E2BF5CFBD66572CA05EC18267D91509BA6A9405AF05C3FD4141DFA45200C08
in-addr.arpa.	86400	IN	DS	63982 8 2 AAF4FB5D213EF25AE44679032EBE3514C487D7ABD99D7F5FEC3383D030733C73
;  in-addr.arpa. @c.in-addr-servers.arpa (196.216.169.10) 166 ms [NOERROR qr]: referral to 68.in-addr.arpa.
68.in-addr.arpa.		NS	r.arin.net.	; 199.180.180.63 2001:500:f0::63
68.in-addr.arpa.		NS	u.arin.net.	; 204.61.216.50 2001:500:14:6050:ad::1
68.in-addr.arpa.		NS	x.arin.net.	; 199.180.180.63 2001:500:f0::63
68.in-addr.arpa.		NS	y.arin.net.	; 192.82.134.30 2001:500:127::30
68.in-addr.arpa.		NS	z.arin.net.	; 199.180.180.63 2001:500:f0::63
68.in-addr.arpa.		NS	arin.authdns.ripe.net.	; 193.0.9.10 2a13:27c0:30::10
68.in-addr.arpa.	86400	IN	DS	52396 8 2 10DBD0477A51DDA1A8C62D73294798A6B4D7682C2BC64F0C04C1164EDF6E2003
;  68.in-addr.arpa. @r.arin.net (199.180.180.63) 90 ms [NOERROR qr]: referral to 87.68.in-addr.arpa.
87.68.in-addr.arpa.		NS	dns105.comcast.net.	; 68.87.72.244 2001:558:100e:5:68:87:72:244
87.68.in-addr.arpa.		NS	dns102.comcast.net.	; 68.87.85.132 2001:558:1004:7:68:87:85:132
87.68.in-addr.arpa.		NS	dns103.comcast.net.	; 68.87.76.228 2001:558:1014:c:68:87:76:228
87.68.in-addr.arpa.		NS	dns104.comcast.net.	; 68.87.68.244 2001:558:100a:5:68:87:68:244
87.68.in-addr.arpa.		NS	dns101.comcast.net.	; 69.252.250.103 2001:558:fe23:8:69:252:250:103
;  87.68.in-addr.arpa. @dns101.comcast.net (69.252.250.103) 99 ms [NOERROR qr aa]: answer
132.85.87.68.in-addr.arpa.	7200	IN	PTR	dns102.comcast.net.

;; NAMESERVERS (SOA asked of each address)
;  dns101.comcast.net [parent+zone]
;    69.252.250.103                          ok                        6462        98 ms
;    2001:558:fe23:8:69:252:250:103          ok                        6462        97 ms
;  dns102.comcast.net [parent+zone]
;    68.87.85.132                            ok                        6462        138 ms
;    2001:558:1004:7:68:87:85:132            ok                        6462        154 ms
;  dns103.comcast.net [parent+zone]
;    68.87.76.228                            ok                        6462        163 ms
;    2001:558:1014:c:68:87:76:228            ok                        6462        158 ms
;  dns104.comcast.net [parent+zone]
;    68.87.68.244                            ok                        6462        121 ms
;    2001:558:100a:5:68:87:68:244            ok                        6462        109 ms
;  dns105.comcast.net [parent+zone]
;    68.87.72.244                            ok                        6462        127 ms
;    2001:558:100e:5:68:87:72:244            ok                        6462        112 ms

;; DNSSEC: unsigned

;; HOSTS
;  dns101.comcast.net (nameserver)
;    69.252.250.103                          PTR dns101.comcast.net (confirmed)
;    2001:558:fe23:8:69:252:250:103          PTR dns101.comcast.net (confirmed)
;  dns102.comcast.net (nameserver; PTR target)
;    68.87.85.132                            PTR dns102.comcast.net (confirmed)
;    2001:558:1004:7:68:87:85:132            PTR dns102.comcast.net (confirmed)
;  dns103.comcast.net (nameserver)
;    68.87.76.228                            PTR dns103.comcast.net (confirmed)
;    2001:558:1014:c:68:87:76:228            PTR dns103.comcast.net (confirmed)
;  dns104.comcast.net (nameserver)
;    68.87.68.244                            PTR dns104.comcast.net (confirmed)
;    2001:558:100a:5:68:87:68:244            PTR dns104.comcast.net (confirmed)
;  dns105.comcast.net (nameserver)
;    68.87.72.244                            PTR dns105.comcast.net (confirmed)
;    2001:558:100e:5:68:87:72:244            PTR dns105.comcast.net (confirmed)

;; PUBLIC RESOLVERS
;  Cloudflare PTR   dns102.comcast.net.  ttl 7200
;  Google     PTR   dns102.comcast.net.  ttl 2380
;  Quad9      PTR   dns102.comcast.net.  ttl 7200
;  OpenDNS    PTR   dns102.comcast.net.  ttl 4585