Made in / Donate

DNS lookup

Everything DNS says about a domain: traced from the root servers down, every record type asked of the domain's own nameservers, each nameserver checked, then every hostname and policy record it points at followed, with SPF, DMARC, DKIM and DNSSEC checked along the way.

Try example.com, gmail.com, www.github.com, dnssec-failed.org, 1.1.1.1. A URL, e-mail address or IP address works too.

dns1.p08.nsone.net

Zone nsone.net176 queries in 0.5 s2026-11-09 05:12:47 UTCDNSSEC signed

No problems found.

Records

Asked directly of dns2.p01.nsone.net (198.51.45.1), an authoritative server: no cache in between, so these are the live values. Each set is DNSSEC-signed.

A IPv4 address

86400A198.51.44.8

AAAA IPv6 address

86400AAAA2620:4d:4000:6259:7:8:0:1
ANY query: 1 records
3600NSEC\000.dns1.p08.nsone.net. A AAAA RRSIG NSEC

No records of type CNAME, DNAME, NS, SOA, MX, TXT, CAA, HTTPS, SVCB, SRV, NAPTR, DS, DNSKEY, CDS, CDNSKEY, NSEC3PARAM, TLSA, SSHFP, LOC, HINFO, RP, URI, SPF, OPENPGPKEY, ZONEMD, CSYNC, PTR.

Resolution trace

  1. .asked a.root-servers.net 198.41.0.412 ms

    Referral to net. signed (1 DS)

    • m.gtld-servers.net 192.55.83.30 2001:501:b1f9::30
    • k.gtld-servers.net 192.52.178.30 2001:503:d2d::30
    • b.gtld-servers.net 192.33.14.30 2001:503:231d::2:30
    • f.gtld-servers.net 192.35.51.30 2001:503:d414::30
    • d.gtld-servers.net 192.31.80.30 2001:500:856e::30
    • h.gtld-servers.net 192.54.112.30 2001:502:8cc::30
    • j.gtld-servers.net 192.48.79.30 2001:502:7094::30
    • l.gtld-servers.net 192.41.162.30 2001:500:d937::30
    • a.gtld-servers.net 192.5.6.30 2001:503:a83e::2:30
    • e.gtld-servers.net 192.12.94.30 2001:502:1ca1::30
    • c.gtld-servers.net 192.26.92.30 2001:503:83eb::30
    • g.gtld-servers.net 192.42.93.30 2001:503:eea3::30
    • i.gtld-servers.net 192.43.172.30 2001:503:39c1::30

    192.203.230.10 failed: NOERROR

  2. net.asked g.gtld-servers.net 192.42.93.3021 ms

    Referral to nsone.net. signed (1 DS)

    • dns1.p01.nsone.net 198.51.44.1 2620:4d:4000:6259:7:1:0:1
    • dns2.p01.nsone.net 198.51.45.1 2a00:edc0:6259:7:1::2
    • dns3.p01.nsone.net 198.51.44.65 2620:4d:4000:6259:7:1:0:3
    • dns4.p01.nsone.net 198.51.45.65 2a00:edc0:6259:7:1::4
  3. nsone.net.asked dns1.p01.nsone.net 198.51.44.113 ms

    Answer (authoritative):

    dns1.p08.nsone.net.86400A198.51.44.8

    198.51.44.65 failed: NOERROR

Nameservers

Every address of every nameserver, asked for nsone.net's SOA. "Parent" means the net zone delegates to it; "zone" means nsone.net lists it itself.

NameserverListed inAddressStatusSerialTime
dns1.p01.nsone.netparent + zone198.51.44.1 glueauthoritative173653368415 ms
2620:4d:4000:6259:7:1:0:1 glueauthoritative173653368415 ms
dns2.p01.nsone.netparent + zone198.51.45.1 glueauthoritative17365336846.1 ms
2a00:edc0:6259:7:1::2 glueauthoritative173653368414 ms
dns3.p01.nsone.netparent + zone198.51.44.65 glueauthoritative173653368414 ms
2620:4d:4000:6259:7:1:0:3 glueauthoritative173653368414 ms
dns4.p01.nsone.netparent + zone198.51.45.65 glueauthoritative17365336846.1 ms
2a00:edc0:6259:7:1::4 glueauthoritative173653368413 ms

DNSSEC

nsone.net is signed, and the net. zone vouches for it with 1 DS record.

Validating resolvers: Cloudflare secure Google secure

DS at the parent

Key tagAlgorithmDigestMatches a DNSKEY
4855313 ECDSAP256SHA256SHA-256yes, digest verified

DNSKEYs in the zone

Key tagRoleAlgorithmSize
48553KSK (signs keys)13 ECDSAP256SHA256256 bits
12196ZSK (signs records)13 ECDSAP256SHA256256 bits

Signatures

OverValid fromExpiresLeft
A2026-11-09 04:122026-11-10 06:12 UTC1 d
AAAA2026-11-09 04:122026-11-10 06:12 UTC1 d
NSEC2026-11-09 04:122026-11-10 06:12 UTC1 d
DNSKEY2026-11-08 14:082026-11-15 15:08 UTC6.4 d

Email

Mail servers (MX)

No MX records: mail goes to the name's A/AAAA address, if anything accepts it there.

SPF

No SPF record.

DMARC

v=DMARC1; p=quarantine; pct=25; rua=mailto:re+vsxguie9aq9@dmarc.postmarkapp.com

From _dmarc.nsone.net (the organisational domain's policy applies).

Policyquarantine
Applies to25% of failing mail
Aggregate reports tomailto:re+vsxguie9aq9@dmarc.postmarkapp.com

DKIM

None of the 36 common selectors tried has a key. DKIM may still be set up under another selector: find it in the DKIM-Signature header (s=) of a mail from this domain.

Hosts and reverse DNS

Every hostname the records point at, resolved to its addresses; each address's PTR (reverse DNS), with ✓ where the PTR name resolves back to the same address.

HostAddressReverse DNS (PTR)
dns1.p08.nsone.net
the name looked up
198.51.44.8ns8.demysdns.com, dns1.p08.nsone.net ✓
2620:4d:4000:6259:7:8:0:1dns1.p08.nsone.net, ns8.demysdns.com ✓
dns1.p01.nsone.net
nameserver
198.51.44.1dns1.p01.nsone.net ✓
2620:4d:4000:6259:7:1:0:1dns1.p01.nsone.net ✓
dns2.p01.nsone.net
nameserver
198.51.45.1dns2.p01.nsone.net ✓
2a00:edc0:6259:7:1::2dns2.p01.nsone.net ✓
dns3.p01.nsone.net
nameserver
198.51.44.65dns3.p01.nsone.net ✓
2620:4d:4000:6259:7:1:0:3dns3.p01.nsone.net ✓
dns4.p01.nsone.net
nameserver
198.51.45.65dns4.p01.nsone.net ✓
2a00:edc0:6259:7:1::4dns4.p01.nsone.net ✓

Public resolvers

What four public resolvers answer right now, from their caches. Highlighted values differ from the authoritative answer: either a recent change they haven't picked up yet (the TTL says how long until they do), or, for A and AAAA, a CDN or geo-routed site handing each resolver location its own addresses.

ResolverAAAAAMX
Cloudflare 1.1.1.1198.51.44.8
TTL 83438 · validated
2620:4d:4000:6259:7:8:0:1
TTL 86400 · validated
none
validated
Google 8.8.8.8198.51.44.8
TTL 20365 · validated
2620:4d:4000:6259:7:8:0:1
TTL 21378 · validated
none
validated
Quad9 9.9.9.9198.51.44.8
TTL 35458 · validated
2620:4d:4000:6259:7:8:0:1
TTL 35458 · validated
none
validated
OpenDNS 208.67.222.222198.51.44.8
TTL 2226 · validated
2620:4d:4000:6259:7:8:0:1
TTL 2182 · validated
none
validated

Text dump

; DNS report for dns1.p08.nsone.net
; 2026-11-09 05:12:47 UTC, 176 queries in 0.48 s, zone nsone.net

;; FINDINGS
;  [OK] No problems found.

;; RECORDS (authoritative, from dns2.p01.nsone.net (198.51.45.1))
dns1.p08.nsone.net.	86400	IN	A	198.51.44.8
dns1.p08.nsone.net.	86400	IN	RRSIG	A 13 4 86400 20261110061247 20261109041247 12196 nsone.net. ZM1a9PB87oB7qk2eZzPFcbut2mIKJXgmqy6BUwaV5G9KCYbLxIj/zzUAAK2HPFPMNpEWBvGMAK1DIVkRygPZMw==
dns1.p08.nsone.net.	86400	IN	AAAA	2620:4d:4000:6259:7:8:0:1
dns1.p08.nsone.net.	86400	IN	RRSIG	AAAA 13 4 86400 20261110061247 20261109041247 12196 nsone.net. +SFu+6fzW0dlS0v/G7f36N8qai1h4mE6Fs3Ta8VTOJ28I7ZEK7NGEUanHFttotKRNWkdb4VSGiGMV81qFnZ8Vg==

;; TRACE
;  dns1.p08.nsone.net A
;  . @a.root-servers.net (198.41.0.4) 12 ms [NOERROR qr]: referral to net.
net.		NS	m.gtld-servers.net.	; 192.55.83.30 2001:501:b1f9::30
net.		NS	k.gtld-servers.net.	; 192.52.178.30 2001:503:d2d::30
net.		NS	b.gtld-servers.net.	; 192.33.14.30 2001:503:231d::2:30
net.		NS	f.gtld-servers.net.	; 192.35.51.30 2001:503:d414::30
net.		NS	d.gtld-servers.net.	; 192.31.80.30 2001:500:856e::30
net.		NS	h.gtld-servers.net.	; 192.54.112.30 2001:502:8cc::30
net.		NS	j.gtld-servers.net.	; 192.48.79.30 2001:502:7094::30
net.		NS	l.gtld-servers.net.	; 192.41.162.30 2001:500:d937::30
net.		NS	a.gtld-servers.net.	; 192.5.6.30 2001:503:a83e::2:30
net.		NS	e.gtld-servers.net.	; 192.12.94.30 2001:502:1ca1::30
net.		NS	c.gtld-servers.net.	; 192.26.92.30 2001:503:83eb::30
net.		NS	g.gtld-servers.net.	; 192.42.93.30 2001:503:eea3::30
net.		NS	i.gtld-servers.net.	; 192.43.172.30 2001:503:39c1::30
net.	86400	IN	DS	37331 13 2 2F0BEC2D6F79DFBD1D08FD21A3AF92D0E39A4B9EF1E3F4111FFF282490DA453B
;  net. @g.gtld-servers.net (192.42.93.30) 21 ms [NOERROR qr]: referral to nsone.net.
nsone.net.		NS	dns1.p01.nsone.net.	; 198.51.44.1 2620:4d:4000:6259:7:1:0:1
nsone.net.		NS	dns2.p01.nsone.net.	; 198.51.45.1 2a00:edc0:6259:7:1::2
nsone.net.		NS	dns3.p01.nsone.net.	; 198.51.44.65 2620:4d:4000:6259:7:1:0:3
nsone.net.		NS	dns4.p01.nsone.net.	; 198.51.45.65 2a00:edc0:6259:7:1::4
nsone.net.	86400	IN	DS	48553 13 2 70480F540A700DF71B69963891948C82EAB32E9CD1D49D3C262F3B80609A75BC
;  nsone.net. @dns1.p01.nsone.net (198.51.44.1) 13 ms [NOERROR qr aa]: answer
dns1.p08.nsone.net.	86400	IN	A	198.51.44.8

;; NAMESERVERS (SOA asked of each address)
;  dns1.p01.nsone.net [parent+zone]
;    198.51.44.1                             ok                        1736533684  15 ms
;    2620:4d:4000:6259:7:1:0:1               ok                        1736533684  15 ms
;  dns2.p01.nsone.net [parent+zone]
;    198.51.45.1                             ok                        1736533684  6.1 ms
;    2a00:edc0:6259:7:1::2                   ok                        1736533684  14 ms
;  dns3.p01.nsone.net [parent+zone]
;    198.51.44.65                            ok                        1736533684  14 ms
;    2620:4d:4000:6259:7:1:0:3               ok                        1736533684  14 ms
;  dns4.p01.nsone.net [parent+zone]
;    198.51.45.65                            ok                        1736533684  6.1 ms
;    2a00:edc0:6259:7:1::4                   ok                        1736533684  13 ms

;; DNSSEC: signed (Cloudflare: secure, Google: secure)
nsone.net.	86400	IN	DS	48553 13 2 70480F540A700DF71B69963891948C82EAB32E9CD1D49D3C262F3B80609A75BC	; matches DNSKEY
nsone.net.	3600	IN	DNSKEY	257 3 13 t+4DPP+MFZ0Cr7gAXiDYv6HTyXzq/O2ESVRLc/ysuh5xBXKIsjsj5baV1HzhBNo2F7mbsevsEo0/6UEL8+JBmA==	; tag 48553
nsone.net.	3600	IN	DNSKEY	256 3 13 3u9onSaqbxIlglXMHjh5Plcah8n2pXj0QuBVY/6YTdC6L/eUEYPDh57nOVJ8dd3fkPMrjt2Oij6J9EeLqyeuBw==	; tag 12196

;; EMAIL
;  DMARC: v=DMARC1; p=quarantine; pct=25; rua=mailto:re+vsxguie9aq9@dmarc.postmarkapp.com

;; HOSTS
;  dns1.p08.nsone.net (the name looked up)
;    198.51.44.8                             PTR ns8.demysdns.com, dns1.p08.nsone.net (confirmed)
;    2620:4d:4000:6259:7:8:0:1               PTR dns1.p08.nsone.net, ns8.demysdns.com (confirmed)
;  dns1.p01.nsone.net (nameserver)
;    198.51.44.1                             PTR dns1.p01.nsone.net (confirmed)
;    2620:4d:4000:6259:7:1:0:1               PTR dns1.p01.nsone.net (confirmed)
;  dns2.p01.nsone.net (nameserver)
;    198.51.45.1                             PTR dns2.p01.nsone.net (confirmed)
;    2a00:edc0:6259:7:1::2                   PTR dns2.p01.nsone.net (confirmed)
;  dns3.p01.nsone.net (nameserver)
;    198.51.44.65                            PTR dns3.p01.nsone.net (confirmed)
;    2620:4d:4000:6259:7:1:0:3               PTR dns3.p01.nsone.net (confirmed)
;  dns4.p01.nsone.net (nameserver)
;    198.51.45.65                            PTR dns4.p01.nsone.net (confirmed)
;    2a00:edc0:6259:7:1::4                   PTR dns4.p01.nsone.net (confirmed)

;; PUBLIC RESOLVERS
;  Cloudflare A     198.51.44.8  ttl 83438  ad
;  Cloudflare AAAA  2620:4d:4000:6259:7:8:0:1  ttl 86400  ad
;  Cloudflare MX    -  ad
;  Google     A     198.51.44.8  ttl 20365  ad
;  Google     AAAA  2620:4d:4000:6259:7:8:0:1  ttl 21378  ad
;  Google     MX    -  ad
;  Quad9      A     198.51.44.8  ttl 35458  ad
;  Quad9      AAAA  2620:4d:4000:6259:7:8:0:1  ttl 35458  ad
;  Quad9      MX    -  ad
;  OpenDNS    A     198.51.44.8  ttl 2226  ad
;  OpenDNS    AAAA  2620:4d:4000:6259:7:8:0:1  ttl 2182  ad
;  OpenDNS    MX    -  ad