DNS lookup
Everything DNS says about a domain: traced from the root servers down, every record type asked of the domain's own nameservers, each nameserver checked, then every hostname and policy record it points at followed, with SPF, DMARC, DKIM and DNSSEC checked along the way.
dns2.p08.nsone.net
Zone nsone.net174 queries in 0.5 s2026-11-09 05:12:46 UTCDNSSEC signed
No problems found.
Records
Asked directly of dns2.p01.nsone.net (198.51.45.1), an authoritative server: no cache in between, so these are the live values. Each set is DNSSEC-signed.
A IPv4 address
| 86400 | A | 198.51.45.8 |
AAAA IPv6 address
| 86400 | AAAA | 2a00:edc0:6259:7:8::2 |
ANY query: 1 records
| 3600 | NSEC | \000.dns2.p08.nsone.net. A AAAA RRSIG NSEC |
No records of type CNAME, DNAME, NS, SOA, MX, TXT, CAA, HTTPS, SVCB, SRV, NAPTR, DS, DNSKEY, CDS, CDNSKEY, NSEC3PARAM, TLSA, SSHFP, LOC, HINFO, RP, URI, SPF, OPENPGPKEY, ZONEMD, CSYNC, PTR.
Resolution trace
- .asked d.root-servers.net 199.7.91.136.0 ms
Referral to net. signed (1 DS)
- a.gtld-servers.net 192.5.6.30 2001:503:a83e::2:30
- b.gtld-servers.net 192.33.14.30 2001:503:231d::2:30
- c.gtld-servers.net 192.26.92.30 2001:503:83eb::30
- d.gtld-servers.net 192.31.80.30 2001:500:856e::30
- e.gtld-servers.net 192.12.94.30 2001:502:1ca1::30
- f.gtld-servers.net 192.35.51.30 2001:503:d414::30
- g.gtld-servers.net 192.42.93.30 2001:503:eea3::30
- h.gtld-servers.net 192.54.112.30 2001:502:8cc::30
- i.gtld-servers.net 192.43.172.30 2001:503:39c1::30
- j.gtld-servers.net 192.48.79.30 2001:502:7094::30
- k.gtld-servers.net 192.52.178.30 2001:503:d2d::30
- l.gtld-servers.net 192.41.162.30 2001:500:d937::30
- m.gtld-servers.net 192.55.83.30 2001:501:b1f9::30
193.0.14.129 failed: NOERROR
- net.asked k.gtld-servers.net 192.52.178.306.2 ms
Referral to nsone.net. signed (1 DS)
- dns1.p01.nsone.net 198.51.44.1 2620:4d:4000:6259:7:1:0:1
- dns2.p01.nsone.net 198.51.45.1 2a00:edc0:6259:7:1::2
- dns3.p01.nsone.net 198.51.44.65 2620:4d:4000:6259:7:1:0:3
- dns4.p01.nsone.net 198.51.45.65 2a00:edc0:6259:7:1::4
192.42.93.30 failed: NOERROR
- nsone.net.asked dns4.p01.nsone.net 198.51.45.656.2 ms
Answer (authoritative):
dns2.p08.nsone.net. 86400 A 198.51.45.8
Nameservers
Every address of every nameserver, asked for nsone.net's SOA. "Parent" means the net zone delegates to it; "zone" means nsone.net lists it itself.
| Nameserver | Listed in | Address | Status | Serial | Time |
|---|---|---|---|---|---|
| dns1.p01.nsone.net | parent + zone | 198.51.44.1 glue | authoritative | 1736533684 | 13 ms |
| 2620:4d:4000:6259:7:1:0:1 glue | authoritative | 1736533684 | 15 ms | ||
| dns2.p01.nsone.net | parent + zone | 198.51.45.1 glue | authoritative | 1736533684 | 6.2 ms |
| 2a00:edc0:6259:7:1::2 glue | authoritative | 1736533684 | 13 ms | ||
| dns3.p01.nsone.net | parent + zone | 198.51.44.65 glue | authoritative | 1736533684 | 14 ms |
| 2620:4d:4000:6259:7:1:0:3 glue | authoritative | 1736533684 | 16 ms | ||
| dns4.p01.nsone.net | parent + zone | 198.51.45.65 glue | authoritative | 1736533684 | 6.5 ms |
| 2a00:edc0:6259:7:1::4 glue | authoritative | 1736533684 | 14 ms |
DNSSEC
nsone.net is signed, and the net. zone vouches for it with 1 DS record.
Validating resolvers: Cloudflare secure Google secure
DS at the parent
| Key tag | Algorithm | Digest | Matches a DNSKEY |
|---|---|---|---|
| 48553 | 13 ECDSAP256SHA256 | SHA-256 | yes, digest verified |
DNSKEYs in the zone
| Key tag | Role | Algorithm | Size |
|---|---|---|---|
| 48553 | KSK (signs keys) | 13 ECDSAP256SHA256 | 256 bits |
| 12196 | ZSK (signs records) | 13 ECDSAP256SHA256 | 256 bits |
Signatures
| Over | Valid from | Expires | Left |
|---|---|---|---|
| A | 2026-11-09 04:12 | 2026-11-10 06:12 UTC | 1 d |
| AAAA | 2026-11-09 04:12 | 2026-11-10 06:12 UTC | 1 d |
| NSEC | 2026-11-09 04:12 | 2026-11-10 06:12 UTC | 1 d |
| DNSKEY | 2026-11-08 14:08 | 2026-11-15 15:08 UTC | 6.4 d |
Mail servers (MX)
No MX records: mail goes to the name's A/AAAA address, if anything accepts it there.
SPF
No SPF record.
DMARC
v=DMARC1; p=quarantine; pct=25; rua=mailto:re+vsxguie9aq9@dmarc.postmarkapp.com
From _dmarc.nsone.net (the organisational domain's policy applies).
| Policy | quarantine |
|---|---|
| Applies to | 25% of failing mail |
| Aggregate reports to | mailto:re+vsxguie9aq9@dmarc.postmarkapp.com |
DKIM
None of the 36 common selectors tried has a key. DKIM may still be set up under another selector: find it in the DKIM-Signature header (s=) of a mail from this domain.
Hosts and reverse DNS
Every hostname the records point at, resolved to its addresses; each address's PTR (reverse DNS), with ✓ where the PTR name resolves back to the same address.
| Host | Address | Reverse DNS (PTR) |
|---|---|---|
dns2.p08.nsone.net the name looked up | 198.51.45.8 | dns2.p08.nsone.net ✓ |
| 2a00:edc0:6259:7:8::2 | dns2.p08.nsone.net ✓ | |
dns1.p01.nsone.net nameserver | 198.51.44.1 | dns1.p01.nsone.net ✓ |
| 2620:4d:4000:6259:7:1:0:1 | dns1.p01.nsone.net ✓ | |
dns2.p01.nsone.net nameserver | 198.51.45.1 | dns2.p01.nsone.net ✓ |
| 2a00:edc0:6259:7:1::2 | dns2.p01.nsone.net ✓ | |
dns3.p01.nsone.net nameserver | 198.51.44.65 | dns3.p01.nsone.net ✓ |
| 2620:4d:4000:6259:7:1:0:3 | dns3.p01.nsone.net ✓ | |
dns4.p01.nsone.net nameserver | 198.51.45.65 | dns4.p01.nsone.net ✓ |
| 2a00:edc0:6259:7:1::4 | dns4.p01.nsone.net ✓ |
Public resolvers
What four public resolvers answer right now, from their caches. Highlighted values differ from the authoritative answer: either a recent change they haven't picked up yet (the TTL says how long until they do), or, for A and AAAA, a CDN or geo-routed site handing each resolver location its own addresses.
| Resolver | A | AAAA | MX |
|---|---|---|---|
| Cloudflare 1.1.1.1 | 198.51.45.8 TTL 79296 · validated | 2a00:edc0:6259:7:8::2 TTL 86400 · validated | none validated |
| Google 8.8.8.8 | 198.51.45.8 TTL 19887 · validated | 2a00:edc0:6259:7:8::2 TTL 20486 · validated | none validated |
| Quad9 9.9.9.9 | 198.51.45.8 TTL 33546 · validated | 2a00:edc0:6259:7:8::2 TTL 36850 · validated | none validated |
| OpenDNS 208.67.222.222 | 198.51.45.8 TTL 1932 · validated | 2a00:edc0:6259:7:8::2 TTL 1353 · validated | none validated |
Text dump
; DNS report for dns2.p08.nsone.net ; 2026-11-09 05:12:46 UTC, 174 queries in 0.48 s, zone nsone.net ;; FINDINGS ; [OK] No problems found. ;; RECORDS (authoritative, from dns2.p01.nsone.net (198.51.45.1)) dns2.p08.nsone.net. 86400 IN A 198.51.45.8 dns2.p08.nsone.net. 86400 IN RRSIG A 13 4 86400 20261110061245 20261109041245 12196 nsone.net. BK6Bn9UlQ0Itw1qza+kRWS8EclLPWQzWp8w/OKk2ld7YGEqu6ZogIN3CSa+6vBei1/oS7b///+L7vhuorle4IA== dns2.p08.nsone.net. 86400 IN AAAA 2a00:edc0:6259:7:8::2 dns2.p08.nsone.net. 86400 IN RRSIG AAAA 13 4 86400 20261110061245 20261109041245 12196 nsone.net. EqZnmBL1GrG8mx8A6JKyTZmpPadOXLyh5plXgKpENkQhZI9bh8eOEwqmeM97a8N8eUmwk5EUXN45h0AsVR/FVw== ;; TRACE ; dns2.p08.nsone.net A ; . @d.root-servers.net (199.7.91.13) 6.0 ms [NOERROR qr]: referral to net. net. NS a.gtld-servers.net. ; 192.5.6.30 2001:503:a83e::2:30 net. NS b.gtld-servers.net. ; 192.33.14.30 2001:503:231d::2:30 net. NS c.gtld-servers.net. ; 192.26.92.30 2001:503:83eb::30 net. NS d.gtld-servers.net. ; 192.31.80.30 2001:500:856e::30 net. NS e.gtld-servers.net. ; 192.12.94.30 2001:502:1ca1::30 net. NS f.gtld-servers.net. ; 192.35.51.30 2001:503:d414::30 net. NS g.gtld-servers.net. ; 192.42.93.30 2001:503:eea3::30 net. NS h.gtld-servers.net. ; 192.54.112.30 2001:502:8cc::30 net. NS i.gtld-servers.net. ; 192.43.172.30 2001:503:39c1::30 net. NS j.gtld-servers.net. ; 192.48.79.30 2001:502:7094::30 net. NS k.gtld-servers.net. ; 192.52.178.30 2001:503:d2d::30 net. NS l.gtld-servers.net. ; 192.41.162.30 2001:500:d937::30 net. NS m.gtld-servers.net. ; 192.55.83.30 2001:501:b1f9::30 net. 86400 IN DS 37331 13 2 2F0BEC2D6F79DFBD1D08FD21A3AF92D0E39A4B9EF1E3F4111FFF282490DA453B ; net. @k.gtld-servers.net (192.52.178.30) 6.2 ms [NOERROR qr]: referral to nsone.net. nsone.net. NS dns1.p01.nsone.net. ; 198.51.44.1 2620:4d:4000:6259:7:1:0:1 nsone.net. NS dns2.p01.nsone.net. ; 198.51.45.1 2a00:edc0:6259:7:1::2 nsone.net. NS dns3.p01.nsone.net. ; 198.51.44.65 2620:4d:4000:6259:7:1:0:3 nsone.net. NS dns4.p01.nsone.net. ; 198.51.45.65 2a00:edc0:6259:7:1::4 nsone.net. 86400 IN DS 48553 13 2 70480F540A700DF71B69963891948C82EAB32E9CD1D49D3C262F3B80609A75BC ; nsone.net. @dns4.p01.nsone.net (198.51.45.65) 6.2 ms [NOERROR qr aa]: answer dns2.p08.nsone.net. 86400 IN A 198.51.45.8 ;; NAMESERVERS (SOA asked of each address) ; dns1.p01.nsone.net [parent+zone] ; 198.51.44.1 ok 1736533684 13 ms ; 2620:4d:4000:6259:7:1:0:1 ok 1736533684 15 ms ; dns2.p01.nsone.net [parent+zone] ; 198.51.45.1 ok 1736533684 6.2 ms ; 2a00:edc0:6259:7:1::2 ok 1736533684 13 ms ; dns3.p01.nsone.net [parent+zone] ; 198.51.44.65 ok 1736533684 14 ms ; 2620:4d:4000:6259:7:1:0:3 ok 1736533684 16 ms ; dns4.p01.nsone.net [parent+zone] ; 198.51.45.65 ok 1736533684 6.5 ms ; 2a00:edc0:6259:7:1::4 ok 1736533684 14 ms ;; DNSSEC: signed (Cloudflare: secure, Google: secure) nsone.net. 86400 IN DS 48553 13 2 70480F540A700DF71B69963891948C82EAB32E9CD1D49D3C262F3B80609A75BC ; matches DNSKEY nsone.net. 3600 IN DNSKEY 257 3 13 t+4DPP+MFZ0Cr7gAXiDYv6HTyXzq/O2ESVRLc/ysuh5xBXKIsjsj5baV1HzhBNo2F7mbsevsEo0/6UEL8+JBmA== ; tag 48553 nsone.net. 3600 IN DNSKEY 256 3 13 3u9onSaqbxIlglXMHjh5Plcah8n2pXj0QuBVY/6YTdC6L/eUEYPDh57nOVJ8dd3fkPMrjt2Oij6J9EeLqyeuBw== ; tag 12196 ;; EMAIL ; DMARC: v=DMARC1; p=quarantine; pct=25; rua=mailto:re+vsxguie9aq9@dmarc.postmarkapp.com ;; HOSTS ; dns2.p08.nsone.net (the name looked up) ; 198.51.45.8 PTR dns2.p08.nsone.net (confirmed) ; 2a00:edc0:6259:7:8::2 PTR dns2.p08.nsone.net (confirmed) ; dns1.p01.nsone.net (nameserver) ; 198.51.44.1 PTR dns1.p01.nsone.net (confirmed) ; 2620:4d:4000:6259:7:1:0:1 PTR dns1.p01.nsone.net (confirmed) ; dns2.p01.nsone.net (nameserver) ; 198.51.45.1 PTR dns2.p01.nsone.net (confirmed) ; 2a00:edc0:6259:7:1::2 PTR dns2.p01.nsone.net (confirmed) ; dns3.p01.nsone.net (nameserver) ; 198.51.44.65 PTR dns3.p01.nsone.net (confirmed) ; 2620:4d:4000:6259:7:1:0:3 PTR dns3.p01.nsone.net (confirmed) ; dns4.p01.nsone.net (nameserver) ; 198.51.45.65 PTR dns4.p01.nsone.net (confirmed) ; 2a00:edc0:6259:7:1::4 PTR dns4.p01.nsone.net (confirmed) ;; PUBLIC RESOLVERS ; Cloudflare A 198.51.45.8 ttl 79296 ad ; Cloudflare AAAA 2a00:edc0:6259:7:8::2 ttl 86400 ad ; Cloudflare MX - ad ; Google A 198.51.45.8 ttl 19887 ad ; Google AAAA 2a00:edc0:6259:7:8::2 ttl 20486 ad ; Google MX - ad ; Quad9 A 198.51.45.8 ttl 33546 ad ; Quad9 AAAA 2a00:edc0:6259:7:8::2 ttl 36850 ad ; Quad9 MX - ad ; OpenDNS A 198.51.45.8 ttl 1932 ad ; OpenDNS AAAA 2a00:edc0:6259:7:8::2 ttl 1353 ad ; OpenDNS MX - ad