DNS lookup
Everything DNS says about a domain: traced from the root servers down, every record type asked of the domain's own nameservers, each nameserver checked, then every hostname and policy record it points at followed, with SPF, DMARC, DKIM and DNSSEC checked along the way.
dns4.p08.nsone.net
Zone nsone.net174 queries in 0.4 s2026-11-09 05:12:46 UTCDNSSEC signed
No problems found.
Records
Asked directly of dns4.p01.nsone.net (198.51.45.65), an authoritative server: no cache in between, so these are the live values. Each set is DNSSEC-signed.
A IPv4 address
| 86400 | A | 198.51.45.72 |
AAAA IPv6 address
| 86400 | AAAA | 2a00:edc0:6259:7:8::4 |
ANY query: 1 records
| 3600 | NSEC | \000.dns4.p08.nsone.net. A AAAA RRSIG NSEC |
No records of type CNAME, DNAME, NS, SOA, MX, TXT, CAA, HTTPS, SVCB, SRV, NAPTR, DS, DNSKEY, CDS, CDNSKEY, NSEC3PARAM, TLSA, SSHFP, LOC, HINFO, RP, URI, SPF, OPENPGPKEY, ZONEMD, CSYNC, PTR.
Resolution trace
- .asked d.root-servers.net 199.7.91.136.1 ms
Referral to net. signed (1 DS)
- a.gtld-servers.net 192.5.6.30 2001:503:a83e::2:30
- b.gtld-servers.net 192.33.14.30 2001:503:231d::2:30
- c.gtld-servers.net 192.26.92.30 2001:503:83eb::30
- d.gtld-servers.net 192.31.80.30 2001:500:856e::30
- e.gtld-servers.net 192.12.94.30 2001:502:1ca1::30
- f.gtld-servers.net 192.35.51.30 2001:503:d414::30
- g.gtld-servers.net 192.42.93.30 2001:503:eea3::30
- h.gtld-servers.net 192.54.112.30 2001:502:8cc::30
- i.gtld-servers.net 192.43.172.30 2001:503:39c1::30
- j.gtld-servers.net 192.48.79.30 2001:502:7094::30
- k.gtld-servers.net 192.52.178.30 2001:503:d2d::30
- l.gtld-servers.net 192.41.162.30 2001:500:d937::30
- m.gtld-servers.net 192.55.83.30 2001:501:b1f9::30
- net.asked g.gtld-servers.net 192.42.93.3022 ms
Referral to nsone.net. signed (1 DS)
- dns1.p01.nsone.net 198.51.44.1 2620:4d:4000:6259:7:1:0:1
- dns2.p01.nsone.net 198.51.45.1 2a00:edc0:6259:7:1::2
- dns3.p01.nsone.net 198.51.44.65 2620:4d:4000:6259:7:1:0:3
- dns4.p01.nsone.net 198.51.45.65 2a00:edc0:6259:7:1::4
- nsone.net.asked dns4.p01.nsone.net 198.51.45.657.4 ms
Answer (authoritative):
dns4.p08.nsone.net. 86400 A 198.51.45.72 198.51.45.1 failed: NOERROR
Nameservers
Every address of every nameserver, asked for nsone.net's SOA. "Parent" means the net zone delegates to it; "zone" means nsone.net lists it itself.
| Nameserver | Listed in | Address | Status | Serial | Time |
|---|---|---|---|---|---|
| dns1.p01.nsone.net | parent + zone | 198.51.44.1 glue | authoritative | 1736533684 | 14 ms |
| 2620:4d:4000:6259:7:1:0:1 glue | authoritative | 1736533684 | 13 ms | ||
| dns2.p01.nsone.net | parent + zone | 198.51.45.1 glue | authoritative | 1736533684 | 6.6 ms |
| 2a00:edc0:6259:7:1::2 glue | authoritative | 1736533684 | 14 ms | ||
| dns3.p01.nsone.net | parent + zone | 198.51.44.65 glue | authoritative | 1736533684 | 14 ms |
| 2620:4d:4000:6259:7:1:0:3 glue | authoritative | 1736533684 | 14 ms | ||
| dns4.p01.nsone.net | parent + zone | 198.51.45.65 glue | authoritative | 1736533684 | 6.4 ms |
| 2a00:edc0:6259:7:1::4 glue | authoritative | 1736533684 | 13 ms |
DNSSEC
nsone.net is signed, and the net. zone vouches for it with 1 DS record.
Validating resolvers: Cloudflare secure Google secure
DS at the parent
| Key tag | Algorithm | Digest | Matches a DNSKEY |
|---|---|---|---|
| 48553 | 13 ECDSAP256SHA256 | SHA-256 | yes, digest verified |
DNSKEYs in the zone
| Key tag | Role | Algorithm | Size |
|---|---|---|---|
| 48553 | KSK (signs keys) | 13 ECDSAP256SHA256 | 256 bits |
| 12196 | ZSK (signs records) | 13 ECDSAP256SHA256 | 256 bits |
Signatures
| Over | Valid from | Expires | Left |
|---|---|---|---|
| A | 2026-11-09 04:12 | 2026-11-10 06:12 UTC | 1 d |
| AAAA | 2026-11-09 04:12 | 2026-11-10 06:12 UTC | 1 d |
| NSEC | 2026-11-09 04:12 | 2026-11-10 06:12 UTC | 1 d |
| DNSKEY | 2026-11-08 14:08 | 2026-11-15 15:08 UTC | 6.4 d |
Mail servers (MX)
No MX records: mail goes to the name's A/AAAA address, if anything accepts it there.
SPF
No SPF record.
DMARC
v=DMARC1; p=quarantine; pct=25; rua=mailto:re+vsxguie9aq9@dmarc.postmarkapp.com
From _dmarc.nsone.net (the organisational domain's policy applies).
| Policy | quarantine |
|---|---|
| Applies to | 25% of failing mail |
| Aggregate reports to | mailto:re+vsxguie9aq9@dmarc.postmarkapp.com |
DKIM
None of the 36 common selectors tried has a key. DKIM may still be set up under another selector: find it in the DKIM-Signature header (s=) of a mail from this domain.
Hosts and reverse DNS
Every hostname the records point at, resolved to its addresses; each address's PTR (reverse DNS), with ✓ where the PTR name resolves back to the same address.
| Host | Address | Reverse DNS (PTR) |
|---|---|---|
dns4.p08.nsone.net the name looked up | 198.51.45.72 | dns4.p08.nsone.net ✓ |
| 2a00:edc0:6259:7:8::4 | dns4.p08.nsone.net ✓ | |
dns1.p01.nsone.net nameserver | 198.51.44.1 | dns1.p01.nsone.net ✓ |
| 2620:4d:4000:6259:7:1:0:1 | dns1.p01.nsone.net ✓ | |
dns2.p01.nsone.net nameserver | 198.51.45.1 | dns2.p01.nsone.net ✓ |
| 2a00:edc0:6259:7:1::2 | dns2.p01.nsone.net ✓ | |
dns3.p01.nsone.net nameserver | 198.51.44.65 | dns3.p01.nsone.net ✓ |
| 2620:4d:4000:6259:7:1:0:3 | dns3.p01.nsone.net ✓ | |
dns4.p01.nsone.net nameserver | 198.51.45.65 | dns4.p01.nsone.net ✓ |
| 2a00:edc0:6259:7:1::4 | dns4.p01.nsone.net ✓ |
Public resolvers
What four public resolvers answer right now, from their caches. Highlighted values differ from the authoritative answer: either a recent change they haven't picked up yet (the TTL says how long until they do), or, for A and AAAA, a CDN or geo-routed site handing each resolver location its own addresses.
| Resolver | A | AAAA | MX |
|---|---|---|---|
| Cloudflare 1.1.1.1 | 198.51.45.72 TTL 86400 · validated | 2a00:edc0:6259:7:8::4 TTL 86400 · validated | none validated |
| Google 8.8.8.8 | 198.51.45.72 TTL 18695 · validated | 2a00:edc0:6259:7:8::4 TTL 20563 · validated | none validated |
| Quad9 9.9.9.9 | 198.51.45.72 TTL 35387 · validated | 2a00:edc0:6259:7:8::4 TTL 35387 · validated | none validated |
| OpenDNS 208.67.222.222 | 198.51.45.72 TTL 2862 · validated | 2a00:edc0:6259:7:8::4 TTL 1094 · validated | none validated |
Text dump
; DNS report for dns4.p08.nsone.net ; 2026-11-09 05:12:46 UTC, 174 queries in 0.43 s, zone nsone.net ;; FINDINGS ; [OK] No problems found. ;; RECORDS (authoritative, from dns4.p01.nsone.net (198.51.45.65)) dns4.p08.nsone.net. 86400 IN A 198.51.45.72 dns4.p08.nsone.net. 86400 IN RRSIG A 13 4 86400 20261110061246 20261109041246 12196 nsone.net. Rfuvgpo6rjWi9JhY4wAYSED9BpTvn2WNGYbXtwJZc0uSiiZfSSYhxIPIvn700Oy2ABRWwAar34YBdY9r1RhGNg== dns4.p08.nsone.net. 86400 IN AAAA 2a00:edc0:6259:7:8::4 dns4.p08.nsone.net. 86400 IN RRSIG AAAA 13 4 86400 20261110061246 20261109041246 12196 nsone.net. SgTyj9ufYciJsPOlXTFv+cKKQpszAEJoHuj9vjzaMXk22QUKgth1dDcTcIenXferP6EEgTbw/WWsXzcUdnZQJw== ;; TRACE ; dns4.p08.nsone.net A ; . @d.root-servers.net (199.7.91.13) 6.1 ms [NOERROR qr]: referral to net. net. NS a.gtld-servers.net. ; 192.5.6.30 2001:503:a83e::2:30 net. NS b.gtld-servers.net. ; 192.33.14.30 2001:503:231d::2:30 net. NS c.gtld-servers.net. ; 192.26.92.30 2001:503:83eb::30 net. NS d.gtld-servers.net. ; 192.31.80.30 2001:500:856e::30 net. NS e.gtld-servers.net. ; 192.12.94.30 2001:502:1ca1::30 net. NS f.gtld-servers.net. ; 192.35.51.30 2001:503:d414::30 net. NS g.gtld-servers.net. ; 192.42.93.30 2001:503:eea3::30 net. NS h.gtld-servers.net. ; 192.54.112.30 2001:502:8cc::30 net. NS i.gtld-servers.net. ; 192.43.172.30 2001:503:39c1::30 net. NS j.gtld-servers.net. ; 192.48.79.30 2001:502:7094::30 net. NS k.gtld-servers.net. ; 192.52.178.30 2001:503:d2d::30 net. NS l.gtld-servers.net. ; 192.41.162.30 2001:500:d937::30 net. NS m.gtld-servers.net. ; 192.55.83.30 2001:501:b1f9::30 net. 86400 IN DS 37331 13 2 2F0BEC2D6F79DFBD1D08FD21A3AF92D0E39A4B9EF1E3F4111FFF282490DA453B ; net. @g.gtld-servers.net (192.42.93.30) 22 ms [NOERROR qr]: referral to nsone.net. nsone.net. NS dns1.p01.nsone.net. ; 198.51.44.1 2620:4d:4000:6259:7:1:0:1 nsone.net. NS dns2.p01.nsone.net. ; 198.51.45.1 2a00:edc0:6259:7:1::2 nsone.net. NS dns3.p01.nsone.net. ; 198.51.44.65 2620:4d:4000:6259:7:1:0:3 nsone.net. NS dns4.p01.nsone.net. ; 198.51.45.65 2a00:edc0:6259:7:1::4 nsone.net. 86400 IN DS 48553 13 2 70480F540A700DF71B69963891948C82EAB32E9CD1D49D3C262F3B80609A75BC ; nsone.net. @dns4.p01.nsone.net (198.51.45.65) 7.4 ms [NOERROR qr aa]: answer dns4.p08.nsone.net. 86400 IN A 198.51.45.72 ;; NAMESERVERS (SOA asked of each address) ; dns1.p01.nsone.net [parent+zone] ; 198.51.44.1 ok 1736533684 14 ms ; 2620:4d:4000:6259:7:1:0:1 ok 1736533684 13 ms ; dns2.p01.nsone.net [parent+zone] ; 198.51.45.1 ok 1736533684 6.6 ms ; 2a00:edc0:6259:7:1::2 ok 1736533684 14 ms ; dns3.p01.nsone.net [parent+zone] ; 198.51.44.65 ok 1736533684 14 ms ; 2620:4d:4000:6259:7:1:0:3 ok 1736533684 14 ms ; dns4.p01.nsone.net [parent+zone] ; 198.51.45.65 ok 1736533684 6.4 ms ; 2a00:edc0:6259:7:1::4 ok 1736533684 13 ms ;; DNSSEC: signed (Cloudflare: secure, Google: secure) nsone.net. 86400 IN DS 48553 13 2 70480F540A700DF71B69963891948C82EAB32E9CD1D49D3C262F3B80609A75BC ; matches DNSKEY nsone.net. 3600 IN DNSKEY 257 3 13 t+4DPP+MFZ0Cr7gAXiDYv6HTyXzq/O2ESVRLc/ysuh5xBXKIsjsj5baV1HzhBNo2F7mbsevsEo0/6UEL8+JBmA== ; tag 48553 nsone.net. 3600 IN DNSKEY 256 3 13 3u9onSaqbxIlglXMHjh5Plcah8n2pXj0QuBVY/6YTdC6L/eUEYPDh57nOVJ8dd3fkPMrjt2Oij6J9EeLqyeuBw== ; tag 12196 ;; EMAIL ; DMARC: v=DMARC1; p=quarantine; pct=25; rua=mailto:re+vsxguie9aq9@dmarc.postmarkapp.com ;; HOSTS ; dns4.p08.nsone.net (the name looked up) ; 198.51.45.72 PTR dns4.p08.nsone.net (confirmed) ; 2a00:edc0:6259:7:8::4 PTR dns4.p08.nsone.net (confirmed) ; dns1.p01.nsone.net (nameserver) ; 198.51.44.1 PTR dns1.p01.nsone.net (confirmed) ; 2620:4d:4000:6259:7:1:0:1 PTR dns1.p01.nsone.net (confirmed) ; dns2.p01.nsone.net (nameserver) ; 198.51.45.1 PTR dns2.p01.nsone.net (confirmed) ; 2a00:edc0:6259:7:1::2 PTR dns2.p01.nsone.net (confirmed) ; dns3.p01.nsone.net (nameserver) ; 198.51.44.65 PTR dns3.p01.nsone.net (confirmed) ; 2620:4d:4000:6259:7:1:0:3 PTR dns3.p01.nsone.net (confirmed) ; dns4.p01.nsone.net (nameserver) ; 198.51.45.65 PTR dns4.p01.nsone.net (confirmed) ; 2a00:edc0:6259:7:1::4 PTR dns4.p01.nsone.net (confirmed) ;; PUBLIC RESOLVERS ; Cloudflare A 198.51.45.72 ttl 86400 ad ; Cloudflare AAAA 2a00:edc0:6259:7:8::4 ttl 86400 ad ; Cloudflare MX - ad ; Google A 198.51.45.72 ttl 18695 ad ; Google AAAA 2a00:edc0:6259:7:8::4 ttl 20563 ad ; Google MX - ad ; Quad9 A 198.51.45.72 ttl 35387 ad ; Quad9 AAAA 2a00:edc0:6259:7:8::4 ttl 35387 ad ; Quad9 MX - ad ; OpenDNS A 198.51.45.72 ttl 2862 ad ; OpenDNS AAAA 2a00:edc0:6259:7:8::4 ttl 1094 ad ; OpenDNS MX - ad