Made in / Donate

DNS lookup

Everything DNS says about a domain: traced from the root servers down, every record type asked of the domain's own nameservers, each nameserver checked, then every hostname and policy record it points at followed, with SPF, DMARC, DKIM and DNSSEC checked along the way.

Try example.com, gmail.com, www.github.com, dnssec-failed.org, 1.1.1.1. A URL, e-mail address or IP address works too.

ns-1283.awsdns-32.org

Zone awsdns-32.org181 queries in 0.7 s2026-11-09 05:12:47 UTCNot DNSSEC-signed

WHOIS for awsdns-32.org →TextJSON
  • Note awsdns-32.org isn't signed with DNSSEC, so resolvers can't tell forged answers from real ones.

Records

Asked directly of g-ns-1059.awsdns-32.org (205.251.196.35), an authoritative server: no cache in between, so these are the live values.

A IPv4 address

172800A205.251.197.3

AAAA IPv6 address

172800AAAA2600:9000:5305:300::1
ANY query: 2 records
172800A205.251.197.3
172800AAAA2600:9000:5305:300::1

No records of type CNAME, DNAME, NS, SOA, MX, TXT, CAA, HTTPS, SVCB, SRV, NAPTR, DS, DNSKEY, CDS, CDNSKEY, NSEC3PARAM, TLSA, SSHFP, LOC, HINFO, RP, URI, SPF, OPENPGPKEY, ZONEMD, CSYNC, PTR.

Resolution trace

  1. .asked e.root-servers.net 192.203.230.105.8 ms

    Referral to org. signed (2 DS)

    • a2.org.afilias-nst.info 199.249.112.1 2001:500:40::1
    • b2.org.afilias-nst.org 199.249.120.1 2001:500:48::1
    • d0.org.afilias-nst.org 199.19.57.1 2001:500:f::1
    • v0n0.pir-ns.org 199.19.56.1 2001:500:e::1
    • v0n1.pir-ns.org 199.19.54.1 2001:500:c::1
    • v0n2.pir-ns.org 199.19.53.1 2001:500:b::1

    192.58.128.30 failed: NOERROR

  2. org.asked v0n0.pir-ns.org 199.19.56.112 ms

    Referral to awsdns-32.org. unsigned delegation

    • g-ns-160.awsdns-32.org 205.251.192.160 2600:9000:5300:a000::1
    • g-ns-738.awsdns-32.org 205.251.194.226 2600:9000:5302:e200::1
    • g-ns-1059.awsdns-32.org 205.251.196.35 2600:9000:5304:2300::1
    • g-ns-1632.awsdns-32.org 205.251.198.96 2600:9000:5306:6000::1

    199.249.120.1 failed: NOERROR

  3. awsdns-32.org.asked g-ns-1059.awsdns-32.org 205.251.196.356.0 ms

    Answer (authoritative):

    ns-1283.awsdns-32.org.172800A205.251.197.3

    205.251.198.96 failed: NOERROR

Nameservers

Every address of every nameserver, asked for awsdns-32.org's SOA. "Parent" means the org zone delegates to it; "zone" means awsdns-32.org lists it itself.

NameserverListed inAddressStatusSerialTime
g-ns-1059.awsdns-32.orgparent + zone205.251.196.35 glueauthoritative15.9 ms
2600:9000:5304:2300::1 glueauthoritative18.7 ms
g-ns-160.awsdns-32.orgparent + zone205.251.192.160 glueauthoritative112 ms
2600:9000:5300:a000::1 glueauthoritative114 ms
g-ns-1632.awsdns-32.orgparent + zone205.251.198.96 glueauthoritative112 ms
2600:9000:5306:6000::1 glueauthoritative114 ms
g-ns-738.awsdns-32.orgparent + zone205.251.194.226 glueauthoritative17.6 ms
2600:9000:5302:e200::1 glueauthoritative19.1 ms

DNSSEC

awsdns-32.org isn't signed: no DS at the parent and no DNSKEY in the zone.

Email

Mail servers (MX)

No MX records: mail goes to the name's A/AAAA address, if anything accepts it there.

SPF

No SPF record.

DMARC

v=DMARC1; p=reject; rua=mailto:report@dmarc.amazon.com; ruf=mailto:report@dmarc.amazon.com

From _dmarc.awsdns-32.org (the organisational domain's policy applies).

Policyreject
Aggregate reports tomailto:report@dmarc.amazon.com
Failure reports tomailto:report@dmarc.amazon.com

DKIM

None of the 36 common selectors tried has a key. DKIM may still be set up under another selector: find it in the DKIM-Signature header (s=) of a mail from this domain.

Hosts and reverse DNS

Every hostname the records point at, resolved to its addresses; each address's PTR (reverse DNS), with ✓ where the PTR name resolves back to the same address.

HostAddressReverse DNS (PTR)
ns-1283.awsdns-32.org
the name looked up
205.251.197.3ns-1283.awsdns-32.org ✓
2600:9000:5305:300::1ns-1283.awsdns-32.org ✓
g-ns-1059.awsdns-32.org
nameserver
205.251.196.35ns-1059.awsdns-04.org ✓
2600:9000:5304:2300::1ns-1059.awsdns-04.org ✓
g-ns-160.awsdns-32.org
nameserver
205.251.192.160ns-160.awsdns-20.com ✓
2600:9000:5300:a000::1ns-160.awsdns-20.com ✓
g-ns-1632.awsdns-32.org
nameserver
205.251.198.96ns-1632.awsdns-12.co.uk ✓
2600:9000:5306:6000::1ns-1632.awsdns-12.co.uk ✓
g-ns-738.awsdns-32.org
nameserver
205.251.194.226ns-738.awsdns-28.net ✓
2600:9000:5302:e200::1ns-738.awsdns-28.net ✓

Public resolvers

What four public resolvers answer right now, from their caches. Highlighted values differ from the authoritative answer: either a recent change they haven't picked up yet (the TTL says how long until they do), or, for A and AAAA, a CDN or geo-routed site handing each resolver location its own addresses.

ResolverAAAAAMX
Cloudflare 1.1.1.1205.251.197.3
TTL 172800
2600:9000:5305:300::1
TTL 172800
none
Google 8.8.8.8205.251.197.3
TTL 20592
2600:9000:5305:300::1
TTL 21600
none
Quad9 9.9.9.9205.251.197.3
TTL 30883
2600:9000:5305:300::1
TTL 31306
none
OpenDNS 208.67.222.222205.251.197.3
TTL 170130
2600:9000:5305:300::1
TTL 144383
none

Text dump

; DNS report for ns-1283.awsdns-32.org
; 2026-11-09 05:12:47 UTC, 181 queries in 0.71 s, zone awsdns-32.org

;; FINDINGS
;  [INFO] awsdns-32.org isn't signed with DNSSEC, so resolvers can't tell forged answers from real ones.

;; RECORDS (authoritative, from g-ns-1059.awsdns-32.org (205.251.196.35))
ns-1283.awsdns-32.org.	172800	IN	A	205.251.197.3
ns-1283.awsdns-32.org.	172800	IN	AAAA	2600:9000:5305:300::1

;; TRACE
;  ns-1283.awsdns-32.org A
;  . @e.root-servers.net (192.203.230.10) 5.8 ms [NOERROR qr]: referral to org.
org.		NS	a2.org.afilias-nst.info.	; 199.249.112.1 2001:500:40::1
org.		NS	b2.org.afilias-nst.org.	; 199.249.120.1 2001:500:48::1
org.		NS	d0.org.afilias-nst.org.	; 199.19.57.1 2001:500:f::1
org.		NS	v0n0.pir-ns.org.	; 199.19.56.1 2001:500:e::1
org.		NS	v0n1.pir-ns.org.	; 199.19.54.1 2001:500:c::1
org.		NS	v0n2.pir-ns.org.	; 199.19.53.1 2001:500:b::1
org.	86400	IN	DS	725 8 2 EB3881030D9D34BB7BC40DDC5A198E7C830804C03FB6AA982592946DEB27BEBE
org.	86400	IN	DS	26974 8 2 4FEDE294C53F438A158C41D39489CD78A86BEB0D8A0AEAFF14745C0D16E1DE32
;  org. @v0n0.pir-ns.org (199.19.56.1) 12 ms [NOERROR qr]: referral to awsdns-32.org.
awsdns-32.org.		NS	g-ns-160.awsdns-32.org.	; 205.251.192.160 2600:9000:5300:a000::1
awsdns-32.org.		NS	g-ns-738.awsdns-32.org.	; 205.251.194.226 2600:9000:5302:e200::1
awsdns-32.org.		NS	g-ns-1059.awsdns-32.org.	; 205.251.196.35 2600:9000:5304:2300::1
awsdns-32.org.		NS	g-ns-1632.awsdns-32.org.	; 205.251.198.96 2600:9000:5306:6000::1
;  awsdns-32.org. @g-ns-1059.awsdns-32.org (205.251.196.35) 6.0 ms [NOERROR qr aa ad]: answer
ns-1283.awsdns-32.org.	172800	IN	A	205.251.197.3

;; NAMESERVERS (SOA asked of each address)
;  g-ns-1059.awsdns-32.org [parent+zone]
;    205.251.196.35                          ok                        1           5.9 ms
;    2600:9000:5304:2300::1                  ok                        1           8.7 ms
;  g-ns-160.awsdns-32.org [parent+zone]
;    205.251.192.160                         ok                        1           12 ms
;    2600:9000:5300:a000::1                  ok                        1           14 ms
;  g-ns-1632.awsdns-32.org [parent+zone]
;    205.251.198.96                          ok                        1           12 ms
;    2600:9000:5306:6000::1                  ok                        1           14 ms
;  g-ns-738.awsdns-32.org [parent+zone]
;    205.251.194.226                         ok                        1           7.6 ms
;    2600:9000:5302:e200::1                  ok                        1           9.1 ms

;; DNSSEC: unsigned

;; EMAIL
;  DMARC: v=DMARC1; p=reject; rua=mailto:report@dmarc.amazon.com; ruf=mailto:report@dmarc.amazon.com

;; HOSTS
;  ns-1283.awsdns-32.org (the name looked up)
;    205.251.197.3                           PTR ns-1283.awsdns-32.org (confirmed)
;    2600:9000:5305:300::1                   PTR ns-1283.awsdns-32.org (confirmed)
;  g-ns-1059.awsdns-32.org (nameserver)
;    205.251.196.35                          PTR ns-1059.awsdns-04.org (confirmed)
;    2600:9000:5304:2300::1                  PTR ns-1059.awsdns-04.org (confirmed)
;  g-ns-160.awsdns-32.org (nameserver)
;    205.251.192.160                         PTR ns-160.awsdns-20.com (confirmed)
;    2600:9000:5300:a000::1                  PTR ns-160.awsdns-20.com (confirmed)
;  g-ns-1632.awsdns-32.org (nameserver)
;    205.251.198.96                          PTR ns-1632.awsdns-12.co.uk (confirmed)
;    2600:9000:5306:6000::1                  PTR ns-1632.awsdns-12.co.uk (confirmed)
;  g-ns-738.awsdns-32.org (nameserver)
;    205.251.194.226                         PTR ns-738.awsdns-28.net (confirmed)
;    2600:9000:5302:e200::1                  PTR ns-738.awsdns-28.net (confirmed)

;; PUBLIC RESOLVERS
;  Cloudflare A     205.251.197.3  ttl 172800
;  Cloudflare AAAA  2600:9000:5305:300::1  ttl 172800
;  Cloudflare MX    -
;  Google     A     205.251.197.3  ttl 20592
;  Google     AAAA  2600:9000:5305:300::1  ttl 21600
;  Google     MX    -
;  Quad9      A     205.251.197.3  ttl 30883
;  Quad9      AAAA  2600:9000:5305:300::1  ttl 31306
;  Quad9      MX    -
;  OpenDNS    A     205.251.197.3  ttl 170130
;  OpenDNS    AAAA  2600:9000:5305:300::1  ttl 144383
;  OpenDNS    MX    -