Made in / Donate

DNS lookup

Everything DNS says about a domain: traced from the root servers down, every record type asked of the domain's own nameservers, each nameserver checked, then every hostname and policy record it points at followed, with SPF, DMARC, DKIM and DNSSEC checked along the way.

Try example.com, gmail.com, www.github.com, dnssec-failed.org, 1.1.1.1. A URL, e-mail address or IP address works too.

ns-1707.awsdns-21.co.uk

Zone awsdns-21.co.uk181 queries in 0.3 s2026-11-09 05:12:47 UTCNot DNSSEC-signed

WHOIS for awsdns-21.co.uk →TextJSON
  • Note awsdns-21.co.uk isn't signed with DNSSEC, so resolvers can't tell forged answers from real ones.

Records

Asked directly of g-ns-1496.awsdns-21.co.uk (205.251.197.216), an authoritative server: no cache in between, so these are the live values.

A IPv4 address

172800A205.251.198.171

AAAA IPv6 address

172800AAAA2600:9000:5306:ab00::1
ANY query: 2 records
172800A205.251.198.171
172800AAAA2600:9000:5306:ab00::1

No records of type CNAME, DNAME, NS, SOA, MX, TXT, CAA, HTTPS, SVCB, SRV, NAPTR, DS, DNSKEY, CDS, CDNSKEY, NSEC3PARAM, TLSA, SSHFP, LOC, HINFO, RP, URI, SPF, OPENPGPKEY, ZONEMD, CSYNC, PTR.

Resolution trace

  1. .asked a.root-servers.net 198.41.0.411 ms

    Referral to uk. signed (1 DS)

    • dns1.nic.uk 213.248.216.1 2a01:618:400::1
    • dns3.nic.uk 213.248.220.1 2a01:618:404::1
    • nsc.nic.uk 156.154.102.3 2610:a1:1009::3
    • nsa.nic.uk 156.154.100.3 2001:502:ad09::3
    • nsd.nic.uk 156.154.103.3 2610:a1:1010::3
    • dns2.nic.uk 103.49.80.1 2401:fd80:400::1
    • dns4.nic.uk 43.230.48.1 2401:fd80:404::1
    • nsb.nic.uk 156.154.101.3 2001:502:2eda::3
  2. uk.asked nsc.nic.uk 156.154.102.35.5 ms

    Referral to awsdns-21.co.uk. unsigned delegation

    • g-ns-917.awsdns-21.co.uk 205.251.195.149 2600:9000:5303:9500::1
    • g-ns-341.awsdns-21.co.uk 205.251.193.85 2600:9000:5301:5500::1
    • g-ns-1817.awsdns-21.co.uk 205.251.199.25 2600:9000:5307:1900::1
    • g-ns-1496.awsdns-21.co.uk 205.251.197.216 2600:9000:5305:d800::1

    43.230.48.1 failed: NOERROR

  3. awsdns-21.co.uk.asked g-ns-1496.awsdns-21.co.uk 205.251.197.2166.0 ms

    Answer (authoritative):

    ns-1707.awsdns-21.co.uk.172800A205.251.198.171

    205.251.195.149 failed: NOERROR

Nameservers

Every address of every nameserver, asked for awsdns-21.co.uk's SOA. "Parent" means the uk zone delegates to it; "zone" means awsdns-21.co.uk lists it itself.

NameserverListed inAddressStatusSerialTime
g-ns-1496.awsdns-21.co.ukparent + zone205.251.197.216 glueauthoritative15.8 ms
2600:9000:5305:d800::1 glueauthoritative18.4 ms
g-ns-1817.awsdns-21.co.ukparent + zone205.251.199.25 glueauthoritative111 ms
2600:9000:5307:1900::1 glueauthoritative114 ms
g-ns-341.awsdns-21.co.ukparent + zone205.251.193.85 glueauthoritative112 ms
2600:9000:5301:5500::1 glueauthoritative114 ms
g-ns-917.awsdns-21.co.ukparent + zone205.251.195.149 glueauthoritative16.2 ms
2600:9000:5303:9500::1 glueauthoritative19.0 ms

DNSSEC

awsdns-21.co.uk isn't signed: no DS at the parent and no DNSKEY in the zone.

Email

Mail servers (MX)

No MX records: mail goes to the name's A/AAAA address, if anything accepts it there.

SPF

No SPF record.

DMARC

v=DMARC1; p=reject; rua=mailto:report@dmarc.amazon.com; ruf=mailto:report@dmarc.amazon.com

From _dmarc.awsdns-21.co.uk (the organisational domain's policy applies).

Policyreject
Aggregate reports tomailto:report@dmarc.amazon.com
Failure reports tomailto:report@dmarc.amazon.com

DKIM

None of the 36 common selectors tried has a key. DKIM may still be set up under another selector: find it in the DKIM-Signature header (s=) of a mail from this domain.

Hosts and reverse DNS

Every hostname the records point at, resolved to its addresses; each address's PTR (reverse DNS), with ✓ where the PTR name resolves back to the same address.

HostAddressReverse DNS (PTR)
ns-1707.awsdns-21.co.uk
the name looked up
205.251.198.171ns-1707.awsdns-21.co.uk ✓
2600:9000:5306:ab00::1ns-1707.awsdns-21.co.uk ✓
g-ns-1496.awsdns-21.co.uk
nameserver
205.251.197.216ns-1496.awsdns-59.org ✓
2600:9000:5305:d800::1ns-1496.awsdns-59.org ✓
g-ns-1817.awsdns-21.co.uk
nameserver
205.251.199.25ns-1817.awsdns-35.co.uk ✓
2600:9000:5307:1900::1ns-1817.awsdns-35.co.uk ✓
g-ns-341.awsdns-21.co.uk
nameserver
205.251.193.85ns-341.awsdns-42.com ✓
2600:9000:5301:5500::1ns-341.awsdns-42.com ✓
g-ns-917.awsdns-21.co.uk
nameserver
205.251.195.149ns-917.awsdns-50.net ✓
2600:9000:5303:9500::1ns-917.awsdns-50.net ✓

Public resolvers

What four public resolvers answer right now, from their caches. Highlighted values differ from the authoritative answer: either a recent change they haven't picked up yet (the TTL says how long until they do), or, for A and AAAA, a CDN or geo-routed site handing each resolver location its own addresses.

ResolverAAAAAMX
Cloudflare 1.1.1.1205.251.198.171
TTL 170058
2600:9000:5306:ab00::1
TTL 172800
none
Google 8.8.8.8205.251.198.171
TTL 20901
2600:9000:5306:ab00::1
TTL 21299
none
Quad9 9.9.9.9205.251.198.171
TTL 35578
2600:9000:5306:ab00::1
TTL 35578
none
OpenDNS 208.67.222.222205.251.198.171
TTL 158470
2600:9000:5306:ab00::1
TTL 137803
none

Text dump

; DNS report for ns-1707.awsdns-21.co.uk
; 2026-11-09 05:12:47 UTC, 181 queries in 0.27 s, zone awsdns-21.co.uk

;; FINDINGS
;  [INFO] awsdns-21.co.uk isn't signed with DNSSEC, so resolvers can't tell forged answers from real ones.

;; RECORDS (authoritative, from g-ns-1496.awsdns-21.co.uk (205.251.197.216))
ns-1707.awsdns-21.co.uk.	172800	IN	A	205.251.198.171
ns-1707.awsdns-21.co.uk.	172800	IN	AAAA	2600:9000:5306:ab00::1

;; TRACE
;  ns-1707.awsdns-21.co.uk A
;  . @a.root-servers.net (198.41.0.4) 11 ms [NOERROR qr]: referral to uk.
uk.		NS	dns1.nic.uk.	; 213.248.216.1 2a01:618:400::1
uk.		NS	dns3.nic.uk.	; 213.248.220.1 2a01:618:404::1
uk.		NS	nsc.nic.uk.	; 156.154.102.3 2610:a1:1009::3
uk.		NS	nsa.nic.uk.	; 156.154.100.3 2001:502:ad09::3
uk.		NS	nsd.nic.uk.	; 156.154.103.3 2610:a1:1010::3
uk.		NS	dns2.nic.uk.	; 103.49.80.1 2401:fd80:400::1
uk.		NS	dns4.nic.uk.	; 43.230.48.1 2401:fd80:404::1
uk.		NS	nsb.nic.uk.	; 156.154.101.3 2001:502:2eda::3
uk.	86400	IN	DS	43876 8 2 A107ED2AC1BD14D924173BC7E827A1153582072394F9272BA37E2353BC659603
;  uk. @nsc.nic.uk (156.154.102.3) 5.5 ms [NOERROR qr]: referral to awsdns-21.co.uk.
awsdns-21.co.uk.		NS	g-ns-917.awsdns-21.co.uk.	; 205.251.195.149 2600:9000:5303:9500::1
awsdns-21.co.uk.		NS	g-ns-341.awsdns-21.co.uk.	; 205.251.193.85 2600:9000:5301:5500::1
awsdns-21.co.uk.		NS	g-ns-1817.awsdns-21.co.uk.	; 205.251.199.25 2600:9000:5307:1900::1
awsdns-21.co.uk.		NS	g-ns-1496.awsdns-21.co.uk.	; 205.251.197.216 2600:9000:5305:d800::1
;  awsdns-21.co.uk. @g-ns-1496.awsdns-21.co.uk (205.251.197.216) 6.0 ms [NOERROR qr aa ad]: answer
ns-1707.awsdns-21.co.uk.	172800	IN	A	205.251.198.171

;; NAMESERVERS (SOA asked of each address)
;  g-ns-1496.awsdns-21.co.uk [parent+zone]
;    205.251.197.216                         ok                        1           5.8 ms
;    2600:9000:5305:d800::1                  ok                        1           8.4 ms
;  g-ns-1817.awsdns-21.co.uk [parent+zone]
;    205.251.199.25                          ok                        1           11 ms
;    2600:9000:5307:1900::1                  ok                        1           14 ms
;  g-ns-341.awsdns-21.co.uk [parent+zone]
;    205.251.193.85                          ok                        1           12 ms
;    2600:9000:5301:5500::1                  ok                        1           14 ms
;  g-ns-917.awsdns-21.co.uk [parent+zone]
;    205.251.195.149                         ok                        1           6.2 ms
;    2600:9000:5303:9500::1                  ok                        1           9.0 ms

;; DNSSEC: unsigned

;; EMAIL
;  DMARC: v=DMARC1; p=reject; rua=mailto:report@dmarc.amazon.com; ruf=mailto:report@dmarc.amazon.com

;; HOSTS
;  ns-1707.awsdns-21.co.uk (the name looked up)
;    205.251.198.171                         PTR ns-1707.awsdns-21.co.uk (confirmed)
;    2600:9000:5306:ab00::1                  PTR ns-1707.awsdns-21.co.uk (confirmed)
;  g-ns-1496.awsdns-21.co.uk (nameserver)
;    205.251.197.216                         PTR ns-1496.awsdns-59.org (confirmed)
;    2600:9000:5305:d800::1                  PTR ns-1496.awsdns-59.org (confirmed)
;  g-ns-1817.awsdns-21.co.uk (nameserver)
;    205.251.199.25                          PTR ns-1817.awsdns-35.co.uk (confirmed)
;    2600:9000:5307:1900::1                  PTR ns-1817.awsdns-35.co.uk (confirmed)
;  g-ns-341.awsdns-21.co.uk (nameserver)
;    205.251.193.85                          PTR ns-341.awsdns-42.com (confirmed)
;    2600:9000:5301:5500::1                  PTR ns-341.awsdns-42.com (confirmed)
;  g-ns-917.awsdns-21.co.uk (nameserver)
;    205.251.195.149                         PTR ns-917.awsdns-50.net (confirmed)
;    2600:9000:5303:9500::1                  PTR ns-917.awsdns-50.net (confirmed)

;; PUBLIC RESOLVERS
;  Cloudflare A     205.251.198.171  ttl 170058
;  Cloudflare AAAA  2600:9000:5306:ab00::1  ttl 172800
;  Cloudflare MX    -
;  Google     A     205.251.198.171  ttl 20901
;  Google     AAAA  2600:9000:5306:ab00::1  ttl 21299
;  Google     MX    -
;  Quad9      A     205.251.198.171  ttl 35578
;  Quad9      AAAA  2600:9000:5306:ab00::1  ttl 35578
;  Quad9      MX    -
;  OpenDNS    A     205.251.198.171  ttl 158470
;  OpenDNS    AAAA  2600:9000:5306:ab00::1  ttl 137803
;  OpenDNS    MX    -