Made in / Donate

DNS lookup

Everything DNS says about a domain: traced from the root servers down, every record type asked of the domain's own nameservers, each nameserver checked, then every hostname and policy record it points at followed, with SPF, DMARC, DKIM and DNSSEC checked along the way.

Try example.com, gmail.com, www.github.com, dnssec-failed.org, 1.1.1.1. A URL, e-mail address or IP address works too.

ns-421.awsdns-52.com

Zone awsdns-52.com181 queries in 0.5 s2026-11-09 05:12:43 UTCNot DNSSEC-signed

WHOIS for awsdns-52.com →TextJSON
  • Note awsdns-52.com isn't signed with DNSSEC, so resolvers can't tell forged answers from real ones.

Records

Asked directly of g-ns-1204.awsdns-52.com (205.251.196.180), an authoritative server: no cache in between, so these are the live values.

A IPv4 address

172800A205.251.193.165

AAAA IPv6 address

172800AAAA2600:9000:5301:a500::1
ANY query: 2 records
172800A205.251.193.165
172800AAAA2600:9000:5301:a500::1

No records of type CNAME, DNAME, NS, SOA, MX, TXT, CAA, HTTPS, SVCB, SRV, NAPTR, DS, DNSKEY, CDS, CDNSKEY, NSEC3PARAM, TLSA, SSHFP, LOC, HINFO, RP, URI, SPF, OPENPGPKEY, ZONEMD, CSYNC, PTR.

Resolution trace

  1. .asked k.root-servers.net 193.0.14.12939 ms

    Referral to com. signed (1 DS)

    • m.gtld-servers.net 192.55.83.30 2001:501:b1f9::30
    • l.gtld-servers.net 192.41.162.30 2001:500:d937::30
    • j.gtld-servers.net 192.48.79.30 2001:502:7094::30
    • d.gtld-servers.net 192.31.80.30 2001:500:856e::30
    • b.gtld-servers.net 192.33.14.30 2001:503:231d::2:30
    • e.gtld-servers.net 192.12.94.30 2001:502:1ca1::30
    • c.gtld-servers.net 192.26.92.30 2001:503:83eb::30
    • f.gtld-servers.net 192.35.51.30 2001:503:d414::30
    • i.gtld-servers.net 192.43.172.30 2001:503:39c1::30
    • h.gtld-servers.net 192.54.112.30 2001:502:8cc::30
    • g.gtld-servers.net 192.42.93.30 2001:503:eea3::30
    • k.gtld-servers.net 192.52.178.30 2001:503:d2d::30
    • a.gtld-servers.net 192.5.6.30 2001:503:a83e::2:30
  2. com.asked f.gtld-servers.net 192.35.51.3021 ms

    Referral to awsdns-52.com. unsigned delegation

    • g-ns-53.awsdns-52.com 205.251.192.53 2600:9000:5300:3500::1
    • g-ns-628.awsdns-52.com 205.251.194.116 2600:9000:5302:7400::1
    • g-ns-1204.awsdns-52.com 205.251.196.180 2600:9000:5304:b400::1
    • g-ns-1780.awsdns-52.com 205.251.198.244 2600:9000:5306:f400::1

    192.26.92.30 failed: NOERROR

  3. awsdns-52.com.asked g-ns-1204.awsdns-52.com 205.251.196.1805.8 ms

    Answer (authoritative):

    ns-421.awsdns-52.com.172800A205.251.193.165

Nameservers

Every address of every nameserver, asked for awsdns-52.com's SOA. "Parent" means the com zone delegates to it; "zone" means awsdns-52.com lists it itself.

NameserverListed inAddressStatusSerialTime
g-ns-1204.awsdns-52.comparent + zone205.251.196.180 glueauthoritative15.9 ms
2600:9000:5304:b400::1 glueauthoritative16.6 ms
g-ns-1780.awsdns-52.comparent + zone205.251.198.244 glueauthoritative111 ms
2600:9000:5306:f400::1 glueauthoritative112 ms
g-ns-53.awsdns-52.comparent + zone205.251.192.53 glueauthoritative111 ms
2600:9000:5300:3500::1 glueauthoritative112 ms
g-ns-628.awsdns-52.comparent + zone205.251.194.116 glueauthoritative16.6 ms
2600:9000:5302:7400::1 glueauthoritative16.9 ms

DNSSEC

awsdns-52.com isn't signed: no DS at the parent and no DNSKEY in the zone.

Email

Mail servers (MX)

No MX records: mail goes to the name's A/AAAA address, if anything accepts it there.

SPF

No SPF record.

DMARC

v=DMARC1; p=reject; rua=mailto:report@dmarc.amazon.com; ruf=mailto:report@dmarc.amazon.com

From _dmarc.awsdns-52.com (the organisational domain's policy applies).

Policyreject
Aggregate reports tomailto:report@dmarc.amazon.com
Failure reports tomailto:report@dmarc.amazon.com

DKIM

None of the 36 common selectors tried has a key. DKIM may still be set up under another selector: find it in the DKIM-Signature header (s=) of a mail from this domain.

Hosts and reverse DNS

Every hostname the records point at, resolved to its addresses; each address's PTR (reverse DNS), with ✓ where the PTR name resolves back to the same address.

HostAddressReverse DNS (PTR)
ns-421.awsdns-52.com
the name looked up
205.251.193.165ns-421.awsdns-52.com ✓
2600:9000:5301:a500::1ns-421.awsdns-52.com ✓
g-ns-1204.awsdns-52.com
nameserver
205.251.196.180ns-1204.awsdns-22.org ✓
2600:9000:5304:b400::1ns-1204.awsdns-22.org ✓
g-ns-1780.awsdns-52.com
nameserver
205.251.198.244ns-1780.awsdns-30.co.uk ✓
2600:9000:5306:f400::1ns-1780.awsdns-30.co.uk ✓
g-ns-53.awsdns-52.com
nameserver
205.251.192.53ns-53.awsdns-06.com ✓
2600:9000:5300:3500::1ns-53.awsdns-06.com ✓
g-ns-628.awsdns-52.com
nameserver
205.251.194.116ns-628.awsdns-14.net ✓
2600:9000:5302:7400::1ns-628.awsdns-14.net ✓

Public resolvers

What four public resolvers answer right now, from their caches. Highlighted values differ from the authoritative answer: either a recent change they haven't picked up yet (the TTL says how long until they do), or, for A and AAAA, a CDN or geo-routed site handing each resolver location its own addresses.

ResolverAAAAAMX
Cloudflare 1.1.1.1205.251.193.165
TTL 172800
2600:9000:5301:a500::1
TTL 172800
none
Google 8.8.8.8205.251.193.165
TTL 21113
2600:9000:5301:a500::1
TTL 21600
none
Quad9 9.9.9.9205.251.193.165
TTL 36108
2600:9000:5301:a500::1
TTL 38835
none
OpenDNS 208.67.222.222205.251.193.165
TTL 147564
2600:9000:5301:a500::1
TTL 111800
none

Text dump

; DNS report for ns-421.awsdns-52.com
; 2026-11-09 05:12:43 UTC, 181 queries in 0.47 s, zone awsdns-52.com

;; FINDINGS
;  [INFO] awsdns-52.com isn't signed with DNSSEC, so resolvers can't tell forged answers from real ones.

;; RECORDS (authoritative, from g-ns-1204.awsdns-52.com (205.251.196.180))
ns-421.awsdns-52.com.	172800	IN	A	205.251.193.165
ns-421.awsdns-52.com.	172800	IN	AAAA	2600:9000:5301:a500::1

;; TRACE
;  ns-421.awsdns-52.com A
;  . @k.root-servers.net (193.0.14.129) 39 ms [NOERROR qr]: referral to com.
com.		NS	m.gtld-servers.net.	; 192.55.83.30 2001:501:b1f9::30
com.		NS	l.gtld-servers.net.	; 192.41.162.30 2001:500:d937::30
com.		NS	j.gtld-servers.net.	; 192.48.79.30 2001:502:7094::30
com.		NS	d.gtld-servers.net.	; 192.31.80.30 2001:500:856e::30
com.		NS	b.gtld-servers.net.	; 192.33.14.30 2001:503:231d::2:30
com.		NS	e.gtld-servers.net.	; 192.12.94.30 2001:502:1ca1::30
com.		NS	c.gtld-servers.net.	; 192.26.92.30 2001:503:83eb::30
com.		NS	f.gtld-servers.net.	; 192.35.51.30 2001:503:d414::30
com.		NS	i.gtld-servers.net.	; 192.43.172.30 2001:503:39c1::30
com.		NS	h.gtld-servers.net.	; 192.54.112.30 2001:502:8cc::30
com.		NS	g.gtld-servers.net.	; 192.42.93.30 2001:503:eea3::30
com.		NS	k.gtld-servers.net.	; 192.52.178.30 2001:503:d2d::30
com.		NS	a.gtld-servers.net.	; 192.5.6.30 2001:503:a83e::2:30
com.	86400	IN	DS	19718 13 2 8ACBB0CD28F41250A80A491389424D341522D946B0DA0C0291F2D3D771D7805A
;  com. @f.gtld-servers.net (192.35.51.30) 21 ms [NOERROR qr]: referral to awsdns-52.com.
awsdns-52.com.		NS	g-ns-53.awsdns-52.com.	; 205.251.192.53 2600:9000:5300:3500::1
awsdns-52.com.		NS	g-ns-628.awsdns-52.com.	; 205.251.194.116 2600:9000:5302:7400::1
awsdns-52.com.		NS	g-ns-1204.awsdns-52.com.	; 205.251.196.180 2600:9000:5304:b400::1
awsdns-52.com.		NS	g-ns-1780.awsdns-52.com.	; 205.251.198.244 2600:9000:5306:f400::1
;  awsdns-52.com. @g-ns-1204.awsdns-52.com (205.251.196.180) 5.8 ms [NOERROR qr aa ad]: answer
ns-421.awsdns-52.com.	172800	IN	A	205.251.193.165

;; NAMESERVERS (SOA asked of each address)
;  g-ns-1204.awsdns-52.com [parent+zone]
;    205.251.196.180                         ok                        1           5.9 ms
;    2600:9000:5304:b400::1                  ok                        1           6.6 ms
;  g-ns-1780.awsdns-52.com [parent+zone]
;    205.251.198.244                         ok                        1           11 ms
;    2600:9000:5306:f400::1                  ok                        1           12 ms
;  g-ns-53.awsdns-52.com [parent+zone]
;    205.251.192.53                          ok                        1           11 ms
;    2600:9000:5300:3500::1                  ok                        1           12 ms
;  g-ns-628.awsdns-52.com [parent+zone]
;    205.251.194.116                         ok                        1           6.6 ms
;    2600:9000:5302:7400::1                  ok                        1           6.9 ms

;; DNSSEC: unsigned

;; EMAIL
;  DMARC: v=DMARC1; p=reject; rua=mailto:report@dmarc.amazon.com; ruf=mailto:report@dmarc.amazon.com

;; HOSTS
;  ns-421.awsdns-52.com (the name looked up)
;    205.251.193.165                         PTR ns-421.awsdns-52.com (confirmed)
;    2600:9000:5301:a500::1                  PTR ns-421.awsdns-52.com (confirmed)
;  g-ns-1204.awsdns-52.com (nameserver)
;    205.251.196.180                         PTR ns-1204.awsdns-22.org (confirmed)
;    2600:9000:5304:b400::1                  PTR ns-1204.awsdns-22.org (confirmed)
;  g-ns-1780.awsdns-52.com (nameserver)
;    205.251.198.244                         PTR ns-1780.awsdns-30.co.uk (confirmed)
;    2600:9000:5306:f400::1                  PTR ns-1780.awsdns-30.co.uk (confirmed)
;  g-ns-53.awsdns-52.com (nameserver)
;    205.251.192.53                          PTR ns-53.awsdns-06.com (confirmed)
;    2600:9000:5300:3500::1                  PTR ns-53.awsdns-06.com (confirmed)
;  g-ns-628.awsdns-52.com (nameserver)
;    205.251.194.116                         PTR ns-628.awsdns-14.net (confirmed)
;    2600:9000:5302:7400::1                  PTR ns-628.awsdns-14.net (confirmed)

;; PUBLIC RESOLVERS
;  Cloudflare A     205.251.193.165  ttl 172800
;  Cloudflare AAAA  2600:9000:5301:a500::1  ttl 172800
;  Cloudflare MX    -
;  Google     A     205.251.193.165  ttl 21113
;  Google     AAAA  2600:9000:5301:a500::1  ttl 21600
;  Google     MX    -
;  Quad9      A     205.251.193.165  ttl 36108
;  Quad9      AAAA  2600:9000:5301:a500::1  ttl 38835
;  Quad9      MX    -
;  OpenDNS    A     205.251.193.165  ttl 147564
;  OpenDNS    AAAA  2600:9000:5301:a500::1  ttl 111800
;  OpenDNS    MX    -