Made in / Donate

DNS lookup

Everything DNS says about a domain: traced from the root servers down, every record type asked of the domain's own nameservers, each nameserver checked, then every hostname and policy record it points at followed, with SPF, DMARC, DKIM and DNSSEC checked along the way.

Try example.com, gmail.com, www.github.com, dnssec-failed.org, 1.1.1.1. A URL, e-mail address or IP address works too.

ns-520.awsdns-01.net

Zone awsdns-01.net181 queries in 0.5 s2026-11-09 05:12:47 UTCNot DNSSEC-signed

WHOIS for awsdns-01.net →TextJSON
  • Note awsdns-01.net isn't signed with DNSSEC, so resolvers can't tell forged answers from real ones.

Records

Asked directly of g-ns-1345.awsdns-01.net (205.251.197.65), an authoritative server: no cache in between, so these are the live values.

A IPv4 address

172800A205.251.194.8

AAAA IPv6 address

172800AAAA2600:9000:5302:800::1
ANY query: 2 records
172800A205.251.194.8
172800AAAA2600:9000:5302:800::1

No records of type CNAME, DNAME, NS, SOA, MX, TXT, CAA, HTTPS, SVCB, SRV, NAPTR, DS, DNSKEY, CDS, CDNSKEY, NSEC3PARAM, TLSA, SSHFP, LOC, HINFO, RP, URI, SPF, OPENPGPKEY, ZONEMD, CSYNC, PTR.

Resolution trace

  1. .asked l.root-servers.net 199.7.83.429.4 ms

    Referral to net. signed (1 DS)

    • a.gtld-servers.net 192.5.6.30 2001:503:a83e::2:30
    • b.gtld-servers.net 192.33.14.30 2001:503:231d::2:30
    • c.gtld-servers.net 192.26.92.30 2001:503:83eb::30
    • d.gtld-servers.net 192.31.80.30 2001:500:856e::30
    • e.gtld-servers.net 192.12.94.30 2001:502:1ca1::30
    • f.gtld-servers.net 192.35.51.30 2001:503:d414::30
    • g.gtld-servers.net 192.42.93.30 2001:503:eea3::30
    • h.gtld-servers.net 192.54.112.30 2001:502:8cc::30
    • i.gtld-servers.net 192.43.172.30 2001:503:39c1::30
    • j.gtld-servers.net 192.48.79.30 2001:502:7094::30
    • k.gtld-servers.net 192.52.178.30 2001:503:d2d::30
    • l.gtld-servers.net 192.41.162.30 2001:500:d937::30
    • m.gtld-servers.net 192.55.83.30 2001:501:b1f9::30

    192.112.36.4 failed: NOERROR

  2. net.asked i.gtld-servers.net 192.43.172.3022 ms

    Referral to awsdns-01.net. unsigned delegation

    • g-ns-450.awsdns-01.net 205.251.193.194 2600:9000:5301:c200::1
    • g-ns-771.awsdns-01.net 205.251.195.3 2600:9000:5303:300::1
    • g-ns-1345.awsdns-01.net 205.251.197.65 2600:9000:5305:4100::1
    • g-ns-1921.awsdns-01.net 205.251.199.129 2600:9000:5307:8100::1

    192.31.80.30 failed: NOERROR

  3. awsdns-01.net.asked g-ns-771.awsdns-01.net 205.251.195.36.3 ms

    Answer (authoritative):

    ns-520.awsdns-01.net.172800A205.251.194.8

    205.251.199.129 failed: NOERROR

Nameservers

Every address of every nameserver, asked for awsdns-01.net's SOA. "Parent" means the net zone delegates to it; "zone" means awsdns-01.net lists it itself.

NameserverListed inAddressStatusSerialTime
g-ns-1345.awsdns-01.netparent + zone205.251.197.65 glueauthoritative15.7 ms
2600:9000:5305:4100::1 glueauthoritative18.0 ms
g-ns-1921.awsdns-01.netparent + zone205.251.199.129 glueauthoritative111 ms
2600:9000:5307:8100::1 glueauthoritative113 ms
g-ns-450.awsdns-01.netparent + zone205.251.193.194 glueauthoritative111 ms
2600:9000:5301:c200::1 glueauthoritative113 ms
g-ns-771.awsdns-01.netparent + zone205.251.195.3 glueauthoritative16.5 ms
2600:9000:5303:300::1 glueauthoritative18.1 ms

DNSSEC

awsdns-01.net isn't signed: no DS at the parent and no DNSKEY in the zone.

Email

Mail servers (MX)

No MX records: mail goes to the name's A/AAAA address, if anything accepts it there.

SPF

No SPF record.

DMARC

v=DMARC1; p=reject; rua=mailto:report@dmarc.amazon.com; ruf=mailto:report@dmarc.amazon.com

From _dmarc.awsdns-01.net (the organisational domain's policy applies).

Policyreject
Aggregate reports tomailto:report@dmarc.amazon.com
Failure reports tomailto:report@dmarc.amazon.com

DKIM

None of the 36 common selectors tried has a key. DKIM may still be set up under another selector: find it in the DKIM-Signature header (s=) of a mail from this domain.

Hosts and reverse DNS

Every hostname the records point at, resolved to its addresses; each address's PTR (reverse DNS), with ✓ where the PTR name resolves back to the same address.

HostAddressReverse DNS (PTR)
ns-520.awsdns-01.net
the name looked up
205.251.194.8ns-520.awsdns-01.net ✓
2600:9000:5302:800::1ns-520.awsdns-01.net ✓
g-ns-1345.awsdns-01.net
nameserver
205.251.197.65ns-1345.awsdns-40.org ✓
2600:9000:5305:4100::1ns-1345.awsdns-40.org ✓
g-ns-1921.awsdns-01.net
nameserver
205.251.199.129ns-1921.awsdns-48.co.uk ✓
2600:9000:5307:8100::1ns-1921.awsdns-48.co.uk ✓
g-ns-450.awsdns-01.net
nameserver
205.251.193.194ns-450.awsdns-56.com ✓
2600:9000:5301:c200::1ns-450.awsdns-56.com ✓
g-ns-771.awsdns-01.net
nameserver
205.251.195.3ns-771.awsdns-32.net ✓
2600:9000:5303:300::1ns-771.awsdns-32.net ✓

Public resolvers

What four public resolvers answer right now, from their caches. Highlighted values differ from the authoritative answer: either a recent change they haven't picked up yet (the TTL says how long until they do), or, for A and AAAA, a CDN or geo-routed site handing each resolver location its own addresses.

ResolverAAAAAMX
Cloudflare 1.1.1.1205.251.194.8
TTL 162776
2600:9000:5302:800::1
TTL 172800
none
Google 8.8.8.8205.251.194.8
TTL 19786
2600:9000:5302:800::1
TTL 21456
none
Quad9 9.9.9.9205.251.194.8
TTL 22420
2600:9000:5302:800::1
TTL 35534
none
OpenDNS 208.67.222.222205.251.194.8
TTL 119461
2600:9000:5302:800::1
TTL 136667
none

Text dump

; DNS report for ns-520.awsdns-01.net
; 2026-11-09 05:12:47 UTC, 181 queries in 0.51 s, zone awsdns-01.net

;; FINDINGS
;  [INFO] awsdns-01.net isn't signed with DNSSEC, so resolvers can't tell forged answers from real ones.

;; RECORDS (authoritative, from g-ns-1345.awsdns-01.net (205.251.197.65))
ns-520.awsdns-01.net.	172800	IN	A	205.251.194.8
ns-520.awsdns-01.net.	172800	IN	AAAA	2600:9000:5302:800::1

;; TRACE
;  ns-520.awsdns-01.net A
;  . @l.root-servers.net (199.7.83.42) 9.4 ms [NOERROR qr]: referral to net.
net.		NS	a.gtld-servers.net.	; 192.5.6.30 2001:503:a83e::2:30
net.		NS	b.gtld-servers.net.	; 192.33.14.30 2001:503:231d::2:30
net.		NS	c.gtld-servers.net.	; 192.26.92.30 2001:503:83eb::30
net.		NS	d.gtld-servers.net.	; 192.31.80.30 2001:500:856e::30
net.		NS	e.gtld-servers.net.	; 192.12.94.30 2001:502:1ca1::30
net.		NS	f.gtld-servers.net.	; 192.35.51.30 2001:503:d414::30
net.		NS	g.gtld-servers.net.	; 192.42.93.30 2001:503:eea3::30
net.		NS	h.gtld-servers.net.	; 192.54.112.30 2001:502:8cc::30
net.		NS	i.gtld-servers.net.	; 192.43.172.30 2001:503:39c1::30
net.		NS	j.gtld-servers.net.	; 192.48.79.30 2001:502:7094::30
net.		NS	k.gtld-servers.net.	; 192.52.178.30 2001:503:d2d::30
net.		NS	l.gtld-servers.net.	; 192.41.162.30 2001:500:d937::30
net.		NS	m.gtld-servers.net.	; 192.55.83.30 2001:501:b1f9::30
net.	86400	IN	DS	37331 13 2 2F0BEC2D6F79DFBD1D08FD21A3AF92D0E39A4B9EF1E3F4111FFF282490DA453B
;  net. @i.gtld-servers.net (192.43.172.30) 22 ms [NOERROR qr]: referral to awsdns-01.net.
awsdns-01.net.		NS	g-ns-450.awsdns-01.net.	; 205.251.193.194 2600:9000:5301:c200::1
awsdns-01.net.		NS	g-ns-771.awsdns-01.net.	; 205.251.195.3 2600:9000:5303:300::1
awsdns-01.net.		NS	g-ns-1345.awsdns-01.net.	; 205.251.197.65 2600:9000:5305:4100::1
awsdns-01.net.		NS	g-ns-1921.awsdns-01.net.	; 205.251.199.129 2600:9000:5307:8100::1
;  awsdns-01.net. @g-ns-771.awsdns-01.net (205.251.195.3) 6.3 ms [NOERROR qr aa ad]: answer
ns-520.awsdns-01.net.	172800	IN	A	205.251.194.8

;; NAMESERVERS (SOA asked of each address)
;  g-ns-1345.awsdns-01.net [parent+zone]
;    205.251.197.65                          ok                        1           5.7 ms
;    2600:9000:5305:4100::1                  ok                        1           8.0 ms
;  g-ns-1921.awsdns-01.net [parent+zone]
;    205.251.199.129                         ok                        1           11 ms
;    2600:9000:5307:8100::1                  ok                        1           13 ms
;  g-ns-450.awsdns-01.net [parent+zone]
;    205.251.193.194                         ok                        1           11 ms
;    2600:9000:5301:c200::1                  ok                        1           13 ms
;  g-ns-771.awsdns-01.net [parent+zone]
;    205.251.195.3                           ok                        1           6.5 ms
;    2600:9000:5303:300::1                   ok                        1           8.1 ms

;; DNSSEC: unsigned

;; EMAIL
;  DMARC: v=DMARC1; p=reject; rua=mailto:report@dmarc.amazon.com; ruf=mailto:report@dmarc.amazon.com

;; HOSTS
;  ns-520.awsdns-01.net (the name looked up)
;    205.251.194.8                           PTR ns-520.awsdns-01.net (confirmed)
;    2600:9000:5302:800::1                   PTR ns-520.awsdns-01.net (confirmed)
;  g-ns-1345.awsdns-01.net (nameserver)
;    205.251.197.65                          PTR ns-1345.awsdns-40.org (confirmed)
;    2600:9000:5305:4100::1                  PTR ns-1345.awsdns-40.org (confirmed)
;  g-ns-1921.awsdns-01.net (nameserver)
;    205.251.199.129                         PTR ns-1921.awsdns-48.co.uk (confirmed)
;    2600:9000:5307:8100::1                  PTR ns-1921.awsdns-48.co.uk (confirmed)
;  g-ns-450.awsdns-01.net (nameserver)
;    205.251.193.194                         PTR ns-450.awsdns-56.com (confirmed)
;    2600:9000:5301:c200::1                  PTR ns-450.awsdns-56.com (confirmed)
;  g-ns-771.awsdns-01.net (nameserver)
;    205.251.195.3                           PTR ns-771.awsdns-32.net (confirmed)
;    2600:9000:5303:300::1                   PTR ns-771.awsdns-32.net (confirmed)

;; PUBLIC RESOLVERS
;  Cloudflare A     205.251.194.8  ttl 162776
;  Cloudflare AAAA  2600:9000:5302:800::1  ttl 172800
;  Cloudflare MX    -
;  Google     A     205.251.194.8  ttl 19786
;  Google     AAAA  2600:9000:5302:800::1  ttl 21456
;  Google     MX    -
;  Quad9      A     205.251.194.8  ttl 22420
;  Quad9      AAAA  2600:9000:5302:800::1  ttl 35534
;  Quad9      MX    -
;  OpenDNS    A     205.251.194.8  ttl 119461
;  OpenDNS    AAAA  2600:9000:5302:800::1  ttl 136667
;  OpenDNS    MX    -