Authoritative DNS Record Lookup
Query global root and authoritative name servers for A, AAAA, MX, TXT (SPF/DKIM/DMARC), NS, CNAME, and SOA zone entries in real time. Inspect TTL caching timers and authoritative delegation with zero third-party latency.
github.com
RESOLVED OK Query Filter: ALLResolved via native socket resolver in 0.4ms • Total authoritative zone entries: 35
| Type | Host / Subdomain | TTL | Resolved Target / Value | Actions |
|---|---|---|---|---|
| A | github.com | 16s | 172.182.252.133 | |
| MX | github.com | 47s | github-com.mail.protection.outlook.com (Priority: 0) | |
| TXT | github.com | 300s | 00Dd0000000hHE0=1TBKg000000TN2r | |
| TXT | github.com | 300s | MS=6BF03E6AF5CB689E315FB6199603BABF2C88D805 | |
| TXT | github.com | 300s | MS=ms44452932 | |
| TXT | github.com | 300s | MS=ms58704441 | |
| TXT | github.com | 300s | TAILSCALE-xOzoDvFUzZr5YYVCQFuD | |
| TXT | github.com | 300s | adobe-idp-site-verification=b92c9e999aef825edc36e0a3d847d2dbad5b2fc0e05c79ddd7a16139b48ecf4b | |
| TXT | github.com | 300s | anthropic-domain-verification-4az7qn=if8YWuRRqwLycGJDooumzHtxm | |
| TXT | github.com | 300s | apple-domain-verification=RyQhdzTl6Z6x8ZP4 | |
| TXT | github.com | 300s | atlassian-domain-verification=jjgw98AKv2aeoYFxiL/VFaoyPkn3undEssTRuMg6C/3Fp/iqhkV4HVV7WjYlVeF8 | |
| TXT | github.com | 300s | calendly-site-verification=at0DQARi7IZvJtXQAWhMqpmIzpvoBNF7aam5VKKxP | |
| TXT | github.com | 300s | cursor-domain-verification-gtfwmt=1rfLOtiTngX5QSxD5HvNKTvm3 | |
| TXT | github.com | 300s | docusign=087098e3-3d46-47b7-9b4e-8a23028154cd | |
| TXT | github.com | 300s | facebook-domain-verification=39xu4jzl7roi7x0n93ldkxjiaarx50 | |
| TXT | github.com | 300s | google-site-verification=82Le34Flgtd15ojYhHlGF_6g72muSjamlMVThBOJpks | |
| TXT | github.com | 300s | google-site-verification=UTM-3akMgubp6tQtgEuAkYNYLyYAvpTnnSrDMWoDR3o | |
| TXT | github.com | 300s | jamf-site-verification=XtaPNIYghF_e_xRDI8CjgQ | |
| TXT | github.com | 300s | krisp-domain-verification=ZlyiK7XLhnaoUQb2hpak1PLY7dFkl1WE | |
| TXT | github.com | 300s | loom-site-verification=f3787154f1154b7880e720a511ea664d | |
| TXT | github.com | 300s | miro-verification=d2e174fdb00c71e0bcf58f8e58c3da2dd80dcfa9 | |
| TXT | github.com | 300s | openai-domain-verification=dv-3nh33eQwdkotMIAzLrIDVZo1 | |
| TXT | github.com | 300s | serval-domain-verification-ydryhj=qbkiEakpwEpTvHh5fIiCqtaue | |
| TXT | github.com | 300s | shopify-verification-code=t1YPwcmvnxZyBycaCpk1MPyWoFs72o | |
| TXT | github.com | 300s | stripe-verification=f88ef17321660a01bab1660454192e014defa29ba7b8de9633c69d6b4912217f | |
| TXT | github.com | 300s | v=spf1 ip4:192.30.252.0/22 include:spf.protection.outlook.com include:_netblocks.google.com include:_netblocks2.google.com include:mail.zendesk.com include:_spf.salesforce.com include:servers.mcsv.net include:mktomail.com include:sendgrid.net ip4:62.253.227.114 ip4:166.78.69.169 ip4:166.78.69.170 ip4:166.78.71.131 ~all SPF Policy | |
| NS | github.com | 622s | ns-421.awsdns-52.com | |
| NS | github.com | 622s | dns4.p08.nsone.net | |
| NS | github.com | 622s | ns-1707.awsdns-21.co.uk | |
| NS | github.com | 622s | dns1.p08.nsone.net | |
| NS | github.com | 622s | dns2.p08.nsone.net | |
| NS | github.com | 622s | ns-1283.awsdns-32.org | |
| NS | github.com | 622s | ns-520.awsdns-01.net | |
| NS | github.com | 622s | dns3.p08.nsone.net | |
| SOA | github.com | 900s | MNAME: ns-1707.awsdns-21.co.uk | RNAME: awsdns-hostmaster.amazon.com | Serial: 1 |
RFC 1035 Standard BIND Zone File Format
Exportable zone file format ready for BIND, Named, Unbound, PowerDNS or Cloudflare import
; Authoritative BIND Zone Export for github.com ; Generated on 2026-11-03 06:57:29 UTC by Tech100 DNS Suite $ORIGIN github.com. $TTL 3600 github.com. 16 IN A 172.182.252.133 github.com. 47 IN MX github-com.mail.protection.outlook.com (Priority: 0) github.com. 300 IN TXT 00Dd0000000hHE0=1TBKg000000TN2r github.com. 300 IN TXT MS=6BF03E6AF5CB689E315FB6199603BABF2C88D805 github.com. 300 IN TXT MS=ms44452932 github.com. 300 IN TXT MS=ms58704441 github.com. 300 IN TXT TAILSCALE-xOzoDvFUzZr5YYVCQFuD github.com. 300 IN TXT adobe-idp-site-verification=b92c9e999aef825edc36e0a3d847d2dbad5b2fc0e05c79ddd7a16139b48ecf4b github.com. 300 IN TXT anthropic-domain-verification-4az7qn=if8YWuRRqwLycGJDooumzHtxm github.com. 300 IN TXT apple-domain-verification=RyQhdzTl6Z6x8ZP4 github.com. 300 IN TXT atlassian-domain-verification=jjgw98AKv2aeoYFxiL/VFaoyPkn3undEssTRuMg6C/3Fp/iqhkV4HVV7WjYlVeF8 github.com. 300 IN TXT calendly-site-verification=at0DQARi7IZvJtXQAWhMqpmIzpvoBNF7aam5VKKxP github.com. 300 IN TXT cursor-domain-verification-gtfwmt=1rfLOtiTngX5QSxD5HvNKTvm3 github.com. 300 IN TXT docusign=087098e3-3d46-47b7-9b4e-8a23028154cd github.com. 300 IN TXT facebook-domain-verification=39xu4jzl7roi7x0n93ldkxjiaarx50 github.com. 300 IN TXT google-site-verification=82Le34Flgtd15ojYhHlGF_6g72muSjamlMVThBOJpks github.com. 300 IN TXT google-site-verification=UTM-3akMgubp6tQtgEuAkYNYLyYAvpTnnSrDMWoDR3o github.com. 300 IN TXT jamf-site-verification=XtaPNIYghF_e_xRDI8CjgQ github.com. 300 IN TXT krisp-domain-verification=ZlyiK7XLhnaoUQb2hpak1PLY7dFkl1WE github.com. 300 IN TXT loom-site-verification=f3787154f1154b7880e720a511ea664d github.com. 300 IN TXT miro-verification=d2e174fdb00c71e0bcf58f8e58c3da2dd80dcfa9 github.com. 300 IN TXT openai-domain-verification=dv-3nh33eQwdkotMIAzLrIDVZo1 github.com. 300 IN TXT serval-domain-verification-ydryhj=qbkiEakpwEpTvHh5fIiCqtaue github.com. 300 IN TXT shopify-verification-code=t1YPwcmvnxZyBycaCpk1MPyWoFs72o github.com. 300 IN TXT stripe-verification=f88ef17321660a01bab1660454192e014defa29ba7b8de9633c69d6b4912217f github.com. 300 IN TXT v=spf1 ip4:192.30.252.0/22 include:spf.protection.outlook.com include:_netblocks.google.com include:_netblocks2.google.com include:mail.zendesk.com include:_spf.salesforce.com include:servers.mcsv.net include:mktomail.com include:sendgrid.net ip4:62.253.227.114 ip4:166.78.69.169 ip4:166.78.69.170 ip4:166.78.71.131 ~all github.com. 622 IN NS ns-421.awsdns-52.com github.com. 622 IN NS dns4.p08.nsone.net github.com. 622 IN NS ns-1707.awsdns-21.co.uk github.com. 622 IN NS dns1.p08.nsone.net github.com. 622 IN NS dns2.p08.nsone.net github.com. 622 IN NS ns-1283.awsdns-32.org github.com. 622 IN NS ns-520.awsdns-01.net github.com. 622 IN NS dns3.p08.nsone.net github.com. 900 IN SOA MNAME: ns-1707.awsdns-21.co.uk | RNAME: awsdns-hostmaster.amazon.com | Serial: 1
How Global DNS Resolution, Root Servers & Record Types Work
The Domain Name System (DNS) is the distributed, hierarchical database translating human-readable hostnames into binary IP addresses. Learn how recursive resolvers, authoritative nameservers, Anycast routing, and anti-spoofing security policies function.
Comprehensive DNS Resource Record (RR) Types Reference
Every internet protocol relies on specific DNS resource record types defined by the Internet Engineering Task Force (IETF).
Maps a fully qualified domain name to a 32-bit IPv4 address (e.g., 104.21.48.21). The foundational record of web browsing.
Maps a domain name to a 128-bit IPv6 address (e.g., 2606:4700:3036::6815:3015), enabling next-generation internet routing.
Canonical Name alias pointing one subdomain to another hostname. Cannot coexist with other records at zone apex.
Mail Exchange record routing incoming SMTP email to receiving mail servers, ranked by numerical priority (lower priority = primary).
Holds arbitrary text strings for SPF email security policies, DKIM cryptographic signatures, DMARC compliance, and domain ownership tokens.
Authoritative Name Server delegation indicating which nameservers hold the zone file and handle queries for the domain.
Start of Authority specifying primary master nameserver, admin email, zone serial number, refresh/retry timers, and negative caching TTL.
Certification Authority Authorization specifying which CAs (Let's Encrypt, DigiCert) are legally permitted to issue SSL certificates.
Pointer record for Reverse DNS lookups (in-addr.arpa or ip6.arpa), mapping an IP address back to a hostname. Essential for SMTP deliverability.
The 4 Stages of Iterative DNS Resolution
When a client browser queries a domain name, the request navigates 4 distinct server tiers before retrieving the authoritative IP address:
Recursive Resolver
Operated by your ISP, Cloudflare (1.1.1.1), or Google (8.8.8.8). Checks local cache before initiating iterative queries.
Root Nameservers (.)
13 global root server IP addresses (A through M root) operated by ICANN, NASA, VeriSign, and RIPE NCC directing to TLD servers.
TLD Nameservers
Top-Level Domain servers (.com, .net, .top, .org) that maintain the authoritative nameserver delegations for all registered domains.
Authoritative Server
The final nameserver hosting the actual zone file. Returns the A/AAAA record with its Time-to-Live (TTL) value.
Sender Policy Framework
Published in a TXT record (e.g. v=spf1 include:_spf.google.com ~all), SPF tells receiving mail servers which IP addresses are authorized to send email on behalf of your domain.
DomainKeys Identified Mail
Uses asymmetric public key cryptography published in a subdomain TXT record (selector._domainkey.domain) to cryptographically sign outbound emails and verify they were not tampered in transit.
DMARC Alignment
Published at _dmarc.domain, DMARC specifies how receiving mail systems should treat unaligned emails (p=none, p=quarantine, or p=reject).