Sensors on participating networks note the DNS answers that resolvers receive: the name, the answer, and when it was first and last seen. Nothing is asked of the domain itself, so the history shows what people were actually sent. It only covers names those networks' users looked up.
Reading the timeline.
Each step is a network (the company announcing the addresses) and the span its addresses were seen; a gap of over a year starts a new step.
The network is the one that announces the address today. For cloud and hosting ranges that rarely changes, but an address can move to a new owner over the years.
A very short period on an unexpected network is often a wrong answer from a filtering or hijacked resolver, not a real move.
"Seen" counts how many times the sensors recorded the answer; busy sites reach millions.
Questions people ask.
What is DNS history?
A record of the answers a domain's DNS gave in the past: the IP addresses it pointed to, its aliases, and when. It comes from passive DNS, where sensors on networks note the answers resolvers receive and when each was first and last seen.
Where does the data come from?
From mnemonic's public passive DNS: records marked TLP:WHITE, which mnemonic offers to the public and which may be shared freely. Today's records come from live DNS, and the network behind each address from Team Cymru's IP to ASN mapping.
Why is my domain missing?
Passive DNS only sees names that the users of its sensors' networks look up. Small, new or rarely visited sites are often not in it, and that says nothing about the domain.
Does it show old name servers and mail servers?
Only what passive DNS saw, which is mostly addresses and aliases. For the registration record use WHOIS, and for old versions of the website the domain history tool.
Why does the history list a network the site never used?
Passive DNS records what resolvers were told, and filtering or hijacked resolvers sometimes answer with their own address. A short, isolated period on an unexpected network is usually one of those.
Hivex index
Short names, still free to register.
Starting something new? Hivex keeps a live index of short, brandable .si names nobody has claimed yet, each checked with the registry.
Hivex's free JSON API and MCP server check domains, DNS and registration records from your own code or from AI assistants that speak MCP. No key needed.
By Hivex. Updated 11 October 2026. Past records come from mnemonic's public passive DNS and are kept up to a day; today's records are read live. The names you search are not stored.
gmail.com · DNS history
Checked 22:43:47 UTC · mnemonic passive DNS · live DNS
First seen
21 May 2012
Addresses seen
695
Networks
2
Now on
Google LLC
Good: Since 21 May 2012, gmail.com has pointed to 695 addresses on 2 networks; today it is on Google LLC.
Hosting over time
Network of each address
Note: Unknown network21 May 2012 to 11 October 2026 · 173.194.71.17, 173.194.71.18, 173.194.71.19 and 346 more
Note: Google LLC22 January 2015 to 11 October 2026 · 216.58.209.101, 172.217.22.5, 172.217.22.165 and 37 more
Good: Now: Google LLC142.250.137.19, 142.250.137.83, 142.250.137.17
Each network is the one that announces the address today; cloud and hosting ranges rarely change hands.