DNSSEC Analyzer - api.pictalk.xyz

Domain Name:

Time: 2022-09-27 01:56:41 UTC, NTP stratum 16

Analyzing DNSSEC problems for api.pictalk.xyz

DS=20326/SHA-256 is now in the chain-of-trust

	Checking DS between Trust Anchor and .
	`. IN DS ( 20326 8 2 e06d44b80b8f1d39a95c0b0d7c65d08458e880409bbc683457104237c7f8ec8d )`
	Query to e.root-servers.net for ./DNSKEY
	Received 1139 bytes from 192.203.230.10
	;; Response received from 192.203.230.10 (1139 octets) ;; HEADER SECTION ;; id = 60608 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 4 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1472 ;; option: ;; QUESTION SECTION (1 record) ;; . IN DNSKEY ;; ANSWER SECTION (4 records) . 172800 IN DNSKEY ( 256 3 8 AwEAAaQVKIqdmeLCaF4lq+IoKpejId9qqoIbZJ6cjB5MfyJYX3KVFXYyJ9rt4jKOwf4m2BoDOY66 V1upRumF+eu502HXzdOdJlioRLA9YiRyLgvfjzyfUYrExYT4/TDTS4XfQX2UcJDN5C7SQ9UxebZk /VjQfPAUU+hZKOcjOVRFbAHom4tIi+Rin0laGlAi8ZY5WUZypYKR0xvprtG0eXeOBMjbUt1EnhmO 2Bs52zC8B0cMjq6fMiYFUqtziALccsQczGngIDR0dIvvL54ky1JNNp19Ldy9ir27s7eRCYGbYI1W zR05/d4/nCmDSHkQS2BiesYufuWZZwm+FsitupCciwE= ) ; Key ID = 20826 . 172800 IN DNSKEY ( 256 3 8 AwEAAeB54o2xvW6vY4qQZ0krDsEZCe6MsRWCqsXd4+cNJZMePnlV/xwDrIbbeH1SJzv742rOHzgA KM1/3SQHHSkoEIPx8XQdHAZBxfhaXl3e8c5WrE3aGXS5AeTWAkt85ccqWgKyitxjFmJEOol0BqS2 xueltaDwgWcC10nPUY+y5l/kTOYyptYQS4gg1uJNXIob/R1XIEJ10ZCurkYqZxgqyHc7tZv09N23 o9rnGdjnYiArH7FjlXD8Rvjde8YWkmfdbCEWnchrnxDK8KV2/ZvBpG/WYnRKXYPUceGCw59OJdJ5 M7utkm547RB3eEd8CVVhbXopZlsKq3GCrBwaIVe9ci0= ) ; Key ID = 18733 . 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; Key ID = 20326 . 172800 IN RRSIG ( DNSKEY 8 0 172800 20221010000000 20220919000000 20326 . VnZZAvbJE/EHjG1t5yiq1Ups3AUraCCE1d+f6aE/YxZdnnMnTIboegeJNT1k1A081WJPbF526O+R SIRxiWXc1t0vwUa9M/gAUYx6D1eF5htBIX4fuxLc/J0YvizQcRBx2q4xzHoEohF+RDmhX7nNHtT4 kt0PcuIt4O4rVp6cF/k2heHF/AY9rMd9jz+MIiPpPkEoaPOZESZnpaQU92pFnN4tp/d2xCCay7ye /q3oq5CGa8PgpLpTVJWOAvFyC1vCUoir0v3tgDv4U2OalU9C5jOEFGOp4mx3thQQ/ya9Yxffdvd7 +yd2MNh+O4Ov/rmpGuA84fWau3oOveHuFE9RMw== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1472 ;; option:
	Found 3 DNSKEY records for .
	`. 172800 IN DNSKEY ( 256 3 8 AwEAAaQVKIqdmeLCaF4lq+IoKpejId9qqoIbZJ6cjB5MfyJYX3KVFXYyJ9rt4jKOwf4m2BoDOY66 V1upRumF+eu502HXzdOdJlioRLA9YiRyLgvfjzyfUYrExYT4/TDTS4XfQX2UcJDN5C7SQ9UxebZk /VjQfPAUU+hZKOcjOVRFbAHom4tIi+Rin0laGlAi8ZY5WUZypYKR0xvprtG0eXeOBMjbUt1EnhmO 2Bs52zC8B0cMjq6fMiYFUqtziALccsQczGngIDR0dIvvL54ky1JNNp19Ldy9ir27s7eRCYGbYI1W zR05/d4/nCmDSHkQS2BiesYufuWZZwm+FsitupCciwE= ) ; Key ID = 20826`
	`. 172800 IN DNSKEY ( 256 3 8 AwEAAeB54o2xvW6vY4qQZ0krDsEZCe6MsRWCqsXd4+cNJZMePnlV/xwDrIbbeH1SJzv742rOHzgA KM1/3SQHHSkoEIPx8XQdHAZBxfhaXl3e8c5WrE3aGXS5AeTWAkt85ccqWgKyitxjFmJEOol0BqS2 xueltaDwgWcC10nPUY+y5l/kTOYyptYQS4gg1uJNXIob/R1XIEJ10ZCurkYqZxgqyHc7tZv09N23 o9rnGdjnYiArH7FjlXD8Rvjde8YWkmfdbCEWnchrnxDK8KV2/ZvBpG/WYnRKXYPUceGCw59OJdJ5 M7utkm547RB3eEd8CVVhbXopZlsKq3GCrBwaIVe9ci0= ) ; Key ID = 18733`
	`. 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; Key ID = 20326`
	DNSKEY=20326/SEP is now in the chain-of-trust
	DS=20326/SHA-256 verifies DNSKEY=20326/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`. 172800 IN RRSIG ( DNSKEY 8 0 172800 20221010000000 20220919000000 20326 . VnZZAvbJE/EHjG1t5yiq1Ups3AUraCCE1d+f6aE/YxZdnnMnTIboegeJNT1k1A081WJPbF526O+R SIRxiWXc1t0vwUa9M/gAUYx6D1eF5htBIX4fuxLc/J0YvizQcRBx2q4xzHoEohF+RDmhX7nNHtT4 kt0PcuIt4O4rVp6cF/k2heHF/AY9rMd9jz+MIiPpPkEoaPOZESZnpaQU92pFnN4tp/d2xCCay7ye /q3oq5CGa8PgpLpTVJWOAvFyC1vCUoir0v3tgDv4U2OalU9C5jOEFGOp4mx3thQQ/ya9Yxffdvd7 +yd2MNh+O4Ov/rmpGuA84fWau3oOveHuFE9RMw== )`
	RRSIG=20326 and DNSKEY=20326/SEP verifies the DNSKEY RRset
	DNSKEY=20826 is now in the chain-of-trust
	DNSKEY=18733 is now in the chain-of-trust
	Query to m.root-servers.net for api.pictalk.xyz/A
	Received 677 bytes from 202.12.27.33
	;; Response received from 202.12.27.33 (677 octets) ;; HEADER SECTION ;; id = 57993 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 7 arcount = 9 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option: ;; QUESTION SECTION (1 record) ;; api.pictalk.xyz. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (7 records) xyz. 172800 IN NS x.nic.xyz. xyz. 172800 IN NS generationxyz.nic.xyz. xyz. 172800 IN NS z.nic.xyz. xyz. 172800 IN NS y.nic.xyz. xyz. 86400 IN DS ( 3599 8 2 b9733869bc84c86bb59d102ba5da6b27b2088552332a39dcd54bc4e8d66b0499 ) xyz. 86400 IN DS 3599 8 1 3fa3b264f45db5f38bedeaf1a88b76aa318c2c7f xyz. 86400 IN RRSIG ( DS 8 1 86400 20221009180000 20220926170000 20826 . GV0+FiIeAMFbaIgtnJBO9i7c0Ypy97KgNmzdAqpkGO8qNycP8RHNqngGkonBIRtDcla/Spg5/yPM CdfErgCVmb3uXXUsXCd7QJFJjyG7MJTVWIossJ8KuD5rP4qcZNvAN5c9Kp/dAx1fwLpPKuqZBtAd d8c5m1A4P84/N/OJ3UQk/60S8UCC2sHb0Sql9Z5NRVbsvxHarMQjxgztwzYe7xETrp6tOMY4XHRy 4wJmd8rqtFrTYxTl/F6FlF1bfpU5E39tvLvjBSXSHd77VhkwyYnyRDG4TzvfKvjX4hMWfypLqpyh DfJ/OoUJE6TkWcPnCzfqFXQXninut7S1LsJMAw== ) ;; ADDITIONAL SECTION (9 records) generationxyz.nic.xyz. 172800 IN A 212.18.249.42 z.nic.xyz. 172800 IN A 212.18.248.42 y.nic.xyz. 172800 IN A 185.24.64.42 x.nic.xyz. 172800 IN A 194.169.218.42 generationxyz.nic.xyz. 172800 IN AAAA 2a04:2b00:13ff::42 z.nic.xyz. 172800 IN AAAA 2a04:2b00:13ee::42 y.nic.xyz. 172800 IN AAAA 2a04:2b00:13cc::1:42 x.nic.xyz. 172800 IN AAAA 2001:67c:13cc::1:42 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option:
	Query to l.root-servers.net for xyz/DNSKEY
	Received 659 bytes from 199.7.83.42
	;; Response received from 199.7.83.42 (659 octets) ;; HEADER SECTION ;; id = 54113 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 7 arcount = 9 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; xyz. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (7 records) xyz. 172800 IN NS x.nic.xyz. xyz. 172800 IN NS y.nic.xyz. xyz. 172800 IN NS z.nic.xyz. xyz. 172800 IN NS generationxyz.nic.xyz. xyz. 86400 IN DS 3599 8 1 3fa3b264f45db5f38bedeaf1a88b76aa318c2c7f xyz. 86400 IN DS ( 3599 8 2 b9733869bc84c86bb59d102ba5da6b27b2088552332a39dcd54bc4e8d66b0499 ) xyz. 86400 IN RRSIG ( DS 8 1 86400 20221009180000 20220926170000 20826 . GV0+FiIeAMFbaIgtnJBO9i7c0Ypy97KgNmzdAqpkGO8qNycP8RHNqngGkonBIRtDcla/Spg5/yPM CdfErgCVmb3uXXUsXCd7QJFJjyG7MJTVWIossJ8KuD5rP4qcZNvAN5c9Kp/dAx1fwLpPKuqZBtAd d8c5m1A4P84/N/OJ3UQk/60S8UCC2sHb0Sql9Z5NRVbsvxHarMQjxgztwzYe7xETrp6tOMY4XHRy 4wJmd8rqtFrTYxTl/F6FlF1bfpU5E39tvLvjBSXSHd77VhkwyYnyRDG4TzvfKvjX4hMWfypLqpyh DfJ/OoUJE6TkWcPnCzfqFXQXninut7S1LsJMAw== ) ;; ADDITIONAL SECTION (9 records) x.nic.xyz. 172800 IN A 194.169.218.42 y.nic.xyz. 172800 IN A 185.24.64.42 z.nic.xyz. 172800 IN A 212.18.248.42 generationxyz.nic.xyz. 172800 IN A 212.18.249.42 x.nic.xyz. 172800 IN AAAA 2001:67c:13cc::1:42 y.nic.xyz. 172800 IN AAAA 2a04:2b00:13cc::1:42 z.nic.xyz. 172800 IN AAAA 2a04:2b00:13ee::42 generationxyz.nic.xyz. 172800 IN AAAA 2a04:2b00:13ff::42 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found child zone xyz

xyz

	Checking DS between . and xyz
	Query to f.root-servers.net for xyz/DS
	Received 403 bytes from 192.5.5.241
	;; Response received from 192.5.5.241 (403 octets) ;; HEADER SECTION ;; id = 27250 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1472 ;; option: ;; QUESTION SECTION (1 record) ;; xyz. IN DS ;; ANSWER SECTION (3 records) xyz. 86400 IN DS 3599 8 1 3fa3b264f45db5f38bedeaf1a88b76aa318c2c7f xyz. 86400 IN DS ( 3599 8 2 b9733869bc84c86bb59d102ba5da6b27b2088552332a39dcd54bc4e8d66b0499 ) xyz. 86400 IN RRSIG ( DS 8 1 86400 20221009180000 20220926170000 20826 . GV0+FiIeAMFbaIgtnJBO9i7c0Ypy97KgNmzdAqpkGO8qNycP8RHNqngGkonBIRtDcla/Spg5/yPM CdfErgCVmb3uXXUsXCd7QJFJjyG7MJTVWIossJ8KuD5rP4qcZNvAN5c9Kp/dAx1fwLpPKuqZBtAd d8c5m1A4P84/N/OJ3UQk/60S8UCC2sHb0Sql9Z5NRVbsvxHarMQjxgztwzYe7xETrp6tOMY4XHRy 4wJmd8rqtFrTYxTl/F6FlF1bfpU5E39tvLvjBSXSHd77VhkwyYnyRDG4TzvfKvjX4hMWfypLqpyh DfJ/OoUJE6TkWcPnCzfqFXQXninut7S1LsJMAw== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1472 ;; option:
	Found 2 DS records for xyz in the . zone
	DS=3599/SHA-1 has algorithm RSASHA256
	DS=3599/SHA-256 has algorithm RSASHA256
	Found 1 RRSIGs over DS RRset
	`xyz. 86400 IN RRSIG ( DS 8 1 86400 20221009180000 20220926170000 20826 . GV0+FiIeAMFbaIgtnJBO9i7c0Ypy97KgNmzdAqpkGO8qNycP8RHNqngGkonBIRtDcla/Spg5/yPM CdfErgCVmb3uXXUsXCd7QJFJjyG7MJTVWIossJ8KuD5rP4qcZNvAN5c9Kp/dAx1fwLpPKuqZBtAd d8c5m1A4P84/N/OJ3UQk/60S8UCC2sHb0Sql9Z5NRVbsvxHarMQjxgztwzYe7xETrp6tOMY4XHRy 4wJmd8rqtFrTYxTl/F6FlF1bfpU5E39tvLvjBSXSHd77VhkwyYnyRDG4TzvfKvjX4hMWfypLqpyh DfJ/OoUJE6TkWcPnCzfqFXQXninut7S1LsJMAw== )`
	RRSIG=20826 and DNSKEY=20826 verifies the DS RRset
	DS=3599/SHA-1 is now in the chain-of-trust
	`xyz. 86400 IN DS 3599 8 1 3fa3b264f45db5f38bedeaf1a88b76aa318c2c7f`
	`xyz. 86400 IN DS ( 3599 8 2 b9733869bc84c86bb59d102ba5da6b27b2088552332a39dcd54bc4e8d66b0499 )`
	Query to y.nic.xyz for xyz/DNSKEY
	Received 747 bytes from 185.24.64.42
	;; Response received from 185.24.64.42 (747 octets) ;; HEADER SECTION ;; id = 46733 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; xyz. IN DNSKEY ;; ANSWER SECTION (3 records) xyz. 3600 IN DNSKEY ( 257 3 8 AwEAAbYRTzkgLg4oxcFb/+oFQMvluEut45siTtLiNL7t5Fim/ZnYhkxal6TiCUywnfgiycJyneNm tC/3eoTcz5dlrlRB5dwDehcqiZoFiqjaXGHcykHGFBDynD0/sRcEAQL+bLMv2qA+o2L7pDPHbCGJ VXlUq57oTWfS4esbGDIa+1Bs8gDVMGUZcbRmeeKkc/MH2Oq1ApE5EKjH0ZRvYWS6afsWyvlXD2NX DthS5LltVKqqjhi6dy2O02stOt41z1qwfRlU89b3HXfDghlJ/L33DE+OcTyK0yRJ+ay4WpBgQJL8 GDFKz1hnR2lOjYXLttJD7aHfcYyVO6zYsx2aeHI0OYM= ) ; Key ID = 3599 xyz. 3600 IN DNSKEY ( 256 3 8 AwEAAZ9ZPMWntnQKi0KDnr8K92xRnMErDckHx4FxA8zohpPGQKfom3WoENO5pZc5ip/Un+X895dc 66vDCxg3mWTl+h+qkfipU3saYIG1v8j9l5v6DucUktL2I8eEisEGSnwatIfc+jMnKeviSuf0gd49 GrAvCQ9zcSbAZf5PSCXbiOnV ) ; Key ID = 53358 xyz. 3600 IN RRSIG ( DNSKEY 8 1 3600 20221008204520 20220908090353 3599 xyz. gmevfvSm8Znz84bK7p402T68Gtb2sZPlbO5qMKk7mAYR6z1CHY5rQsg8ABEKii9ZUsilKi2M4lnI /MJV/t0Jux4SmQXb6NTwwxJA5KABjozFaotJnQZiqOOeqx0zeaXewfLLPfMQGvENz9i/WVntOqpj uZHZJFgWAdBi04H9QhXHyT+3CwRqT+p6xFGTpis/qBDs7ob9ELyAWv1aTLRhGzb5GbzlVp0ljM7K QjkJzemg270m+tVAig0FPy8+kL7LBLhqKjxPXZyWExS+A337R1UF4htaUmiQ8w7ER7u3wxjeawt5 s+FQePl7wajiFEM1MvF1ojBWk48GmIc7NfgriQ== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found 2 DNSKEY records for xyz
	`xyz. 3600 IN DNSKEY ( 257 3 8 AwEAAbYRTzkgLg4oxcFb/+oFQMvluEut45siTtLiNL7t5Fim/ZnYhkxal6TiCUywnfgiycJyneNm tC/3eoTcz5dlrlRB5dwDehcqiZoFiqjaXGHcykHGFBDynD0/sRcEAQL+bLMv2qA+o2L7pDPHbCGJ VXlUq57oTWfS4esbGDIa+1Bs8gDVMGUZcbRmeeKkc/MH2Oq1ApE5EKjH0ZRvYWS6afsWyvlXD2NX DthS5LltVKqqjhi6dy2O02stOt41z1qwfRlU89b3HXfDghlJ/L33DE+OcTyK0yRJ+ay4WpBgQJL8 GDFKz1hnR2lOjYXLttJD7aHfcYyVO6zYsx2aeHI0OYM= ) ; Key ID = 3599`
	`xyz. 3600 IN DNSKEY ( 256 3 8 AwEAAZ9ZPMWntnQKi0KDnr8K92xRnMErDckHx4FxA8zohpPGQKfom3WoENO5pZc5ip/Un+X895dc 66vDCxg3mWTl+h+qkfipU3saYIG1v8j9l5v6DucUktL2I8eEisEGSnwatIfc+jMnKeviSuf0gd49 GrAvCQ9zcSbAZf5PSCXbiOnV ) ; Key ID = 53358`
	DNSKEY=3599/SEP is now in the chain-of-trust
	DS=3599/SHA-1 verifies DNSKEY=3599/SEP
	DS=3599/SHA-256 verifies DNSKEY=3599/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`xyz. 3600 IN RRSIG ( DNSKEY 8 1 3600 20221008204520 20220908090353 3599 xyz. gmevfvSm8Znz84bK7p402T68Gtb2sZPlbO5qMKk7mAYR6z1CHY5rQsg8ABEKii9ZUsilKi2M4lnI /MJV/t0Jux4SmQXb6NTwwxJA5KABjozFaotJnQZiqOOeqx0zeaXewfLLPfMQGvENz9i/WVntOqpj uZHZJFgWAdBi04H9QhXHyT+3CwRqT+p6xFGTpis/qBDs7ob9ELyAWv1aTLRhGzb5GbzlVp0ljM7K QjkJzemg270m+tVAig0FPy8+kL7LBLhqKjxPXZyWExS+A337R1UF4htaUmiQ8w7ER7u3wxjeawt5 s+FQePl7wajiFEM1MvF1ojBWk48GmIc7NfgriQ== )`
	RRSIG=3599 and DNSKEY=3599/SEP verifies the DNSKEY RRset
	DNSKEY=53358 is now in the chain-of-trust
	Query to y.nic.xyz for api.pictalk.xyz/A
	Received 302 bytes from 185.24.64.42
	;; Response received from 185.24.64.42 (302 octets) ;; HEADER SECTION ;; id = 45048 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 4 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; api.pictalk.xyz. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (4 records) pictalk.xyz. 3600 IN NS dns1.registrar-servers.com. pictalk.xyz. 3600 IN NS dns2.registrar-servers.com. pictalk.xyz. 3600 IN DS 56064 13 1 93551ff1b19e3282ed7c8412c326962c82b022c1 pictalk.xyz. 3600 IN RRSIG ( DS 8 2 3600 20221016032750 20220915195013 53358 xyz. NsuSh+DABa0I+aHqVELWiHFq+2Y3muk7MG9r0Bwvn2FHJWt8nqRfXwEcGfaBgMPEufIA0aww7WaE JHDDXvDhAxWTHrYKhWtoacGcJIW5AWxE6X+jsMIiMd3pi4zj7SgAaOK4u3pp/HovtDjvuXMXXenK 6GVFxav3K0Khx1MKT84= ) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Query to generationxyz.nic.xyz for pictalk.xyz/DNSKEY
	Received 298 bytes from 212.18.249.42
	;; Response received from 212.18.249.42 (298 octets) ;; HEADER SECTION ;; id = 14020 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 4 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; pictalk.xyz. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (4 records) pictalk.xyz. 3600 IN NS dns2.registrar-servers.com. pictalk.xyz. 3600 IN NS dns1.registrar-servers.com. pictalk.xyz. 3600 IN DS 56064 13 1 93551ff1b19e3282ed7c8412c326962c82b022c1 pictalk.xyz. 3600 IN RRSIG ( DS 8 2 3600 20221016032750 20220915195013 53358 xyz. NsuSh+DABa0I+aHqVELWiHFq+2Y3muk7MG9r0Bwvn2FHJWt8nqRfXwEcGfaBgMPEufIA0aww7WaE JHDDXvDhAxWTHrYKhWtoacGcJIW5AWxE6X+jsMIiMd3pi4zj7SgAaOK4u3pp/HovtDjvuXMXXenK 6GVFxav3K0Khx1MKT84= ) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found child zone pictalk.xyz

pictalk.xyz

	Checking DS between xyz and pictalk.xyz
	Query to y.nic.xyz for pictalk.xyz/DS
	Received 239 bytes from 185.24.64.42
	;; Response received from 185.24.64.42 (239 octets) ;; HEADER SECTION ;; id = 50919 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; pictalk.xyz. IN DS ;; ANSWER SECTION (2 records) pictalk.xyz. 3600 IN DS 56064 13 1 93551ff1b19e3282ed7c8412c326962c82b022c1 pictalk.xyz. 3600 IN RRSIG ( DS 8 2 3600 20221016032750 20220915195013 53358 xyz. NsuSh+DABa0I+aHqVELWiHFq+2Y3muk7MG9r0Bwvn2FHJWt8nqRfXwEcGfaBgMPEufIA0aww7WaE JHDDXvDhAxWTHrYKhWtoacGcJIW5AWxE6X+jsMIiMd3pi4zj7SgAaOK4u3pp/HovtDjvuXMXXenK 6GVFxav3K0Khx1MKT84= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found 1 DS records for pictalk.xyz in the xyz zone
	DS=56064/SHA-1 has algorithm ECDSAP256SHA256
	Found 1 RRSIGs over DS RRset
	`pictalk.xyz. 3600 IN RRSIG ( DS 8 2 3600 20221016032750 20220915195013 53358 xyz. NsuSh+DABa0I+aHqVELWiHFq+2Y3muk7MG9r0Bwvn2FHJWt8nqRfXwEcGfaBgMPEufIA0aww7WaE JHDDXvDhAxWTHrYKhWtoacGcJIW5AWxE6X+jsMIiMd3pi4zj7SgAaOK4u3pp/HovtDjvuXMXXenK 6GVFxav3K0Khx1MKT84= )`
	RRSIG=53358 and DNSKEY=53358 verifies the DS RRset
	DS=56064/SHA-1 is now in the chain-of-trust
	`pictalk.xyz. 3600 IN DS 56064 13 1 93551ff1b19e3282ed7c8412c326962c82b022c1`
	Query to dns2.registrar-servers.com for pictalk.xyz/DNSKEY
	Received 307 bytes from 156.154.133.200
	;; Response received from 156.154.133.200 (307 octets) ;; HEADER SECTION ;; id = 11377 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; pictalk.xyz. IN DNSKEY ;; ANSWER SECTION (3 records) pictalk.xyz. 3601 IN DNSKEY ( 256 3 13 qGFarkyxlNcJftyPnVs+OyMTc66oI/sukxU+GU/sfGdsgcjaqVmighYpAlIgYEwSacQ5EtR7ax0O Om6U8uHQPw== ) ; Key ID = 43623 pictalk.xyz. 3601 IN DNSKEY ( 257 3 13 QI/P49mJWor/+EgLk2kcmFn99MzUfjmOJZh3g74zmryguTNtlfj61yaM9Dd6iZ+N9ZqhwFJBFBMa 8eqlofEIdw== ) ; Key ID = 56064 pictalk.xyz. 3601 IN RRSIG ( DNSKEY 13 2 3601 20221006000000 20220915000000 56064 pictalk.xyz. VRexTq30l9kgLHgQgoR03IBKaLBZdJrKDYL7Yrx+1Nve7EEYpQ+cur/guchD5DiSpNZ3D1wLmo+f 54H6aON4UA== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found 2 DNSKEY records for pictalk.xyz
	`pictalk.xyz. 3601 IN DNSKEY ( 256 3 13 qGFarkyxlNcJftyPnVs+OyMTc66oI/sukxU+GU/sfGdsgcjaqVmighYpAlIgYEwSacQ5EtR7ax0O Om6U8uHQPw== ) ; Key ID = 43623`
	`pictalk.xyz. 3601 IN DNSKEY ( 257 3 13 QI/P49mJWor/+EgLk2kcmFn99MzUfjmOJZh3g74zmryguTNtlfj61yaM9Dd6iZ+N9ZqhwFJBFBMa 8eqlofEIdw== ) ; Key ID = 56064`
	DNSKEY=56064/SEP is now in the chain-of-trust
	DS=56064/SHA-1 verifies DNSKEY=56064/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`pictalk.xyz. 3601 IN RRSIG ( DNSKEY 13 2 3601 20221006000000 20220915000000 56064 pictalk.xyz. VRexTq30l9kgLHgQgoR03IBKaLBZdJrKDYL7Yrx+1Nve7EEYpQ+cur/guchD5DiSpNZ3D1wLmo+f 54H6aON4UA== )`
	RRSIG=56064 and DNSKEY=56064/SEP verifies the DNSKEY RRset
	DNSKEY=43623 is now in the chain-of-trust
	Query to dns2.registrar-servers.com for api.pictalk.xyz/A
	Received 333 bytes from 156.154.133.200
	;; Response received from 156.154.133.200 (333 octets) ;; HEADER SECTION ;; id = 52638 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 3 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; api.pictalk.xyz. IN A ;; ANSWER SECTION (2 records) api.pictalk.xyz. 1799 IN A 134.209.186.18 api.pictalk.xyz. 1799 IN RRSIG ( A 13 3 1799 20221006000000 20220915000000 43623 pictalk.xyz. Bh5CThLW/i4rEXaWKUCOo9p38yUHmHrw5m4yDqe3RiB8/g6g7jNZvNHHvfFVHaKfstL+to1i46O4 BBZ8ueUC2A== ) ;; AUTHORITY SECTION (3 records) pictalk.xyz. 1800 IN NS dns1.registrar-servers.com. pictalk.xyz. 1800 IN NS dns2.registrar-servers.com. pictalk.xyz. 1800 IN RRSIG ( NS 13 2 1800 20221006000000 20220915000000 43623 pictalk.xyz. UJi7XJmRyngXCCsfOV4Y125CXcEoeSgLXRBIPSAw3+h/pKnOG1fv2qtN2327zDWzmNWUYJVDR28/ +t0+ui+tQg== ) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	dns2.registrar-servers.com is authoritative for api.pictalk.xyz
	Query to dns1.registrar-servers.com for api.pictalk.xyz/DNSKEY
	Received 371 bytes from 156.154.132.200
	;; Response received from 156.154.132.200 (371 octets) ;; HEADER SECTION ;; id = 48586 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 4 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; api.pictalk.xyz. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (4 records) pictalk.xyz. 3601 IN SOA ( dns1.registrar-servers.com. hostmaster.registrar-servers.com. 1664163258 ;serial 43200 ;refresh 3600 ;retry 604800 ;expire 3601 ;minimum ) api.pictalk.xyz. 3601 IN NSEC apidev.pictalk.xyz. A RRSIG NSEC api.pictalk.xyz. 3601 IN RRSIG ( NSEC 13 3 3601 20221006000000 20220915000000 43623 pictalk.xyz. ZEq/6b532DsNBJaVt6sRN8rWkJJiq92EgBCyqQDyP+Y3BJZXjxuwtTsMZo30ekSu2HvAtZV0TWjd IcvN7uWu8A== ) pictalk.xyz. 3601 IN RRSIG ( SOA 13 2 3601 20221006000000 20220915000000 43623 pictalk.xyz. bm1y4WNW5Bct1+3NISUj+iOuRgkexvsMnfOwLho/Z0mWPOABuWOovOJElzdC9wuoNCkPM8qcF6wj otyCYVQhtw== ) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found RRSIG signed by pictalk.xyz zone
	Query to dns1.registrar-servers.com for pictalk.xyz/SOA
	Received 360 bytes from 156.154.132.200
	;; Response received from 156.154.132.200 (360 octets) ;; HEADER SECTION ;; id = 26806 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 3 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; pictalk.xyz. IN SOA ;; ANSWER SECTION (2 records) pictalk.xyz. 3601 IN SOA ( dns1.registrar-servers.com. hostmaster.registrar-servers.com. 1664163258 ;serial 43200 ;refresh 3600 ;retry 604800 ;expire 3601 ;minimum ) pictalk.xyz. 3601 IN RRSIG ( SOA 13 2 3601 20221006000000 20220915000000 43623 pictalk.xyz. bm1y4WNW5Bct1+3NISUj+iOuRgkexvsMnfOwLho/Z0mWPOABuWOovOJElzdC9wuoNCkPM8qcF6wj otyCYVQhtw== ) ;; AUTHORITY SECTION (3 records) pictalk.xyz. 1800 IN NS dns1.registrar-servers.com. pictalk.xyz. 1800 IN NS dns2.registrar-servers.com. pictalk.xyz. 1800 IN RRSIG ( NS 13 2 1800 20221006000000 20220915000000 43623 pictalk.xyz. UJi7XJmRyngXCCsfOV4Y125CXcEoeSgLXRBIPSAw3+h/pKnOG1fv2qtN2327zDWzmNWUYJVDR28/ +t0+ui+tQg== ) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Query to dns2.registrar-servers.com for api.pictalk.xyz/A
	Received 333 bytes from 156.154.133.200
	;; Response received from 156.154.133.200 (333 octets) ;; HEADER SECTION ;; id = 25377 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 3 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; api.pictalk.xyz. IN A ;; ANSWER SECTION (2 records) api.pictalk.xyz. 1799 IN A 134.209.186.18 api.pictalk.xyz. 1799 IN RRSIG ( A 13 3 1799 20221006000000 20220915000000 43623 pictalk.xyz. Bh5CThLW/i4rEXaWKUCOo9p38yUHmHrw5m4yDqe3RiB8/g6g7jNZvNHHvfFVHaKfstL+to1i46O4 BBZ8ueUC2A== ) ;; AUTHORITY SECTION (3 records) pictalk.xyz. 1800 IN NS dns1.registrar-servers.com. pictalk.xyz. 1800 IN NS dns2.registrar-servers.com. pictalk.xyz. 1800 IN RRSIG ( NS 13 2 1800 20221006000000 20220915000000 43623 pictalk.xyz. UJi7XJmRyngXCCsfOV4Y125CXcEoeSgLXRBIPSAw3+h/pKnOG1fv2qtN2327zDWzmNWUYJVDR28/ +t0+ui+tQg== ) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	api.pictalk.xyz A RR has value 134.209.186.18
	Found 1 RRSIGs over A RRset
	`api.pictalk.xyz. 1799 IN RRSIG ( A 13 3 1799 20221006000000 20220915000000 43623 pictalk.xyz. Bh5CThLW/i4rEXaWKUCOo9p38yUHmHrw5m4yDqe3RiB8/g6g7jNZvNHHvfFVHaKfstL+to1i46O4 BBZ8ueUC2A== )`
	RRSIG=43623 and DNSKEY=43623 verifies the A RRset

pictalk.xyz

	Query to dns1.registrar-servers.com for api.pictalk.xyz/A
	Received 333 bytes from 156.154.132.200
	;; Response received from 156.154.132.200 (333 octets) ;; HEADER SECTION ;; id = 52636 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 3 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; api.pictalk.xyz. IN A ;; ANSWER SECTION (2 records) api.pictalk.xyz. 1799 IN A 134.209.186.18 api.pictalk.xyz. 1799 IN RRSIG ( A 13 3 1799 20221006000000 20220915000000 43623 pictalk.xyz. Bh5CThLW/i4rEXaWKUCOo9p38yUHmHrw5m4yDqe3RiB8/g6g7jNZvNHHvfFVHaKfstL+to1i46O4 BBZ8ueUC2A== ) ;; AUTHORITY SECTION (3 records) pictalk.xyz. 1800 IN NS dns1.registrar-servers.com. pictalk.xyz. 1800 IN NS dns2.registrar-servers.com. pictalk.xyz. 1800 IN RRSIG ( NS 13 2 1800 20221006000000 20220915000000 43623 pictalk.xyz. UJi7XJmRyngXCCsfOV4Y125CXcEoeSgLXRBIPSAw3+h/pKnOG1fv2qtN2327zDWzmNWUYJVDR28/ +t0+ui+tQg== ) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	dns1.registrar-servers.com is authoritative for api.pictalk.xyz
	Query to dns1.registrar-servers.com for api.pictalk.xyz/DNSKEY
	Received 371 bytes from 156.154.132.200
	;; Response received from 156.154.132.200 (371 octets) ;; HEADER SECTION ;; id = 53145 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 4 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; api.pictalk.xyz. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (4 records) pictalk.xyz. 3601 IN SOA ( dns1.registrar-servers.com. hostmaster.registrar-servers.com. 1664163258 ;serial 43200 ;refresh 3600 ;retry 604800 ;expire 3601 ;minimum ) api.pictalk.xyz. 3601 IN NSEC apidev.pictalk.xyz. A RRSIG NSEC api.pictalk.xyz. 3601 IN RRSIG ( NSEC 13 3 3601 20221006000000 20220915000000 43623 pictalk.xyz. ZEq/6b532DsNBJaVt6sRN8rWkJJiq92EgBCyqQDyP+Y3BJZXjxuwtTsMZo30ekSu2HvAtZV0TWjd IcvN7uWu8A== ) pictalk.xyz. 3601 IN RRSIG ( SOA 13 2 3601 20221006000000 20220915000000 43623 pictalk.xyz. bm1y4WNW5Bct1+3NISUj+iOuRgkexvsMnfOwLho/Z0mWPOABuWOovOJElzdC9wuoNCkPM8qcF6wj otyCYVQhtw== ) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found RRSIG signed by pictalk.xyz zone
	Query to dns1.registrar-servers.com for api.pictalk.xyz/A
	Received 333 bytes from 156.154.132.200
	;; Response received from 156.154.132.200 (333 octets) ;; HEADER SECTION ;; id = 57021 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 3 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; api.pictalk.xyz. IN A ;; ANSWER SECTION (2 records) api.pictalk.xyz. 1799 IN A 134.209.186.18 api.pictalk.xyz. 1799 IN RRSIG ( A 13 3 1799 20221006000000 20220915000000 43623 pictalk.xyz. Bh5CThLW/i4rEXaWKUCOo9p38yUHmHrw5m4yDqe3RiB8/g6g7jNZvNHHvfFVHaKfstL+to1i46O4 BBZ8ueUC2A== ) ;; AUTHORITY SECTION (3 records) pictalk.xyz. 1800 IN NS dns1.registrar-servers.com. pictalk.xyz. 1800 IN NS dns2.registrar-servers.com. pictalk.xyz. 1800 IN RRSIG ( NS 13 2 1800 20221006000000 20220915000000 43623 pictalk.xyz. UJi7XJmRyngXCCsfOV4Y125CXcEoeSgLXRBIPSAw3+h/pKnOG1fv2qtN2327zDWzmNWUYJVDR28/ +t0+ui+tQg== ) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	api.pictalk.xyz A RR has value 134.209.186.18
	Found 1 RRSIGs over A RRset
	`api.pictalk.xyz. 1799 IN RRSIG ( A 13 3 1799 20221006000000 20220915000000 43623 pictalk.xyz. Bh5CThLW/i4rEXaWKUCOo9p38yUHmHrw5m4yDqe3RiB8/g6g7jNZvNHHvfFVHaKfstL+to1i46O4 BBZ8ueUC2A== )`
	RRSIG=43623 and DNSKEY=43623 verifies the A RRset

Move your mouse over any or symbols for remediation hints.

Want a second opinion? Test api.pictalk.xyz at dnsviz.net.

DNSSEC Analyzer

↓ Advanced options ↑ Advanced options

Trust Anchor:
Name Servers: