DNSSEC Debugger

Domain Name:

Time: 2025-10-02 22:07:25 UTC

Analyzing DNSSEC problems for bit.ly

DS=20326/SHA-256 is now in the chain-of-trust

	Checking DS between Trust Anchor and .
	`. IN DS ( 20326 8 2 e06d44b80b8f1d39a95c0b0d7c65d08458e880409bbc683457104237c7f8ec8d )`
	Query to b.root-servers.net for ./DNSKEY
	Received 1414 bytes from 170.247.170.2
	;; Response received from [170.247.170.2] 1414 octets ;; HEADER SECTION ;; id = 38995 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 5 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; . IN DNSKEY ;; ANSWER SECTION (5 records) . 172800 IN DNSKEY ( 256 3 8 AwEAAbauxLSFZ+KSWi2cT6TJbm3d+GIVqb2N1XnDjMsRme0b6JlGp/cvwmM5CaJ5LQ7tG1r7LuTH jYZadtbNk2nZmclq9r4KInS48ungoAZb0gJXVw8IvBTBb1YWQmiBqD285pJuORwTii7DF++nNJJk 3i55HJt9SmBI7m7t8nvx7OOY/w0inxg3fLH2uY0SKO8he4FGwMc4Ubiab8N8Yhyhh+FkKKdD/+oA cuGF75PjlSXO460B4MlNLlEcjDEzIsKauRYx4YVgSaNomGhMMFblmXRzgW+1R6ywvm5mC9+omlyy izZp2GJfPwGMezuKSGDndO6CYYEc5/lsRhvBYsGjdPM= ) ; keytag 46441 . 172800 IN DNSKEY ( 256 3 8 AwEAAeuS7hMRZ7muj1c/ew2DoavxkBw3jUG5R79pKVDI39fxvlD1HfJYGJERnXuV4SrQfUPzWw/l t5Axb0EqXL/sQ2ZyntVmwQwoSXi2l9smlIKh2UrkTmmozRCPe7GS4fZTE4Ew7AV4YprTLgVmxiGP 4unRuXkYOgQJXCIBpVCmEdUli6X2sm0i5ZilU/Q+rX3RDw+eYPP7K0cJnJ+ZnvQDy14+BFtreWl9 enNQljgGpBp26lEp1z7AbvUfzkQNVCVGaM8jEaCSALXiROlwCQMOdj+tpLXFf99kdJnTQw2cpEr1 uGs/yENAJpoGhbjZAoIkXzDUBSlfFeYz7FWzH6gIe7M= ) ; keytag 61809 . 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; keytag 20326 . 172800 IN DNSKEY ( 257 3 8 AwEAAa96jeuknZlaeSrvyAJj6ZHv28hhOKkx3rLGXVaC6rXTsDc449/cidltpkyGwCJNnOAlFNKF 2jBosZBU5eeHspaQWOmOElZsjICMQMC3aeHbGiShvZsx4wMYSjH8e7Vrhbu6irwCzVBApESjbUdp WWmEnhathWu1jo+siFUiRAAxm9qyJNg/wOZqqzL/dL/q8PkcRU5oUKEpUge71M3ej2/7CPqpdVwu MoTvoB+ZOT4YeGyxMvHmbrxlFzGOHOijtzN+u1TQNatX2XBuzZNQ1K+s2CXkPIZo7s6JgZyvaBev YtxPvYLw4z9mR7K2vaF18UYH9Z9GNUUeayffKC73PYc= ) ; keytag 38696 . 172800 IN RRSIG ( DNSKEY 8 0 172800 20251022000000 20251001000000 20326 . QOZ2GCLbZvx1e4NZI62pD4+licTnWF8dBhO5rrx+yUy/Z4F+PqONc0eg9VFuagS2wPbuWOhDdqL7 aO63tJ4mExFDU2j0NvOzDEq/Cj2zwT9i3pOTpX8ooJ+D5dTNBbX3u3KQMu07oJPp4OXehEIYoHWU vdcI8MjaAwicWXica9u85tP8GDAzNYO4w7iTzW0bmitCOSGiDvkk3Y9pJ2DKJZOEhs4kAh2HpAVo 1REdgT9AhgD6iUPpAQkj6CftyGNilTsAE8IrI7fDuCde/XM9IjEqUdBdn0FEiTSLeK4yLOIKNAOY NKRQar6dfSuIb1nQ30cBHRfo5WoftuhZmTQ8/w== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 4 DNSKEY records for .
	`. 172800 IN DNSKEY ( 256 3 8 AwEAAbauxLSFZ+KSWi2cT6TJbm3d+GIVqb2N1XnDjMsRme0b6JlGp/cvwmM5CaJ5LQ7tG1r7LuTH jYZadtbNk2nZmclq9r4KInS48ungoAZb0gJXVw8IvBTBb1YWQmiBqD285pJuORwTii7DF++nNJJk 3i55HJt9SmBI7m7t8nvx7OOY/w0inxg3fLH2uY0SKO8he4FGwMc4Ubiab8N8Yhyhh+FkKKdD/+oA cuGF75PjlSXO460B4MlNLlEcjDEzIsKauRYx4YVgSaNomGhMMFblmXRzgW+1R6ywvm5mC9+omlyy izZp2GJfPwGMezuKSGDndO6CYYEc5/lsRhvBYsGjdPM= ) ; keytag 46441`
	`. 172800 IN DNSKEY ( 256 3 8 AwEAAeuS7hMRZ7muj1c/ew2DoavxkBw3jUG5R79pKVDI39fxvlD1HfJYGJERnXuV4SrQfUPzWw/l t5Axb0EqXL/sQ2ZyntVmwQwoSXi2l9smlIKh2UrkTmmozRCPe7GS4fZTE4Ew7AV4YprTLgVmxiGP 4unRuXkYOgQJXCIBpVCmEdUli6X2sm0i5ZilU/Q+rX3RDw+eYPP7K0cJnJ+ZnvQDy14+BFtreWl9 enNQljgGpBp26lEp1z7AbvUfzkQNVCVGaM8jEaCSALXiROlwCQMOdj+tpLXFf99kdJnTQw2cpEr1 uGs/yENAJpoGhbjZAoIkXzDUBSlfFeYz7FWzH6gIe7M= ) ; keytag 61809`
	`. 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; keytag 20326`
	`. 172800 IN DNSKEY ( 257 3 8 AwEAAa96jeuknZlaeSrvyAJj6ZHv28hhOKkx3rLGXVaC6rXTsDc449/cidltpkyGwCJNnOAlFNKF 2jBosZBU5eeHspaQWOmOElZsjICMQMC3aeHbGiShvZsx4wMYSjH8e7Vrhbu6irwCzVBApESjbUdp WWmEnhathWu1jo+siFUiRAAxm9qyJNg/wOZqqzL/dL/q8PkcRU5oUKEpUge71M3ej2/7CPqpdVwu MoTvoB+ZOT4YeGyxMvHmbrxlFzGOHOijtzN+u1TQNatX2XBuzZNQ1K+s2CXkPIZo7s6JgZyvaBev YtxPvYLw4z9mR7K2vaF18UYH9Z9GNUUeayffKC73PYc= ) ; keytag 38696`
	DNSKEY=20326/SEP is now in the chain-of-trust
	DS=20326/SHA-256 verifies DNSKEY=20326/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`. 172800 IN RRSIG ( DNSKEY 8 0 172800 20251022000000 20251001000000 20326 . QOZ2GCLbZvx1e4NZI62pD4+licTnWF8dBhO5rrx+yUy/Z4F+PqONc0eg9VFuagS2wPbuWOhDdqL7 aO63tJ4mExFDU2j0NvOzDEq/Cj2zwT9i3pOTpX8ooJ+D5dTNBbX3u3KQMu07oJPp4OXehEIYoHWU vdcI8MjaAwicWXica9u85tP8GDAzNYO4w7iTzW0bmitCOSGiDvkk3Y9pJ2DKJZOEhs4kAh2HpAVo 1REdgT9AhgD6iUPpAQkj6CftyGNilTsAE8IrI7fDuCde/XM9IjEqUdBdn0FEiTSLeK4yLOIKNAOY NKRQar6dfSuIb1nQ30cBHRfo5WoftuhZmTQ8/w== )`
	RRSIG=20326 and DNSKEY=20326/SEP verifies the DNSKEY RRset
	DNSKEY=46441 is now in the chain-of-trust
	DNSKEY=61809 is now in the chain-of-trust
	DNSKEY=38696/SEP is now in the chain-of-trust
	Query to b.root-servers.net for bit.ly/A
	Received 675 bytes from 170.247.170.2
	;; Response received from [170.247.170.2] 675 octets ;; HEADER SECTION ;; id = 32172 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 7 arcount = 9 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; bit.ly. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (7 records) ly. 172800 IN NS dns.lttnet.net. ly. 172800 IN NS pch.ltt.ly. ly. 172800 IN NS dns1.lttnet.net. ly. 172800 IN NS ns-ly.afrinic.net. ly. 172800 IN NS phloem.uoregon.edu. ly. 86400 IN DS ( 62311 8 2 08e9ac56f605a728d048c803787ab044b0c81caea2031eac9edea77150a1bdbe ) ly. 86400 IN RRSIG ( DS 8 1 86400 20251015170000 20251002160000 61809 . oHdxCuwF5BZTuCcJ4oPXUMEsSl/tAftaFqFZq74hYCLLyAzMJx07LNQiyLLhJw1eeI5nLMOYmGk3 xmYr6QYu8Suzf9FptryxIjuTTTJpCpTS/ZsGPg5k2PI/5zAjmEtJJe8DV6l2iQh1fknX3cvjE6Gz GAXamCGSC0+PJWxAWjgAKrpIKZZJMWgHMqbsyxy+uUqS3boFWRX5JWNY+xSapwaQauAFyvBax9To 8vMU+3aBTNUFi3i1Z363ToM3g6swFucGdVwl1FW82i5LrpY7F2lOWzzEj287b/lqOvaIkX7uzJjR Ktg4vnKRdZmBHHmoYEjQqQ88vVpbDQHtJfChcA== ) ;; ADDITIONAL SECTION (9 records) pch.ltt.ly. 172800 IN A 204.61.216.67 pch.ltt.ly. 172800 IN AAAA 2001:500:14:6067:ad::1 dns.lttnet.net. 172800 IN A 62.240.36.9 dns1.lttnet.net. 172800 IN A 62.68.42.9 ns-ly.afrinic.net. 172800 IN A 196.216.168.24 ns-ly.afrinic.net. 172800 IN AAAA 2001:43f8:120::24 phloem.uoregon.edu. 172800 IN A 128.223.32.35 phloem.uoregon.edu. 172800 IN AAAA 2001:468:d01:20::80df:2023 ;; { "EDNS-VERSION": 0 }
	Query to c.root-servers.net for ly/DNSKEY
	Received 664 bytes from 192.33.4.12
	;; Response received from [192.33.4.12] 664 octets ;; HEADER SECTION ;; id = 52422 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 7 arcount = 9 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; ly. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (7 records) ly. 172800 IN NS pch.ltt.ly. ly. 172800 IN NS ns-ly.afrinic.net. ly. 172800 IN NS phloem.uoregon.edu. ly. 172800 IN NS dns.lttnet.net. ly. 172800 IN NS dns1.lttnet.net. ly. 86400 IN DS ( 62311 8 2 08e9ac56f605a728d048c803787ab044b0c81caea2031eac9edea77150a1bdbe ) ly. 86400 IN RRSIG ( DS 8 1 86400 20251015170000 20251002160000 61809 . oHdxCuwF5BZTuCcJ4oPXUMEsSl/tAftaFqFZq74hYCLLyAzMJx07LNQiyLLhJw1eeI5nLMOYmGk3 xmYr6QYu8Suzf9FptryxIjuTTTJpCpTS/ZsGPg5k2PI/5zAjmEtJJe8DV6l2iQh1fknX3cvjE6Gz GAXamCGSC0+PJWxAWjgAKrpIKZZJMWgHMqbsyxy+uUqS3boFWRX5JWNY+xSapwaQauAFyvBax9To 8vMU+3aBTNUFi3i1Z363ToM3g6swFucGdVwl1FW82i5LrpY7F2lOWzzEj287b/lqOvaIkX7uzJjR Ktg4vnKRdZmBHHmoYEjQqQ88vVpbDQHtJfChcA== ) ;; ADDITIONAL SECTION (9 records) phloem.uoregon.edu. 172800 IN A 128.223.32.35 ns-ly.afrinic.net. 172800 IN A 196.216.168.24 dns1.lttnet.net. 172800 IN A 62.68.42.9 pch.ltt.ly. 172800 IN A 204.61.216.67 dns.lttnet.net. 172800 IN A 62.240.36.9 phloem.uoregon.edu. 172800 IN AAAA 2001:468:d01:20::80df:2023 ns-ly.afrinic.net. 172800 IN AAAA 2001:43f8:120::24 pch.ltt.ly. 172800 IN AAAA 2001:500:14:6067:ad::1 ;; { "EDNS-VERSION": 0 }
	Found child zone ly

	Checking DS between . and ly
	Query to h.root-servers.net for ly/DS
	Received 366 bytes from 198.97.190.53
	;; Response received from [198.97.190.53] 366 octets ;; HEADER SECTION ;; id = 62509 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; ly. IN DS ;; ANSWER SECTION (2 records) ly. 86400 IN DS ( 62311 8 2 08e9ac56f605a728d048c803787ab044b0c81caea2031eac9edea77150a1bdbe ) ly. 86400 IN RRSIG ( DS 8 1 86400 20251015170000 20251002160000 61809 . oHdxCuwF5BZTuCcJ4oPXUMEsSl/tAftaFqFZq74hYCLLyAzMJx07LNQiyLLhJw1eeI5nLMOYmGk3 xmYr6QYu8Suzf9FptryxIjuTTTJpCpTS/ZsGPg5k2PI/5zAjmEtJJe8DV6l2iQh1fknX3cvjE6Gz GAXamCGSC0+PJWxAWjgAKrpIKZZJMWgHMqbsyxy+uUqS3boFWRX5JWNY+xSapwaQauAFyvBax9To 8vMU+3aBTNUFi3i1Z363ToM3g6swFucGdVwl1FW82i5LrpY7F2lOWzzEj287b/lqOvaIkX7uzJjR Ktg4vnKRdZmBHHmoYEjQqQ88vVpbDQHtJfChcA== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 1 DS records for ly in the . zone
	DS=62311/SHA-256 has algorithm RSASHA256
	Found 1 RRSIGs over DS RRset
	`ly. 86400 IN RRSIG ( DS 8 1 86400 20251015170000 20251002160000 61809 . oHdxCuwF5BZTuCcJ4oPXUMEsSl/tAftaFqFZq74hYCLLyAzMJx07LNQiyLLhJw1eeI5nLMOYmGk3 xmYr6QYu8Suzf9FptryxIjuTTTJpCpTS/ZsGPg5k2PI/5zAjmEtJJe8DV6l2iQh1fknX3cvjE6Gz GAXamCGSC0+PJWxAWjgAKrpIKZZJMWgHMqbsyxy+uUqS3boFWRX5JWNY+xSapwaQauAFyvBax9To 8vMU+3aBTNUFi3i1Z363ToM3g6swFucGdVwl1FW82i5LrpY7F2lOWzzEj287b/lqOvaIkX7uzJjR Ktg4vnKRdZmBHHmoYEjQqQ88vVpbDQHtJfChcA== )`
	RRSIG=61809 and DNSKEY=61809 verifies the DS RRset
	DS=62311/SHA-256 is now in the chain-of-trust
	`ly. 86400 IN DS ( 62311 8 2 08e9ac56f605a728d048c803787ab044b0c81caea2031eac9edea77150a1bdbe )`
	Query to dns1.lttnet.net for ly/DNSKEY
	Timeout querying dns1.lttnet.net/62.68.42.9 for ly/DNSKEY
	All Queries to dns1.lttnet.net for ly/DNSKEY timed out or failed
	Query to ns-ly.afrinic.net for ly/DNSKEY
	Received 1385 bytes from 196.216.168.24
	;; Response received from [196.216.168.24] 1385 octets ;; HEADER SECTION ;; id = 49794 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 3 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; ly. IN DNSKEY ;; ANSWER SECTION (3 records) ly. 172800 IN DNSKEY ( 257 3 8 AwEAAcbhsGvQrDj3AA1GU31NNkDhJe+ghg7C+sHdX/gnBpFWMohDkZIXLVPTZ7i+6uHktDguiIIm S+X1F8l6vBguMUeLn82zwtiY05SPDGezNavkDxp9QkdANVpOhvLruoCOAtLHKNhUwPvdk21ZkTau ZYctCBNRXs5r7/8mmbg0O9O1qouP3KovP6Oo7N2VhpzfaqR0zRRYpvTt0oqabTplbVYihU7CxxgX MY5WLSftHV7faedrbPRjgesFELLykxQWC8TPZ9XnqzD9mUkpDjjz2bfgQKaVdOtu6Q0MH7OF0J3g 58NL6tATmj3+gN0vf1nbR515CVsapOOEVt7Rl0rrPkvb2pSZXfR65BGDVJMA1rRPCW2ZL1x2sU+t rVFv1eRonA67LYipR2I9+wy71OWuiTpxjG74EvlDRMYVMPmJo4AoDo1v5ZpLN9yDH5FyLV2Cg+IX NXO9jOstxWIjK3xkhbDCr8LcKU7p9JL44WhM6D+dSBqesyGGW97s2pUUxIEL0FnwO5R56vhvRmDy 5iVIw/iYx7+RpeJypXjIIBS2lniZ3SNdFDeuSQOSn+owOvccbFNJcDBBFpfBBerukV+LgN3Z/Q2z FWG9SNwVoQapYM80MB/85RMgN0CO/wvqUitdlnsCOnfYgGw+4tS3LWh5kw4SIMUB0YdlhJ3BUNhF f+F1 ) ; keytag 62311 ly. 172800 IN DNSKEY ( 256 3 8 AwEAAddkMrn2FPudhZMFxhP7Mgy2Vt/lIc6jFF8fYQadNhHAAfJ1bsIcTN6XcWZApHm4XkNRGi5v rWsTHwO1i6nVGT4gi2kRIQ22M1I5MJ617sPiLCAKQFrIoeqbLtFN/CRIrzadLmLfMzA3VdMUQOUB yh1bgGiBBb+FPMV64mkD5eS2rkmBKfuBJS0/6MOb5c2/+CyKJQpGFFHsQxUn3yai73wj5IzaaFGM 6oofxXxEreEMI3nhEwYXVvKEZPrUXzgByS9Ad88ZY2j7vl+XrMFhzW6a9MkyaAH222rabPzC7SHx XadizHTBqWagvl0IUItWKxPGw2rR0zVl96S8gNSuiFU= ) ; keytag 49200 ly. 172800 IN RRSIG ( DNSKEY 8 1 172800 20251013180000 20250926180000 62311 ly. pvMNIMdpFshNnxzLSd59mRORyHWdTwuT7UjhWS7VzY/OGHKAwySSiIfKyc3qR+l2v9dipEoP6sPW O5invwCSrmjkHRQt0XyAmJMlIi7hA1+4l/K84mF/awwJZkVUhIuKFcGrT5fWmtx/UoSESum9hQt2 Zji+XlKG1rzZENMvY9nIXPLJo7Rith/LFjDueLtZfzLA5piXXCV+Q0xKlonk8bN5Wg+UDJVGJmY7 UVXJTVmmaa4v3NGMgheHrYHSFPXAdo1gi2HdsqUHq3utatsOsJcxQJCRif9rprfgNsttgCcpgp1M new5kV8vSzmVtfRQfs4+qrgQYOxC84CLOz1iqWcy613jABehSkyYeTagJXxofTrQBDgGuQlTYGY/ +NNNDkmR2gmbww4i9eYvaVusk5YcCSb9FEFEfD6si/lKw2X+AAXGrUl+EF/pnnsgq6MHOt0ToFiG XKrSf2SnAQzywjNqUpAFR8dwpzgTpWMdQyKSHaqUC8bbsRXWNFPpI+lZROYqq1YdS5s6X4zJPyno pEVhFT8pQnB/3P+A2ubFgYCBtdv4XnU2D79sal1QR6ujRInMehoNuSiqL9OQfiWJXTeixthkfOKk pPy28ceuTb31Fas4UCEunfjA+CsqgotC/nbPJCDyZL7R0vwI1fCOMwHg4JYRMQtkc8j5tU+r7tk= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 2 DNSKEY records for ly
	ly. 172800 IN DNSKEY ( 257 3 8 AwEAAcbhsGvQrDj3AA1GU31NNkDhJe+ghg7C+sHdX/gnBpFWMohDkZIXLVPTZ7i+6uHktDguiIIm S+X1F8l6vBguMUeLn82zwtiY05SPDGezNavkDxp9QkdANVpOhvLruoCOAtLHKNhUwPvdk21ZkTau ZYctCBNRXs5r7/8mmbg0O9O1qouP3KovP6Oo7N2VhpzfaqR0zRRYpvTt0oqabTplbVYihU7CxxgX MY5WLSftHV7faedrbPRjgesFELLykxQWC8TPZ9XnqzD9mUkpDjjz2bfgQKaVdOtu6Q0MH7OF0J3g 58NL6tATmj3+gN0vf1nbR515CVsapOOEVt7Rl0rrPkvb2pSZXfR65BGDVJMA1rRPCW2ZL1x2sU+t rVFv1eRonA67LYipR2I9+wy71OWuiTpxjG74EvlDRMYVMPmJo4AoDo1v5ZpLN9yDH5FyLV2Cg+IX NXO9jOstxWIjK3xkhbDCr8LcKU7p9JL44WhM6D+dSBqesyGGW97s2pUUxIEL0FnwO5R56vhvRmDy 5iVIw/iYx7+RpeJypXjIIBS2lniZ3SNdFDeuSQOSn+owOvccbFNJcDBBFpfBBerukV+LgN3Z/Q2z FWG9SNwVoQapYM80MB/85RMgN0CO/wvqUitdlnsCOnfYgGw+4tS3LWh5kw4SIMUB0YdlhJ3BUNhF f+F1 ) ; keytag 62311
	`ly. 172800 IN DNSKEY ( 256 3 8 AwEAAddkMrn2FPudhZMFxhP7Mgy2Vt/lIc6jFF8fYQadNhHAAfJ1bsIcTN6XcWZApHm4XkNRGi5v rWsTHwO1i6nVGT4gi2kRIQ22M1I5MJ617sPiLCAKQFrIoeqbLtFN/CRIrzadLmLfMzA3VdMUQOUB yh1bgGiBBb+FPMV64mkD5eS2rkmBKfuBJS0/6MOb5c2/+CyKJQpGFFHsQxUn3yai73wj5IzaaFGM 6oofxXxEreEMI3nhEwYXVvKEZPrUXzgByS9Ad88ZY2j7vl+XrMFhzW6a9MkyaAH222rabPzC7SHx XadizHTBqWagvl0IUItWKxPGw2rR0zVl96S8gNSuiFU= ) ; keytag 49200`
	DNSKEY=62311/SEP is now in the chain-of-trust
	DS=62311/SHA-256 verifies DNSKEY=62311/SEP
	Found 1 RRSIGs over DNSKEY RRset
	ly. 172800 IN RRSIG ( DNSKEY 8 1 172800 20251013180000 20250926180000 62311 ly. pvMNIMdpFshNnxzLSd59mRORyHWdTwuT7UjhWS7VzY/OGHKAwySSiIfKyc3qR+l2v9dipEoP6sPW O5invwCSrmjkHRQt0XyAmJMlIi7hA1+4l/K84mF/awwJZkVUhIuKFcGrT5fWmtx/UoSESum9hQt2 Zji+XlKG1rzZENMvY9nIXPLJo7Rith/LFjDueLtZfzLA5piXXCV+Q0xKlonk8bN5Wg+UDJVGJmY7 UVXJTVmmaa4v3NGMgheHrYHSFPXAdo1gi2HdsqUHq3utatsOsJcxQJCRif9rprfgNsttgCcpgp1M new5kV8vSzmVtfRQfs4+qrgQYOxC84CLOz1iqWcy613jABehSkyYeTagJXxofTrQBDgGuQlTYGY/ +NNNDkmR2gmbww4i9eYvaVusk5YcCSb9FEFEfD6si/lKw2X+AAXGrUl+EF/pnnsgq6MHOt0ToFiG XKrSf2SnAQzywjNqUpAFR8dwpzgTpWMdQyKSHaqUC8bbsRXWNFPpI+lZROYqq1YdS5s6X4zJPyno pEVhFT8pQnB/3P+A2ubFgYCBtdv4XnU2D79sal1QR6ujRInMehoNuSiqL9OQfiWJXTeixthkfOKk pPy28ceuTb31Fas4UCEunfjA+CsqgotC/nbPJCDyZL7R0vwI1fCOMwHg4JYRMQtkc8j5tU+r7tk= )
	RRSIG=62311 and DNSKEY=62311/SEP verifies the DNSKEY RRset
	DNSKEY=49200 is now in the chain-of-trust
	Query to ns-ly.afrinic.net for bit.ly/A
	Received 946 bytes from 196.216.168.24
	;; Response received from [196.216.168.24] 946 octets ;; HEADER SECTION ;; id = 33115 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 9 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; bit.ly. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (9 records) bit.ly. 86400 IN NS ns-705.awsdns-24.net. bit.ly. 86400 IN NS ns-1372.awsdns-43.org. bit.ly. 86400 IN NS ns-cloud-c1.googledomains.com. bit.ly. 86400 IN NS ns-cloud-c2.googledomains.com. bit.ly. 86400 IN NS ns-cloud-c3.googledomains.com. 2dmi2bv201ooi1a8et9a38ar9vmtomh9.ly. 600 IN NSEC3 ( 1 1 0 349823a8 2ftsof2a45jh96f4jliioddk2huur9fc NS SOA TXT RRSIG DNSKEY NSEC3PARAM ) 2dmi2bv201ooi1a8et9a38ar9vmtomh9.ly. 600 IN RRSIG ( NSEC3 8 2 600 20251011100000 20250924100000 49200 ly. OOIz6wTuTNsnKY+HL8LlXGpn1Jkg8i+5ZRTP5omM4medoiCmzjYenQI+08q3nXZ078SNcUGLB4aG wXRT5A7rmIDLSqP1FWse+ArsRJibexxGP1AMuZ9Bu0uhS4eAIYfgqYOMauDKjsHm3LhHptQYjUdb 511Po2xqXrg2auVcIwmIl5gLkp2oTDc4whbrWXuRN/9v5oPYHPeW50yl4f7DjLGp7cjUCQq5afrq C4TdeAnTR7g8f2PqD5ovDISGV1/BLxcE7rgMlFrnRJBfolpxEOSO3ywO6I4k111Z4dalHsaN0mNM 5S9louthR/wXUtTATqomNWCcCNgpgvNY1m3fBw== ) m9hknqrvh9tbbsa2th0a38ml5cnni2qg.ly. 600 IN NSEC3 ( 1 1 0 349823a8 mhulhbi2s4q4solc91k2i84jhj4l8r87 NS DS RRSIG ) m9hknqrvh9tbbsa2th0a38ml5cnni2qg.ly. 600 IN RRSIG ( NSEC3 8 2 600 20251011100000 20250924100000 49200 ly. kBfukF0lQdsAneWgA8wYeUNlzANsIjPW9/en0DQz8fUy1QoeFitW+GuNUk9t36UCBwQT5vs/E7pf AdQSzBBox7A9gAb+HH3q1/6PmJRqY3Rj8EOzFqvvDv961uPE05gKeAOEQbCe0Fds9kE+I69KuUxb EYZq7JlRZhvXLVtQTN5JY1T6xFSpuSrdMQ1jwFrdwgPtA8Nl0pkKk0sFV7uPDH4y29j382SoJOnC K9VSlbS+OJrPTF6M30bXJSaUjxnqTr2wnP0vQHzxHMUV+S3B2gQ0lXlb18GZEKCJZ1nN+iPn1ON9 31ylnDZ+Viz42idhp/Em55QD/i7yui3uFMxuaw== ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Query to dns.lttnet.net for bit.ly/DNSKEY
	Received 946 bytes from 62.240.36.9
	;; Response received from [62.240.36.9] 946 octets ;; HEADER SECTION ;; id = 15909 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 9 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; bit.ly. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (9 records) bit.ly. 86400 IN NS ns-cloud-c1.googledomains.com. bit.ly. 86400 IN NS ns-1372.awsdns-43.org. bit.ly. 86400 IN NS ns-cloud-c3.googledomains.com. bit.ly. 86400 IN NS ns-cloud-c2.googledomains.com. bit.ly. 86400 IN NS ns-705.awsdns-24.net. 2DMI2BV201OOI1A8ET9A38AR9VMTOMH9.ly. 600 IN NSEC3 ( 1 1 0 349823a8 2ftsof2a45jh96f4jliioddk2huur9fc NS SOA TXT RRSIG DNSKEY NSEC3PARAM ) 2DMI2BV201OOI1A8ET9A38AR9VMTOMH9.ly. 600 IN RRSIG ( NSEC3 8 2 600 20251011100000 20250924100000 49200 ly. OOIz6wTuTNsnKY+HL8LlXGpn1Jkg8i+5ZRTP5omM4medoiCmzjYenQI+08q3nXZ078SNcUGLB4aG wXRT5A7rmIDLSqP1FWse+ArsRJibexxGP1AMuZ9Bu0uhS4eAIYfgqYOMauDKjsHm3LhHptQYjUdb 511Po2xqXrg2auVcIwmIl5gLkp2oTDc4whbrWXuRN/9v5oPYHPeW50yl4f7DjLGp7cjUCQq5afrq C4TdeAnTR7g8f2PqD5ovDISGV1/BLxcE7rgMlFrnRJBfolpxEOSO3ywO6I4k111Z4dalHsaN0mNM 5S9louthR/wXUtTATqomNWCcCNgpgvNY1m3fBw== ) M9HKNQRVH9TBBSA2TH0A38ML5CNNI2QG.ly. 600 IN NSEC3 ( 1 1 0 349823a8 mhulhbi2s4q4solc91k2i84jhj4l8r87 NS DS RRSIG ) M9HKNQRVH9TBBSA2TH0A38ML5CNNI2QG.ly. 600 IN RRSIG ( NSEC3 8 2 600 20251011100000 20250924100000 49200 ly. kBfukF0lQdsAneWgA8wYeUNlzANsIjPW9/en0DQz8fUy1QoeFitW+GuNUk9t36UCBwQT5vs/E7pf AdQSzBBox7A9gAb+HH3q1/6PmJRqY3Rj8EOzFqvvDv961uPE05gKeAOEQbCe0Fds9kE+I69KuUxb EYZq7JlRZhvXLVtQTN5JY1T6xFSpuSrdMQ1jwFrdwgPtA8Nl0pkKk0sFV7uPDH4y29j382SoJOnC K9VSlbS+OJrPTF6M30bXJSaUjxnqTr2wnP0vQHzxHMUV+S3B2gQ0lXlb18GZEKCJZ1nN+iPn1ON9 31ylnDZ+Viz42idhp/Em55QD/i7yui3uFMxuaw== ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found child zone bit.ly

bit.ly

	Checking DS between ly and bit.ly
	Query to dns1.lttnet.net for bit.ly/DS
	Received 1130 bytes from 62.68.42.9
	;; Response received from [62.68.42.9] 1130 octets ;; HEADER SECTION ;; id = 971 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 6 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; bit.ly. IN DS ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (6 records) 2DMI2BV201OOI1A8ET9A38AR9VMTOMH9.ly. 600 IN NSEC3 ( 1 1 0 349823a8 2ftsof2a45jh96f4jliioddk2huur9fc NS SOA TXT RRSIG DNSKEY NSEC3PARAM ) 2DMI2BV201OOI1A8ET9A38AR9VMTOMH9.ly. 600 IN RRSIG ( NSEC3 8 2 600 20251011100000 20250924100000 49200 ly. OOIz6wTuTNsnKY+HL8LlXGpn1Jkg8i+5ZRTP5omM4medoiCmzjYenQI+08q3nXZ078SNcUGLB4aG wXRT5A7rmIDLSqP1FWse+ArsRJibexxGP1AMuZ9Bu0uhS4eAIYfgqYOMauDKjsHm3LhHptQYjUdb 511Po2xqXrg2auVcIwmIl5gLkp2oTDc4whbrWXuRN/9v5oPYHPeW50yl4f7DjLGp7cjUCQq5afrq C4TdeAnTR7g8f2PqD5ovDISGV1/BLxcE7rgMlFrnRJBfolpxEOSO3ywO6I4k111Z4dalHsaN0mNM 5S9louthR/wXUtTATqomNWCcCNgpgvNY1m3fBw== ) ly. 600 IN SOA ( dns.lttnet.net. khaleds.lttnet.net. 2025100222 ;serial 3600 ;refresh 900 ;retry 604800 ;expire 600 ;minimum ) ly. 600 IN RRSIG ( SOA 8 1 3600 20251011100000 20250924100000 49200 ly. eE0nqCFnBlbc3DTpl4N2jERuIdXPdBYsf08iirySRJp37laIFy5RmFi4WcDysAeQ6Nl3iHKI6Vkf p+4kw7F4q8tnRx4MjQrRo0D3MvFp2/vilpNtYD9RidpTaUQirGCEIPAhBksl+bUqxx4Cc/ZpeRtK u21Y+72RaMw4PzKtaqs0DfPpZVVqv2Y5V/OTNfkV57einxb4DqOBd+ax+jF6kmBWIyl2o9xyBagW EVdQDS1GVFp6T7WbPtei4qsXkQcyQloKr4VmDocQuyTl3mu10gqEB66mhNAAd4ezOotmReIZWEvb C7k2l5CT402mKqjczqxDK2Vtsvl+ilbcqKlUQg== ) M9HKNQRVH9TBBSA2TH0A38ML5CNNI2QG.ly. 600 IN NSEC3 ( 1 1 0 349823a8 mhulhbi2s4q4solc91k2i84jhj4l8r87 NS DS RRSIG ) M9HKNQRVH9TBBSA2TH0A38ML5CNNI2QG.ly. 600 IN RRSIG ( NSEC3 8 2 600 20251011100000 20250924100000 49200 ly. kBfukF0lQdsAneWgA8wYeUNlzANsIjPW9/en0DQz8fUy1QoeFitW+GuNUk9t36UCBwQT5vs/E7pf AdQSzBBox7A9gAb+HH3q1/6PmJRqY3Rj8EOzFqvvDv961uPE05gKeAOEQbCe0Fds9kE+I69KuUxb EYZq7JlRZhvXLVtQTN5JY1T6xFSpuSrdMQ1jwFrdwgPtA8Nl0pkKk0sFV7uPDH4y29j382SoJOnC K9VSlbS+OJrPTF6M30bXJSaUjxnqTr2wnP0vQHzxHMUV+S3B2gQ0lXlb18GZEKCJZ1nN+iPn1ON9 31ylnDZ+Viz42idhp/Em55QD/i7yui3uFMxuaw== ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	No DS records found for bit.ly in the ly zone
	Query to ns-cloud-c3.googledomains.com for bit.ly/DNSKEY
	Received 128 bytes from 216.239.36.108
	;; Response received from [216.239.36.108] 128 octets ;; HEADER SECTION ;; id = 15338 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 1 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 0, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; bit.ly. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (1 record) bit.ly. 300 IN SOA ( ns-cloud-c1.googledomains.com. cloud-dns-hostmaster.google.com. 1 ;serial 21600 ;refresh 3600 ;retry 259200 ;expire 300 ;minimum ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	No DNSKEY records found
	Query to ns-cloud-c1.googledomains.com for bit.ly/A
	Received 67 bytes from 216.239.32.108
	;; Response received from [216.239.32.108] 67 octets ;; HEADER SECTION ;; id = 18706 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 0, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; bit.ly. IN A ;; ANSWER SECTION (2 records) bit.ly. 300 IN A 67.199.248.11 bit.ly. 300 IN A 67.199.248.10 ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	ns-cloud-c1.googledomains.com is authoritative for bit.ly
	Query to ns-cloud-c2.googledomains.com for bit.ly/SOA
	Received 357 bytes from 216.239.34.108
	;; Response received from [216.239.34.108] 357 octets ;; HEADER SECTION ;; id = 9090 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 1 ;; nscount = 8 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 0, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; bit.ly. IN SOA ;; ANSWER SECTION (1 record) bit.ly. 21600 IN SOA ( ns-cloud-c1.googledomains.com. cloud-dns-hostmaster.google.com. 1 ;serial 21600 ;refresh 3600 ;retry 259200 ;expire 300 ;minimum ) ;; AUTHORITY SECTION (8 records) bit.ly. 86400 IN NS ns-cloud-c3.googledomains.com. bit.ly. 86400 IN NS ns-cloud-c4.googledomains.com. bit.ly. 86400 IN NS ns-1372.awsdns-43.org. bit.ly. 86400 IN NS ns-cloud-c2.googledomains.com. bit.ly. 86400 IN NS ns-276.awsdns-34.com. bit.ly. 86400 IN NS ns-1766.awsdns-28.co.uk. bit.ly. 86400 IN NS ns-cloud-c1.googledomains.com. bit.ly. 86400 IN NS ns-705.awsdns-24.net. ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Query to ns-1372.awsdns-43.org for bit.ly/SOA
	Received 354 bytes from 205.251.197.92
	;; Response received from [205.251.197.92] 354 octets ;; HEADER SECTION ;; id = 36944 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 1 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 1 ;; nscount = 8 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; bit.ly. IN SOA ;; ANSWER SECTION (1 record) bit.ly. 900 IN SOA ( ns-1372.awsdns-43.org. awsdns-hostmaster.amazon.com. 1 ;serial 7200 ;refresh 900 ;retry 1209600 ;expire 86400 ;minimum ) ;; AUTHORITY SECTION (8 records) bit.ly. 86400 IN NS ns-1372.awsdns-43.org. bit.ly. 86400 IN NS ns-1766.awsdns-28.co.uk. bit.ly. 86400 IN NS ns-276.awsdns-34.com. bit.ly. 86400 IN NS ns-705.awsdns-24.net. bit.ly. 86400 IN NS ns-cloud-c1.googledomains.com. bit.ly. 86400 IN NS ns-cloud-c2.googledomains.com. bit.ly. 86400 IN NS ns-cloud-c3.googledomains.com. bit.ly. 86400 IN NS ns-cloud-c4.googledomains.com. ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Query to ns-705.awsdns-24.net for bit.ly/SOA
	Received 354 bytes from 205.251.194.193
	;; Response received from [205.251.194.193] 354 octets ;; HEADER SECTION ;; id = 23634 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 1 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 1 ;; nscount = 8 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; bit.ly. IN SOA ;; ANSWER SECTION (1 record) bit.ly. 900 IN SOA ( ns-1372.awsdns-43.org. awsdns-hostmaster.amazon.com. 1 ;serial 7200 ;refresh 900 ;retry 1209600 ;expire 86400 ;minimum ) ;; AUTHORITY SECTION (8 records) bit.ly. 86400 IN NS ns-1372.awsdns-43.org. bit.ly. 86400 IN NS ns-1766.awsdns-28.co.uk. bit.ly. 86400 IN NS ns-276.awsdns-34.com. bit.ly. 86400 IN NS ns-705.awsdns-24.net. bit.ly. 86400 IN NS ns-cloud-c1.googledomains.com. bit.ly. 86400 IN NS ns-cloud-c2.googledomains.com. bit.ly. 86400 IN NS ns-cloud-c3.googledomains.com. bit.ly. 86400 IN NS ns-cloud-c4.googledomains.com. ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Query to ns-cloud-c3.googledomains.com for bit.ly/SOA
	Received 357 bytes from 216.239.36.108
	;; Response received from [216.239.36.108] 357 octets ;; HEADER SECTION ;; id = 31284 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 1 ;; nscount = 8 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 0, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; bit.ly. IN SOA ;; ANSWER SECTION (1 record) bit.ly. 21600 IN SOA ( ns-cloud-c1.googledomains.com. cloud-dns-hostmaster.google.com. 1 ;serial 21600 ;refresh 3600 ;retry 259200 ;expire 300 ;minimum ) ;; AUTHORITY SECTION (8 records) bit.ly. 86400 IN NS ns-cloud-c2.googledomains.com. bit.ly. 86400 IN NS ns-276.awsdns-34.com. bit.ly. 86400 IN NS ns-705.awsdns-24.net. bit.ly. 86400 IN NS ns-cloud-c3.googledomains.com. bit.ly. 86400 IN NS ns-1766.awsdns-28.co.uk. bit.ly. 86400 IN NS ns-cloud-c1.googledomains.com. bit.ly. 86400 IN NS ns-cloud-c4.googledomains.com. bit.ly. 86400 IN NS ns-1372.awsdns-43.org. ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Query to ns-cloud-c1.googledomains.com for bit.ly/A
	Received 67 bytes from 216.239.32.108
	;; Response received from [216.239.32.108] 67 octets ;; HEADER SECTION ;; id = 10003 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 0, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; bit.ly. IN A ;; ANSWER SECTION (2 records) bit.ly. 300 IN A 67.199.248.10 bit.ly. 300 IN A 67.199.248.11 ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	bit.ly A RR has value 67.199.248.10
	bit.ly A RR has value 67.199.248.11
	No RRSIGs found

bit.ly

	Query to ns-cloud-c2.googledomains.com for bit.ly/A
	Received 67 bytes from 216.239.34.108
	;; Response received from [216.239.34.108] 67 octets ;; HEADER SECTION ;; id = 40105 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 0, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; bit.ly. IN A ;; ANSWER SECTION (2 records) bit.ly. 300 IN A 67.199.248.10 bit.ly. 300 IN A 67.199.248.11 ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	ns-cloud-c2.googledomains.com is authoritative for bit.ly
	Query to ns-cloud-c2.googledomains.com for bit.ly/A
	Received 67 bytes from 216.239.34.108
	;; Response received from [216.239.34.108] 67 octets ;; HEADER SECTION ;; id = 34708 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 0, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; bit.ly. IN A ;; ANSWER SECTION (2 records) bit.ly. 300 IN A 67.199.248.11 bit.ly. 300 IN A 67.199.248.10 ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	bit.ly A RR has value 67.199.248.11
	bit.ly A RR has value 67.199.248.10
	No RRSIGs found

bit.ly

	Query to ns-705.awsdns-24.net for bit.ly/A
	Received 325 bytes from 205.251.194.193
	;; Response received from [205.251.194.193] 325 octets ;; HEADER SECTION ;; id = 1999 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 1 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 8 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; bit.ly. IN A ;; ANSWER SECTION (2 records) bit.ly. 300 IN A 67.199.248.10 bit.ly. 300 IN A 67.199.248.11 ;; AUTHORITY SECTION (8 records) bit.ly. 86400 IN NS ns-1372.awsdns-43.org. bit.ly. 86400 IN NS ns-1766.awsdns-28.co.uk. bit.ly. 86400 IN NS ns-276.awsdns-34.com. bit.ly. 86400 IN NS ns-705.awsdns-24.net. bit.ly. 86400 IN NS ns-cloud-c1.googledomains.com. bit.ly. 86400 IN NS ns-cloud-c2.googledomains.com. bit.ly. 86400 IN NS ns-cloud-c3.googledomains.com. bit.ly. 86400 IN NS ns-cloud-c4.googledomains.com. ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	ns-705.awsdns-24.net is authoritative for bit.ly
	Query to ns-705.awsdns-24.net for bit.ly/A
	Received 325 bytes from 205.251.194.193
	;; Response received from [205.251.194.193] 325 octets ;; HEADER SECTION ;; id = 289 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 1 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 8 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; bit.ly. IN A ;; ANSWER SECTION (2 records) bit.ly. 300 IN A 67.199.248.11 bit.ly. 300 IN A 67.199.248.10 ;; AUTHORITY SECTION (8 records) bit.ly. 86400 IN NS ns-1372.awsdns-43.org. bit.ly. 86400 IN NS ns-1766.awsdns-28.co.uk. bit.ly. 86400 IN NS ns-276.awsdns-34.com. bit.ly. 86400 IN NS ns-705.awsdns-24.net. bit.ly. 86400 IN NS ns-cloud-c1.googledomains.com. bit.ly. 86400 IN NS ns-cloud-c2.googledomains.com. bit.ly. 86400 IN NS ns-cloud-c3.googledomains.com. bit.ly. 86400 IN NS ns-cloud-c4.googledomains.com. ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	bit.ly A RR has value 67.199.248.11
	bit.ly A RR has value 67.199.248.10
	No RRSIGs found

bit.ly

	Query to ns-1372.awsdns-43.org for bit.ly/A
	Received 325 bytes from 205.251.197.92
	;; Response received from [205.251.197.92] 325 octets ;; HEADER SECTION ;; id = 29878 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 1 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 8 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; bit.ly. IN A ;; ANSWER SECTION (2 records) bit.ly. 300 IN A 67.199.248.11 bit.ly. 300 IN A 67.199.248.10 ;; AUTHORITY SECTION (8 records) bit.ly. 86400 IN NS ns-1372.awsdns-43.org. bit.ly. 86400 IN NS ns-1766.awsdns-28.co.uk. bit.ly. 86400 IN NS ns-276.awsdns-34.com. bit.ly. 86400 IN NS ns-705.awsdns-24.net. bit.ly. 86400 IN NS ns-cloud-c1.googledomains.com. bit.ly. 86400 IN NS ns-cloud-c2.googledomains.com. bit.ly. 86400 IN NS ns-cloud-c3.googledomains.com. bit.ly. 86400 IN NS ns-cloud-c4.googledomains.com. ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	ns-1372.awsdns-43.org is authoritative for bit.ly
	Query to ns-1372.awsdns-43.org for bit.ly/A
	Received 325 bytes from 205.251.197.92
	;; Response received from [205.251.197.92] 325 octets ;; HEADER SECTION ;; id = 65128 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 1 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 8 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; bit.ly. IN A ;; ANSWER SECTION (2 records) bit.ly. 300 IN A 67.199.248.11 bit.ly. 300 IN A 67.199.248.10 ;; AUTHORITY SECTION (8 records) bit.ly. 86400 IN NS ns-1372.awsdns-43.org. bit.ly. 86400 IN NS ns-1766.awsdns-28.co.uk. bit.ly. 86400 IN NS ns-276.awsdns-34.com. bit.ly. 86400 IN NS ns-705.awsdns-24.net. bit.ly. 86400 IN NS ns-cloud-c1.googledomains.com. bit.ly. 86400 IN NS ns-cloud-c2.googledomains.com. bit.ly. 86400 IN NS ns-cloud-c3.googledomains.com. bit.ly. 86400 IN NS ns-cloud-c4.googledomains.com. ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	bit.ly A RR has value 67.199.248.11
	bit.ly A RR has value 67.199.248.10
	No RRSIGs found

bit.ly

	Query to ns-cloud-c3.googledomains.com for bit.ly/A
	Received 67 bytes from 216.239.36.108
	;; Response received from [216.239.36.108] 67 octets ;; HEADER SECTION ;; id = 27628 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 0, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; bit.ly. IN A ;; ANSWER SECTION (2 records) bit.ly. 300 IN A 67.199.248.10 bit.ly. 300 IN A 67.199.248.11 ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	ns-cloud-c3.googledomains.com is authoritative for bit.ly
	Query to ns-cloud-c3.googledomains.com for bit.ly/A
	Received 67 bytes from 216.239.36.108
	;; Response received from [216.239.36.108] 67 octets ;; HEADER SECTION ;; id = 14553 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 0, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; bit.ly. IN A ;; ANSWER SECTION (2 records) bit.ly. 300 IN A 67.199.248.10 bit.ly. 300 IN A 67.199.248.11 ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	bit.ly A RR has value 67.199.248.10
	bit.ly A RR has value 67.199.248.11
	No RRSIGs found

Move your mouse over any or symbols for remediation hints.

Want a second opinion? Test bit.ly at dnsviz.net.

DNSSEC Debugger

↓ Advanced options ↑ Advanced options

Trust Anchor:
Name Servers: