DNSSEC Debugger - livedrawsgp.best

Back to Verisign Labs Tools

Domain Name:

Detail: more(+) / less(-)

Time: 2026-07-22 23:33:44 UTC

Analyzing DNSSEC problems for livedrawsgp.best

DS=20326/SHA-256 is now in the chain-of-trust

DS=38696/SHA-256 is now in the chain-of-trust

	Checking DS between Trust Anchor and .
	`. IN DS ( 20326 8 2 e06d44b80b8f1d39a95c0b0d7c65d08458e880409bbc683457104237c7f8ec8d )`
	`. IN DS ( 38696 8 2 683d2d0acb8c9b712a1948b27f741219298d0a450d612c483af444a4c0fb2b16 )`
	Query to l.root-servers.net for ./DNSKEY
	Received 1139 bytes from 199.7.83.42
	;; Response received from [199.7.83.42] 1139 octets ;; HEADER SECTION ;; id = 11788 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 4 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; . IN DNSKEY ;; ANSWER SECTION (4 records) . 172800 IN DNSKEY ( 256 3 8 AwEAAeCYD6Z7WWKVLeuWgowKP+3g+Gs1cnLKq7a3CaQxQpv8bfuFVI0WnG33qaSH/Mw9IBgifrdz f4XY/DQLnyBJ9MfaOyAWuEaEmYJ+GQPiwVVfstGwSA1McfFJUttTgq2Huu74KARhtA8wPo/N3Xcy YQtNhz+qCM5NBb3ecx/naw6sYab9LxS6f2cU0q03++BP5Ks0Uef8WJCa/1izCYE+vMkwoltV+tEN a3hpXiZ7jle/xdgaZrPi5ZGmyLVI34g1XVYrNlsCCTmNvFQIfzW5STFQFsQpizczyFn9r3LzSxxP CNwdlCG84bER0BmdwqbF6Tanv+FxMOavrahkj4wIy5k= ) ; keytag 57780 . 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; keytag 20326 . 172800 IN DNSKEY ( 257 3 8 AwEAAa96jeuknZlaeSrvyAJj6ZHv28hhOKkx3rLGXVaC6rXTsDc449/cidltpkyGwCJNnOAlFNKF 2jBosZBU5eeHspaQWOmOElZsjICMQMC3aeHbGiShvZsx4wMYSjH8e7Vrhbu6irwCzVBApESjbUdp WWmEnhathWu1jo+siFUiRAAxm9qyJNg/wOZqqzL/dL/q8PkcRU5oUKEpUge71M3ej2/7CPqpdVwu MoTvoB+ZOT4YeGyxMvHmbrxlFzGOHOijtzN+u1TQNatX2XBuzZNQ1K+s2CXkPIZo7s6JgZyvaBev YtxPvYLw4z9mR7K2vaF18UYH9Z9GNUUeayffKC73PYc= ) ; keytag 38696 . 172800 IN RRSIG ( DNSKEY 8 0 172800 20260811000000 20260721000000 20326 . KRNkneCiUAW/3xsn8/6VDpfjYsXUrh19hqxVi2TRYnqbNa9N/fwN0Z/JgTGfigaY6KKSFgTZGZsi ilMiPVdHOirETIVs37XWU6L+dskCttC2rHUShOxnf0lLzy2rFJbolkd3aB5FpbprKmURCyeW/Na/ wtrSCo1kArBAIOGZLHNvDOVKL/MDIAkZJQ6EbfLxY8wkd4Rp93T5sAUyBaSlRpkqDyujUuz/0lCB eApRp0wMGQGC5+3//rdv16be3O5+oi124vJqlskvDw/jIsq3GY2jNjnWBwu7bFeOWHahBsZNROj0 fKTkCYgtWKZfwFp0bwc20chK6hHxPskKEB+AFw== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 3 DNSKEY records for .
	`. 172800 IN DNSKEY ( 256 3 8 AwEAAeCYD6Z7WWKVLeuWgowKP+3g+Gs1cnLKq7a3CaQxQpv8bfuFVI0WnG33qaSH/Mw9IBgifrdz f4XY/DQLnyBJ9MfaOyAWuEaEmYJ+GQPiwVVfstGwSA1McfFJUttTgq2Huu74KARhtA8wPo/N3Xcy YQtNhz+qCM5NBb3ecx/naw6sYab9LxS6f2cU0q03++BP5Ks0Uef8WJCa/1izCYE+vMkwoltV+tEN a3hpXiZ7jle/xdgaZrPi5ZGmyLVI34g1XVYrNlsCCTmNvFQIfzW5STFQFsQpizczyFn9r3LzSxxP CNwdlCG84bER0BmdwqbF6Tanv+FxMOavrahkj4wIy5k= ) ; keytag 57780`
	`. 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; keytag 20326`
	`. 172800 IN DNSKEY ( 257 3 8 AwEAAa96jeuknZlaeSrvyAJj6ZHv28hhOKkx3rLGXVaC6rXTsDc449/cidltpkyGwCJNnOAlFNKF 2jBosZBU5eeHspaQWOmOElZsjICMQMC3aeHbGiShvZsx4wMYSjH8e7Vrhbu6irwCzVBApESjbUdp WWmEnhathWu1jo+siFUiRAAxm9qyJNg/wOZqqzL/dL/q8PkcRU5oUKEpUge71M3ej2/7CPqpdVwu MoTvoB+ZOT4YeGyxMvHmbrxlFzGOHOijtzN+u1TQNatX2XBuzZNQ1K+s2CXkPIZo7s6JgZyvaBev YtxPvYLw4z9mR7K2vaF18UYH9Z9GNUUeayffKC73PYc= ) ; keytag 38696`
	DNSKEY=20326/SEP is now in the chain-of-trust
	DS=20326/SHA-256 verifies DNSKEY=20326/SEP
	DNSKEY=38696/SEP is now in the chain-of-trust
	DS=38696/SHA-256 verifies DNSKEY=38696/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`. 172800 IN RRSIG ( DNSKEY 8 0 172800 20260811000000 20260721000000 20326 . KRNkneCiUAW/3xsn8/6VDpfjYsXUrh19hqxVi2TRYnqbNa9N/fwN0Z/JgTGfigaY6KKSFgTZGZsi ilMiPVdHOirETIVs37XWU6L+dskCttC2rHUShOxnf0lLzy2rFJbolkd3aB5FpbprKmURCyeW/Na/ wtrSCo1kArBAIOGZLHNvDOVKL/MDIAkZJQ6EbfLxY8wkd4Rp93T5sAUyBaSlRpkqDyujUuz/0lCB eApRp0wMGQGC5+3//rdv16be3O5+oi124vJqlskvDw/jIsq3GY2jNjnWBwu7bFeOWHahBsZNROj0 fKTkCYgtWKZfwFp0bwc20chK6hHxPskKEB+AFw== )`
	RRSIG=20326 and DNSKEY=20326/SEP verifies the DNSKEY RRset
	DNSKEY=57780 is now in the chain-of-trust
	Query to d.root-servers.net for livedrawsgp.best/A
	Received 672 bytes from 199.7.91.13
	;; Response received from [199.7.91.13] 672 octets ;; HEADER SECTION ;; id = 41179 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 7 arcount = 9 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1450, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; livedrawsgp.best. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (7 records) best. 172800 IN NS a.nic.best. best. 172800 IN NS b.nic.best. best. 172800 IN NS c.nic.best. best. 172800 IN NS d.nic.best. best. 86400 IN DS ( 13966 8 2 1b34271dc3cac4d1faa279893902bd3330eab9675dab6dba03fd163437e7d12a ) best. 86400 IN DS ( 41279 8 2 d0c266b147e9fa7122215ccca36b23d43407bd2f03b2e3b6e917d350b31aa5fd ) best. 86400 IN RRSIG ( DS 8 1 86400 20260804200000 20260722190000 57780 . NLWyW4MFoLwLQ8oC1WEgSmSBpxjuPPultuduu+D33S36az11nforrPUdHXP6XEkZUMBeMC5XHP6Y RWAyQqIyRYOl589TH8bTn7d/iTobYgXdfdF1J/8Sv/xIPUycrF/9Divsqrwe+wbVOWHeVonQjr3A /TPonkbE95802aoJsyMN4JkSMTMy6PosOhLraJTT3NX2qzi21+5h+2W+Rrs7rNrs78+kpHX7crbe db9vYz477On3nd7san7M0JMmt8yHUC+cP+E9bMcXrYrIu9hSyme8jAZLUwqbJZoUTC7V7DKLhgAU 0kYxcPPj/JGoLC7cEMkqIKf8bXv0Q07xoGdyCA== ) ;; ADDITIONAL SECTION (9 records) a.nic.best. 172800 IN A 194.169.218.109 b.nic.best. 172800 IN A 185.24.64.109 c.nic.best. 172800 IN A 212.18.248.109 d.nic.best. 172800 IN A 212.18.249.109 a.nic.best. 172800 IN AAAA 2001:67c:13cc::1:109 b.nic.best. 172800 IN AAAA 2a04:2b00:13cc::1:109 c.nic.best. 172800 IN AAAA 2a04:2b00:13ee::109 d.nic.best. 172800 IN AAAA 2a04:2b00:13ff::109 ;; { "EDNS-VERSION": 0 }
	Query to h.root-servers.net for best/DNSKEY
	Received 660 bytes from 198.97.190.53
	;; Response received from [198.97.190.53] 660 octets ;; HEADER SECTION ;; id = 14569 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 7 arcount = 9 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; best. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (7 records) best. 172800 IN NS a.nic.best. best. 172800 IN NS b.nic.best. best. 172800 IN NS c.nic.best. best. 172800 IN NS d.nic.best. best. 86400 IN DS ( 13966 8 2 1b34271dc3cac4d1faa279893902bd3330eab9675dab6dba03fd163437e7d12a ) best. 86400 IN DS ( 41279 8 2 d0c266b147e9fa7122215ccca36b23d43407bd2f03b2e3b6e917d350b31aa5fd ) best. 86400 IN RRSIG ( DS 8 1 86400 20260804200000 20260722190000 57780 . NLWyW4MFoLwLQ8oC1WEgSmSBpxjuPPultuduu+D33S36az11nforrPUdHXP6XEkZUMBeMC5XHP6Y RWAyQqIyRYOl589TH8bTn7d/iTobYgXdfdF1J/8Sv/xIPUycrF/9Divsqrwe+wbVOWHeVonQjr3A /TPonkbE95802aoJsyMN4JkSMTMy6PosOhLraJTT3NX2qzi21+5h+2W+Rrs7rNrs78+kpHX7crbe db9vYz477On3nd7san7M0JMmt8yHUC+cP+E9bMcXrYrIu9hSyme8jAZLUwqbJZoUTC7V7DKLhgAU 0kYxcPPj/JGoLC7cEMkqIKf8bXv0Q07xoGdyCA== ) ;; ADDITIONAL SECTION (9 records) a.nic.best. 172800 IN A 194.169.218.109 b.nic.best. 172800 IN A 185.24.64.109 c.nic.best. 172800 IN A 212.18.248.109 d.nic.best. 172800 IN A 212.18.249.109 a.nic.best. 172800 IN AAAA 2001:67c:13cc::1:109 b.nic.best. 172800 IN AAAA 2a04:2b00:13cc::1:109 c.nic.best. 172800 IN AAAA 2a04:2b00:13ee::109 d.nic.best. 172800 IN AAAA 2a04:2b00:13ff::109 ;; { "EDNS-VERSION": 0 }
	Found child zone best

best

	Checking DS between . and best
	Query to e.root-servers.net for best/DS
	Received 416 bytes from 192.203.230.10
	;; Response received from [192.203.230.10] 416 octets ;; HEADER SECTION ;; id = 58613 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 3 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1472, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; best. IN DS ;; ANSWER SECTION (3 records) best. 86400 IN DS ( 13966 8 2 1b34271dc3cac4d1faa279893902bd3330eab9675dab6dba03fd163437e7d12a ) best. 86400 IN DS ( 41279 8 2 d0c266b147e9fa7122215ccca36b23d43407bd2f03b2e3b6e917d350b31aa5fd ) best. 86400 IN RRSIG ( DS 8 1 86400 20260804200000 20260722190000 57780 . NLWyW4MFoLwLQ8oC1WEgSmSBpxjuPPultuduu+D33S36az11nforrPUdHXP6XEkZUMBeMC5XHP6Y RWAyQqIyRYOl589TH8bTn7d/iTobYgXdfdF1J/8Sv/xIPUycrF/9Divsqrwe+wbVOWHeVonQjr3A /TPonkbE95802aoJsyMN4JkSMTMy6PosOhLraJTT3NX2qzi21+5h+2W+Rrs7rNrs78+kpHX7crbe db9vYz477On3nd7san7M0JMmt8yHUC+cP+E9bMcXrYrIu9hSyme8jAZLUwqbJZoUTC7V7DKLhgAU 0kYxcPPj/JGoLC7cEMkqIKf8bXv0Q07xoGdyCA== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 2 DS records for best in the . zone
	DS=13966/SHA-256 has algorithm RSASHA256
	DS=41279/SHA-256 has algorithm RSASHA256
	Found 1 RRSIGs over DS RRset
	`best. 86400 IN RRSIG ( DS 8 1 86400 20260804200000 20260722190000 57780 . NLWyW4MFoLwLQ8oC1WEgSmSBpxjuPPultuduu+D33S36az11nforrPUdHXP6XEkZUMBeMC5XHP6Y RWAyQqIyRYOl589TH8bTn7d/iTobYgXdfdF1J/8Sv/xIPUycrF/9Divsqrwe+wbVOWHeVonQjr3A /TPonkbE95802aoJsyMN4JkSMTMy6PosOhLraJTT3NX2qzi21+5h+2W+Rrs7rNrs78+kpHX7crbe db9vYz477On3nd7san7M0JMmt8yHUC+cP+E9bMcXrYrIu9hSyme8jAZLUwqbJZoUTC7V7DKLhgAU 0kYxcPPj/JGoLC7cEMkqIKf8bXv0Q07xoGdyCA== )`
	RRSIG=57780 and DNSKEY=57780 verifies the DS RRset
	DS=13966/SHA-256 is now in the chain-of-trust
	DS=41279/SHA-256 is now in the chain-of-trust
	`best. 86400 IN DS ( 13966 8 2 1b34271dc3cac4d1faa279893902bd3330eab9675dab6dba03fd163437e7d12a )`
	`best. 86400 IN DS ( 41279 8 2 d0c266b147e9fa7122215ccca36b23d43407bd2f03b2e3b6e917d350b31aa5fd )`
	Query to a.nic.best for best/DNSKEY
	Received 749 bytes from 194.169.218.109
	;; Response received from [194.169.218.109] 749 octets ;; HEADER SECTION ;; id = 2567 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 3 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; best. IN DNSKEY ;; ANSWER SECTION (3 records) best. 3600 IN DNSKEY ( 256 3 8 AwEAAb/79vCZ+bwcZGSp69oacdxcXjGznDHdqtdUbjROueUbLASH/w2BJZ409Q9TFC446M3//G3x 9TAyUb5QYV055NruIDGXl0FeRcsiYk3Zxwk/ruxYF9pqmfpmNIf8BKmY2WshLP227YPxVzJRu08o rh+vKTyrQZHYdYMcJuum+KbN ) ; keytag 56476 best. 3600 IN DNSKEY ( 257 3 8 AwEAAdOIlhvqecTk15i7RyibJJf80yGJfHCcqZKriwL8KMfKBuQwBNz/X5Jj4sBFOAbjAiXm+Zfi vfjDNtbVLJM7PO1ecudEguPqDsb4nDTJtkY1xvJieM5CBka/bXG8v8NM8nkO/yqouUE/mGXAUUR9 HY/KHHLwE+eqv3AWW6cFl5luAgHqiAEZ9V+FGFOkrIXdwxU2sjAd/t6Z+oURG+efLClYlerwxjfR m8BjKDFik6GKDxI21b6S8bEpPogVvstkpjDFeRb2rp92pCj5kR7G2Fn5O/JqqnEQNoa6yyLgLIRT /iWmRjX3hoPzYoA9m2QAWSKxEof8tG2fhJ4VHXArpsU= ) ; keytag 13966 best. 3600 IN RRSIG ( DNSKEY 8 1 3600 20260811083322 20260712070322 13966 best. DFxAwuQvOs6N8iZDivPI98K2+2Un+xumclf8+SkBGzsGL2qjk7cquRTOScBmGD9aTdz816A3PbUw ZNo22yV+1K2KELerDudlNM/GLzdAJJJ3u2KaHfy+jDYEfBau+afB1YUSyjb82Anqp+h4YT93IqhS sz3XtoB4fUWDF0T4IQFxwSUHCPdNNMHbWpa9166wlhBzp3U0zNKZOiTV+A/OHO2xhUxYYrU6q4Fr GRf0qJp/FzNDej512Q5eP6P5j5SKjsZSgtTRMscrd5oUjJf+0rm2AAVL0hwtfGooPidskt2Sx6fm 9Z+hp8rojD6H3s2/IxB4X83H6pHX9eQf5PqadQ== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 2 DNSKEY records for best
	`best. 3600 IN DNSKEY ( 256 3 8 AwEAAb/79vCZ+bwcZGSp69oacdxcXjGznDHdqtdUbjROueUbLASH/w2BJZ409Q9TFC446M3//G3x 9TAyUb5QYV055NruIDGXl0FeRcsiYk3Zxwk/ruxYF9pqmfpmNIf8BKmY2WshLP227YPxVzJRu08o rh+vKTyrQZHYdYMcJuum+KbN ) ; keytag 56476`
	`best. 3600 IN DNSKEY ( 257 3 8 AwEAAdOIlhvqecTk15i7RyibJJf80yGJfHCcqZKriwL8KMfKBuQwBNz/X5Jj4sBFOAbjAiXm+Zfi vfjDNtbVLJM7PO1ecudEguPqDsb4nDTJtkY1xvJieM5CBka/bXG8v8NM8nkO/yqouUE/mGXAUUR9 HY/KHHLwE+eqv3AWW6cFl5luAgHqiAEZ9V+FGFOkrIXdwxU2sjAd/t6Z+oURG+efLClYlerwxjfR m8BjKDFik6GKDxI21b6S8bEpPogVvstkpjDFeRb2rp92pCj5kR7G2Fn5O/JqqnEQNoa6yyLgLIRT /iWmRjX3hoPzYoA9m2QAWSKxEof8tG2fhJ4VHXArpsU= ) ; keytag 13966`
	DNSKEY=13966/SEP is now in the chain-of-trust
	DS=13966/SHA-256 verifies DNSKEY=13966/SEP
	DS=41279/SHA-256 is published, but a corresponding DNSKEY is not
	Found 1 RRSIGs over DNSKEY RRset
	`best. 3600 IN RRSIG ( DNSKEY 8 1 3600 20260811083322 20260712070322 13966 best. DFxAwuQvOs6N8iZDivPI98K2+2Un+xumclf8+SkBGzsGL2qjk7cquRTOScBmGD9aTdz816A3PbUw ZNo22yV+1K2KELerDudlNM/GLzdAJJJ3u2KaHfy+jDYEfBau+afB1YUSyjb82Anqp+h4YT93IqhS sz3XtoB4fUWDF0T4IQFxwSUHCPdNNMHbWpa9166wlhBzp3U0zNKZOiTV+A/OHO2xhUxYYrU6q4Fr GRf0qJp/FzNDej512Q5eP6P5j5SKjsZSgtTRMscrd5oUjJf+0rm2AAVL0hwtfGooPidskt2Sx6fm 9Z+hp8rojD6H3s2/IxB4X83H6pHX9eQf5PqadQ== )`
	RRSIG=13966 and DNSKEY=13966/SEP verifies the DNSKEY RRset
	DNSKEY=56476 is now in the chain-of-trust
	Query to d.nic.best for livedrawsgp.best/A
	Received 587 bytes from 212.18.249.109
	;; Response received from [212.18.249.109] 587 octets ;; HEADER SECTION ;; id = 13304 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 6 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; livedrawsgp.best. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (6 records) livedrawsgp.best. 3600 IN NS meg.ns.cloudflare.com. livedrawsgp.best. 3600 IN NS logan.ns.cloudflare.com. cml1s4hnsek1fv7u0s6ubpa92ifsfi9b.best. 900 IN NSEC3 ( 1 1 0 - cn8bt1knr9pekhbrj4ipep2virvga3uo NS SOA RRSIG DNSKEY NSEC3PARAM ) cml1s4hnsek1fv7u0s6ubpa92ifsfi9b.best. 900 IN RRSIG ( NSEC3 8 2 900 20260803202211 20260704185211 56476 best. WrRByh/Yv+Jlk1S5pF0//2uWTB+tppJ/eQNyQAMJQuVjKjRvuj+CTMLfVz6W6sto02M2JoQ5ku6G naL+XP4eJG7QAhPPKDSxSMvJyQm3e0Ten40a0UslW3nOGYa+7g37o1Iq9Rbfp2auUUYqnG6vlDQB cSdu8JM+/fVAecR8Qus= ) quhcriv7gr46jo3se1ghtlp75938eems.best. 900 IN NSEC3 ( 1 1 0 - quqpsc33rf8jca5210sl46kbas9kf0ro NS DS RRSIG ) quhcriv7gr46jo3se1ghtlp75938eems.best. 900 IN RRSIG ( NSEC3 8 2 900 20260728063107 20260628050107 56476 best. k59NBOsK3iFNjMq9PvLHg5zzwWKLckGpcw3dsmyu+Li6lo0C1Bd4OdaFjIF3PjoxC4mA1crQqERL km3T1aE8ntczsO/ydYGWOUxcsNjZzzr7Uw6eA2wVD0NR9E8E6fxNoewrdTW6ZrMcLPwyBFSxidZ+ PP6ToC3w16KWuEMJlko= ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Query to d.nic.best for livedrawsgp.best/DNSKEY
	Received 587 bytes from 212.18.249.109
	;; Response received from [212.18.249.109] 587 octets ;; HEADER SECTION ;; id = 22152 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 6 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; livedrawsgp.best. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (6 records) livedrawsgp.best. 3600 IN NS logan.ns.cloudflare.com. livedrawsgp.best. 3600 IN NS meg.ns.cloudflare.com. cml1s4hnsek1fv7u0s6ubpa92ifsfi9b.best. 900 IN NSEC3 ( 1 1 0 - cn8bt1knr9pekhbrj4ipep2virvga3uo NS SOA RRSIG DNSKEY NSEC3PARAM ) cml1s4hnsek1fv7u0s6ubpa92ifsfi9b.best. 900 IN RRSIG ( NSEC3 8 2 900 20260803202211 20260704185211 56476 best. WrRByh/Yv+Jlk1S5pF0//2uWTB+tppJ/eQNyQAMJQuVjKjRvuj+CTMLfVz6W6sto02M2JoQ5ku6G naL+XP4eJG7QAhPPKDSxSMvJyQm3e0Ten40a0UslW3nOGYa+7g37o1Iq9Rbfp2auUUYqnG6vlDQB cSdu8JM+/fVAecR8Qus= ) quhcriv7gr46jo3se1ghtlp75938eems.best. 900 IN NSEC3 ( 1 1 0 - quqpsc33rf8jca5210sl46kbas9kf0ro NS DS RRSIG ) quhcriv7gr46jo3se1ghtlp75938eems.best. 900 IN RRSIG ( NSEC3 8 2 900 20260728063107 20260628050107 56476 best. k59NBOsK3iFNjMq9PvLHg5zzwWKLckGpcw3dsmyu+Li6lo0C1Bd4OdaFjIF3PjoxC4mA1crQqERL km3T1aE8ntczsO/ydYGWOUxcsNjZzzr7Uw6eA2wVD0NR9E8E6fxNoewrdTW6ZrMcLPwyBFSxidZ+ PP6ToC3w16KWuEMJlko= ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found child zone livedrawsgp.best

livedrawsgp.best

	Checking DS between best and livedrawsgp.best
	Query to b.nic.best for livedrawsgp.best/DS
	Received 761 bytes from 185.24.64.109
	;; Response received from [185.24.64.109] 761 octets ;; HEADER SECTION ;; id = 53050 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 6 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; livedrawsgp.best. IN DS ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (6 records) cml1s4hnsek1fv7u0s6ubpa92ifsfi9b.best. 900 IN NSEC3 ( 1 1 0 - cn8bt1knr9pekhbrj4ipep2virvga3uo NS SOA RRSIG DNSKEY NSEC3PARAM ) cml1s4hnsek1fv7u0s6ubpa92ifsfi9b.best. 900 IN RRSIG ( NSEC3 8 2 900 20260803202211 20260704185211 56476 best. WrRByh/Yv+Jlk1S5pF0//2uWTB+tppJ/eQNyQAMJQuVjKjRvuj+CTMLfVz6W6sto02M2JoQ5ku6G naL+XP4eJG7QAhPPKDSxSMvJyQm3e0Ten40a0UslW3nOGYa+7g37o1Iq9Rbfp2auUUYqnG6vlDQB cSdu8JM+/fVAecR8Qus= ) best. 900 IN SOA ( ns0.centralnic.net. hostmaster.centralnic.net. 1527252180 ;serial 900 ;refresh 1800 ;retry 6048000 ;expire 3600 ;minimum ) best. 900 IN RRSIG ( SOA 8 1 900 20260821232233 20260722215233 56476 best. bEBa/bNHnXbTtlChT3Fz3r+UyoLoyF3REV+G6K0nvTWTT4JwPnfE7D/uAEYXJkbxhnWzVn7dA01s oaZE3KgdKc5hEdoHRjDFHt6doQ11g7rCobkySpxetUigVsgrpwZhlbpDeQ2uet6Os7CvHfp4/cgK zXe5Kw6uGWtHhSnk9Jw= ) quhcriv7gr46jo3se1ghtlp75938eems.best. 900 IN NSEC3 ( 1 1 0 - quqpsc33rf8jca5210sl46kbas9kf0ro NS DS RRSIG ) quhcriv7gr46jo3se1ghtlp75938eems.best. 900 IN RRSIG ( NSEC3 8 2 900 20260728063107 20260628050107 56476 best. k59NBOsK3iFNjMq9PvLHg5zzwWKLckGpcw3dsmyu+Li6lo0C1Bd4OdaFjIF3PjoxC4mA1crQqERL km3T1aE8ntczsO/ydYGWOUxcsNjZzzr7Uw6eA2wVD0NR9E8E6fxNoewrdTW6ZrMcLPwyBFSxidZ+ PP6ToC3w16KWuEMJlko= ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	No DS records found for livedrawsgp.best in the best zone
	Query to meg.ns.cloudflare.com for livedrawsgp.best/DNSKEY
	Received 108 bytes from 108.162.192.196
	;; Response received from [108.162.192.196] 108 octets ;; HEADER SECTION ;; id = 22479 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 1 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; livedrawsgp.best. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (1 record) livedrawsgp.best. 1800 IN SOA ( logan.ns.cloudflare.com. dns.cloudflare.com. 2407954319 ;serial 10000 ;refresh 2400 ;retry 604800 ;expire 1800 ;minimum ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	No DNSKEY records found
	Query to logan.ns.cloudflare.com for livedrawsgp.best/A
	Received 77 bytes from 108.162.193.198
	;; Response received from [108.162.193.198] 77 octets ;; HEADER SECTION ;; id = 3834 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; livedrawsgp.best. IN A ;; ANSWER SECTION (2 records) livedrawsgp.best. 300 IN A 172.67.171.76 livedrawsgp.best. 300 IN A 104.21.29.36 ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	logan.ns.cloudflare.com is authoritative for livedrawsgp.best
	Query to meg.ns.cloudflare.com for livedrawsgp.best/SOA
	Received 108 bytes from 172.64.32.196
	;; Response received from [172.64.32.196] 108 octets ;; HEADER SECTION ;; id = 50600 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 1 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; livedrawsgp.best. IN SOA ;; ANSWER SECTION (1 record) livedrawsgp.best. 1800 IN SOA ( logan.ns.cloudflare.com. dns.cloudflare.com. 2407954319 ;serial 10000 ;refresh 2400 ;retry 604800 ;expire 1800 ;minimum ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Query to logan.ns.cloudflare.com for livedrawsgp.best/A
	livedrawsgp.best A RR has value 172.67.171.76
	livedrawsgp.best A RR has value 104.21.29.36
	No RRSIGs found

livedrawsgp.best

	Query to meg.ns.cloudflare.com for livedrawsgp.best/A
	Received 77 bytes from 172.64.32.196
	;; Response received from [172.64.32.196] 77 octets ;; HEADER SECTION ;; id = 1872 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; livedrawsgp.best. IN A ;; ANSWER SECTION (2 records) livedrawsgp.best. 300 IN A 104.21.29.36 livedrawsgp.best. 300 IN A 172.67.171.76 ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	meg.ns.cloudflare.com is authoritative for livedrawsgp.best
	Query to meg.ns.cloudflare.com for livedrawsgp.best/A
	livedrawsgp.best A RR has value 104.21.29.36
	livedrawsgp.best A RR has value 172.67.171.76
	No RRSIGs found

Move your mouse over any or symbols for remediation hints.

Want a second opinion? Test livedrawsgp.best at dnsviz.net.

DNSSEC Debugger

↓ Advanced options ↑ Advanced options

Trust Anchor:
Name Servers: