DNSSEC Analyzer

Domain Name:

Time: 2019-12-15 12:45:00 UTC, NTP stratum 4

Analyzing DNSSEC problems for ow.ly

DS=20326/SHA-256 is now in the chain-of-trust

	Checking DS between Trust Anchor and .
	`. IN DS ( 20326 8 2 e06d44b80b8f1d39a95c0b0d7c65d08458e880409bbc683457104237c7f8ec8d )`
	Query to k.root-servers.net for ./DNSKEY
	Received 864 bytes from 193.0.14.129
	;; Answer received from 193.0.14.129 (864 bytes) ;; HEADER SECTION ;; id = 9694 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; . IN DNSKEY ;; ANSWER SECTION (3 records) . 172800 IN DNSKEY ( 256 3 8 AwEAAbPwrxwtOMENWvblQbUFwBllR7ZtXsu9rg/LdyklKs9gU2GQTeOc59XjhuAPZ4WrT09z6YPL +vzIIJqnG3Hiru7hFUQ4pH0qsLNxrsuZrZYmXAKoVa9SXL1Ap0LygwrIugEk1G4v7Rk/Alt1jLUI E+ZymGtSEhIuGQdXrEmj3ffzXY13H42X4Ja3vJTn/WIQOXY7vwHXGDypSh9j0Tt0hknF1yVJCrIp fkhFWihMKNdMzMprD4bV+PDLRA5YSn3OPIeUnRn9qBUCN11LXQKb+W3Jg+m/5xQRQJzJ/qXgDh1+ aN+Mc9AstP29Y/ZLFmF6cKtL2zoUMN5I5QymeSkJJzc= ) ; Key ID = 22545 . 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; Key ID = 20326 . 172800 IN RRSIG ( DNSKEY 8 0 172800 20191231000000 20191210000000 20326 . M6PHO6VOOLVi9f31412BD96l/dWG8WOE+R6Q+KYMr4aJpS/hTZjjs6EDa249B2cjO7QzSD+qxWNT s7enqC1DsEAjeVm0epe3h6TFVBjX76R0MIqYC3+LjgGjyQnpish6mPApIx0ZC8mxewn0GCvC9Gqk 9S7s7IDD8FQWosXQRChqF9M7qkG1NuKvgPvqgpAk3naii0Eajx8N3XiPo8EwVS3yWOct4wcY8B1s fZjvL7mLDAiggGouyxt5PGm9TdnG7eioZPM1LyX1YgDV4/qUKmp7BHhsVKh/nQaR46yxbcpiRz6R nADB991g/+3bgY8dSACfUI0aBFsRT0DHHnMfpg== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found 2 DNSKEY records for .
	`. 172800 IN DNSKEY ( 256 3 8 AwEAAbPwrxwtOMENWvblQbUFwBllR7ZtXsu9rg/LdyklKs9gU2GQTeOc59XjhuAPZ4WrT09z6YPL +vzIIJqnG3Hiru7hFUQ4pH0qsLNxrsuZrZYmXAKoVa9SXL1Ap0LygwrIugEk1G4v7Rk/Alt1jLUI E+ZymGtSEhIuGQdXrEmj3ffzXY13H42X4Ja3vJTn/WIQOXY7vwHXGDypSh9j0Tt0hknF1yVJCrIp fkhFWihMKNdMzMprD4bV+PDLRA5YSn3OPIeUnRn9qBUCN11LXQKb+W3Jg+m/5xQRQJzJ/qXgDh1+ aN+Mc9AstP29Y/ZLFmF6cKtL2zoUMN5I5QymeSkJJzc= ) ; Key ID = 22545`
	`. 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; Key ID = 20326`
	DNSKEY=20326/SEP is now in the chain-of-trust
	DS=20326/SHA-256 verifies DNSKEY=20326/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`. 172800 IN RRSIG ( DNSKEY 8 0 172800 20191231000000 20191210000000 20326 . M6PHO6VOOLVi9f31412BD96l/dWG8WOE+R6Q+KYMr4aJpS/hTZjjs6EDa249B2cjO7QzSD+qxWNT s7enqC1DsEAjeVm0epe3h6TFVBjX76R0MIqYC3+LjgGjyQnpish6mPApIx0ZC8mxewn0GCvC9Gqk 9S7s7IDD8FQWosXQRChqF9M7qkG1NuKvgPvqgpAk3naii0Eajx8N3XiPo8EwVS3yWOct4wcY8B1s fZjvL7mLDAiggGouyxt5PGm9TdnG7eioZPM1LyX1YgDV4/qUKmp7BHhsVKh/nQaR46yxbcpiRz6R nADB991g/+3bgY8dSACfUI0aBFsRT0DHHnMfpg== )`
	RRSIG=20326 and DNSKEY=20326/SEP verifies the DNSKEY RRset
	DNSKEY=22545 is now in the chain-of-trust
	Query to i.root-servers.net for ow.ly/A
	Received 638 bytes from 192.36.148.17
	;; Answer received from 192.36.148.17 (638 bytes) ;; HEADER SECTION ;; id = 53697 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 7 arcount = 9 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; ow.ly. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (7 records) ly. 172800 IN NS ns-ly.afrinic.net. ly. 172800 IN NS pch.ltt.ly. ly. 172800 IN NS dns1.lttnet.net. ly. 172800 IN NS phloem.uoregon.edu. ly. 172800 IN NS dns.lttnet.net. ly. 86400 IN NSEC ma. NS RRSIG NSEC ly. 86400 IN RRSIG ( NSEC 8 1 86400 20191228050000 20191215040000 22545 . KsvrtCXIciqd98kEDDYAZln3RimfqhFhzEe0KGbfjIWRjxACMp2P+dbDZdPtQiGns3OK20/7ULsr L8XotnDQhcR1ahqsLeYTR8ay+/UGVL7Hv/8sHGSBunk+5AM++ZDvew+GQKWctViEPi6jnfIEWLEO oMw0IulYSINiR9dYMZuRMVYI4YAOPxv6MnjA6PPTGQVnLKxjAdDYwTPpHVIVEd5tDoJz06If2Tte JKYC8o4Fycw0buMCZrlTiDSNkRjoPnt6QM9ghXOpLV7TAqta/QIEiHtVPYo7EeLYCcvG/vws3vlA Hehn3e40OEjZZy1dzn+UFkBSbl0n68m0fbNtlA== ) ;; ADDITIONAL SECTION (9 records) dns.lttnet.net. 172800 IN A 62.240.36.9 pch.ltt.ly. 172800 IN A 204.61.216.67 pch.ltt.ly. 172800 IN AAAA 2001:500:14:6067:ad::1 dns1.lttnet.net. 172800 IN A 62.68.42.9 ns-ly.afrinic.net. 172800 IN A 196.216.168.24 ns-ly.afrinic.net. 172800 IN AAAA 2001:43f8:120::24 phloem.uoregon.edu. 172800 IN A 128.223.32.35 phloem.uoregon.edu. 172800 IN AAAA 2001:468:d01:20::80df:2023 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Query to g.root-servers.net for ly/DNSKEY
	Error querying g.root-servers.net/2001:500:12:0:0:0:0:d0d for ly/DNSKEY: 'IPv6 transport disabled'
	Received 635 bytes from 192.112.36.4
	;; Answer received from 192.112.36.4 (635 bytes) ;; HEADER SECTION ;; id = 62913 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 7 arcount = 9 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; ly. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (7 records) ly. 172800 IN NS pch.ltt.ly. ly. 172800 IN NS dns1.lttnet.net. ly. 172800 IN NS ns-ly.afrinic.net. ly. 172800 IN NS phloem.uoregon.edu. ly. 172800 IN NS dns.lttnet.net. ly. 86400 IN NSEC ma. NS RRSIG NSEC ly. 86400 IN RRSIG ( NSEC 8 1 86400 20191228050000 20191215040000 22545 . KsvrtCXIciqd98kEDDYAZln3RimfqhFhzEe0KGbfjIWRjxACMp2P+dbDZdPtQiGns3OK20/7ULsr L8XotnDQhcR1ahqsLeYTR8ay+/UGVL7Hv/8sHGSBunk+5AM++ZDvew+GQKWctViEPi6jnfIEWLEO oMw0IulYSINiR9dYMZuRMVYI4YAOPxv6MnjA6PPTGQVnLKxjAdDYwTPpHVIVEd5tDoJz06If2Tte JKYC8o4Fycw0buMCZrlTiDSNkRjoPnt6QM9ghXOpLV7TAqta/QIEiHtVPYo7EeLYCcvG/vws3vlA Hehn3e40OEjZZy1dzn+UFkBSbl0n68m0fbNtlA== ) ;; ADDITIONAL SECTION (9 records) dns.lttnet.net. 172800 IN A 62.240.36.9 pch.ltt.ly. 172800 IN A 204.61.216.67 dns1.lttnet.net. 172800 IN A 62.68.42.9 ns-ly.afrinic.net. 172800 IN A 196.216.168.24 phloem.uoregon.edu. 172800 IN A 128.223.32.35 pch.ltt.ly. 172800 IN AAAA 2001:500:14:6067:ad::1 ns-ly.afrinic.net. 172800 IN AAAA 2001:43f8:120::24 phloem.uoregon.edu. 172800 IN AAAA 2001:468:d01:20::80df:2023 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found child zone ly

	Checking DS between . and ly
	Query to j.root-servers.net for ly/DS
	Received 703 bytes from 192.58.128.30
	;; Answer received from 192.58.128.30 (703 bytes) ;; HEADER SECTION ;; id = 23567 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 4 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; ly. IN DS ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (4 records) . 86400 IN SOA ( a.root-servers.net. nstld.verisign-grs.com. 2019121500 ;serial 1800 ;refresh 900 ;retry 604800 ;expire 86400 ;minimum ) . 86400 IN RRSIG ( SOA 8 0 86400 20191228050000 20191215040000 22545 . MN1/SnlqXxPPBPoMsrbGIZCdpXlqFy64CCOay8JSptBvuTk/TjOm0PI6PYxGkjk9wTCveHgdpRmn uFSWiUaEkEOtuwP/ejmZUsUHwd6tCj1ycCAQve51E0+EGE9V3Z9yXdSPGAgKyVAX4XOW8uMQOWFx 2f41SV3UGGCmlav9aDOfGNdyL1N02fki/QQ+Q0McZx1WdAGfhW6QPso98g6zi0bw1X+8d0qaZajl UCemIIAsggKKjRA7DNh/6F5isKlrwia4n8fAd0fb+FAaZIt4fMzogG5aIEaOofJoFmxYBzFM/KWY 6dIBbHB5APfkzfb4Oki0oJXSPXo0GB/NT0baDA== ) ly. 86400 IN NSEC ma. NS RRSIG NSEC ly. 86400 IN RRSIG ( NSEC 8 1 86400 20191228050000 20191215040000 22545 . KsvrtCXIciqd98kEDDYAZln3RimfqhFhzEe0KGbfjIWRjxACMp2P+dbDZdPtQiGns3OK20/7ULsr L8XotnDQhcR1ahqsLeYTR8ay+/UGVL7Hv/8sHGSBunk+5AM++ZDvew+GQKWctViEPi6jnfIEWLEO oMw0IulYSINiR9dYMZuRMVYI4YAOPxv6MnjA6PPTGQVnLKxjAdDYwTPpHVIVEd5tDoJz06If2Tte JKYC8o4Fycw0buMCZrlTiDSNkRjoPnt6QM9ghXOpLV7TAqta/QIEiHtVPYo7EeLYCcvG/vws3vlA Hehn3e40OEjZZy1dzn+UFkBSbl0n68m0fbNtlA== ) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	No DS records found for ly in the . zone
	Query to pch.ltt.ly for ly/DNSKEY
	Error querying pch.ltt.ly/2001:500:14:6067:ad:0:0:1 for ly/DNSKEY: 'IPv6 transport disabled'
	Received 89 bytes from 204.61.216.67
	;; Answer received from 204.61.216.67 (89 bytes) ;; HEADER SECTION ;; id = 4966 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 1 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; ly. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (1 record) ly. 600 IN SOA ( dns.lttnet.net. khaleds.lttnet.net. 2019121554 ;serial 3600 ;refresh 900 ;retry 2419200 ;expire 600 ;minimum ) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	No DNSKEY records found
	Query to phloem.uoregon.edu for ow.ly/A
	Error querying phloem.uoregon.edu/2001:468:d01:20:0:0:80df:2023 for ow.ly/A: 'IPv6 transport disabled'
	Received 174 bytes from 128.223.32.35
	;; Answer received from 128.223.32.35 (174 bytes) ;; HEADER SECTION ;; id = 12849 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 4 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; ow.ly. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (4 records) ow.ly. 172800 IN NS ns-133.awsdns-16.com. ow.ly. 172800 IN NS ns-1603.awsdns-08.co.uk. ow.ly. 172800 IN NS ns-795.awsdns-35.net. ow.ly. 172800 IN NS ns-1454.awsdns-53.org. ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Query to pch.ltt.ly for ow.ly/DNSKEY
	Received 174 bytes from 204.61.216.67
	;; Answer received from 204.61.216.67 (174 bytes) ;; HEADER SECTION ;; id = 42769 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 4 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; ow.ly. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (4 records) ow.ly. 172800 IN NS ns-1454.awsdns-53.org. ow.ly. 172800 IN NS ns-795.awsdns-35.net. ow.ly. 172800 IN NS ns-1603.awsdns-08.co.uk. ow.ly. 172800 IN NS ns-133.awsdns-16.com. ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found child zone ow.ly

ow.ly

	Checking DS between ly and ow.ly
	Query to dns1.lttnet.net for ow.ly/DS
	Received 92 bytes from 62.68.42.9
	;; Answer received from 62.68.42.9 (92 bytes) ;; HEADER SECTION ;; id = 30944 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 1 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; ow.ly. IN DS ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (1 record) ly. 600 IN SOA ( dns.lttnet.net. khaleds.lttnet.net. 2019121558 ;serial 3600 ;refresh 900 ;retry 2419200 ;expire 600 ;minimum ) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	No DS records found for ow.ly in the ly zone
	Query to ns-133.awsdns-16.com for ow.ly/DNSKEY
	Error querying ns-133.awsdns-16.com/2600:9000:5300:8500:0:0:0:1 for ow.ly/DNSKEY: 'IPv6 transport disabled'
	Received 118 bytes from 205.251.192.133
	;; Answer received from 205.251.192.133 (118 bytes) ;; HEADER SECTION ;; id = 47156 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 1 arcount = 1 ;; do = 0 ;; EDNS version 0 ;; flags: 0000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; ow.ly. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (1 record) ow.ly. 900 IN SOA ( ns-795.awsdns-35.net. awsdns-hostmaster.amazon.com. 1 ;serial 7200 ;refresh 900 ;retry 1209600 ;expire 86400 ;minimum ) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 0000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	No DNSKEY records found
	Query to ns-1603.awsdns-08.co.uk for ow.ly/A
	Error querying ns-1603.awsdns-08.co.uk/2600:9000:5306:4300:0:0:0:1 for ow.ly/A: 'IPv6 transport disabled'
	Received 270 bytes from 205.251.198.67
	;; Answer received from 205.251.198.67 (270 bytes) ;; HEADER SECTION ;; id = 14592 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 6 nscount = 4 arcount = 1 ;; do = 0 ;; EDNS version 0 ;; flags: 0000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; ow.ly. IN A ;; ANSWER SECTION (6 records) ow.ly. 60 IN A 54.67.57.56 ow.ly. 60 IN A 54.183.130.144 ow.ly. 60 IN A 54.183.132.164 ow.ly. 60 IN A 54.67.120.65 ow.ly. 60 IN A 54.183.131.91 ow.ly. 60 IN A 54.67.62.204 ;; AUTHORITY SECTION (4 records) ow.ly. 172800 IN NS ns-133.awsdns-16.com. ow.ly. 172800 IN NS ns-1454.awsdns-53.org. ow.ly. 172800 IN NS ns-1603.awsdns-08.co.uk. ow.ly. 172800 IN NS ns-795.awsdns-35.net. ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 0000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	ow.ly is authoritative for ow.ly
	Query to ns-1454.awsdns-53.org for ow.ly/SOA
	Received 235 bytes from 205.251.197.174
	;; Answer received from 205.251.197.174 (235 bytes) ;; HEADER SECTION ;; id = 19413 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 1 nscount = 4 arcount = 1 ;; do = 0 ;; EDNS version 0 ;; flags: 0000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; ow.ly. IN SOA ;; ANSWER SECTION (1 record) ow.ly. 900 IN SOA ( ns-795.awsdns-35.net. awsdns-hostmaster.amazon.com. 1 ;serial 7200 ;refresh 900 ;retry 1209600 ;expire 86400 ;minimum ) ;; AUTHORITY SECTION (4 records) ow.ly. 172800 IN NS ns-133.awsdns-16.com. ow.ly. 172800 IN NS ns-1454.awsdns-53.org. ow.ly. 172800 IN NS ns-1603.awsdns-08.co.uk. ow.ly. 172800 IN NS ns-795.awsdns-35.net. ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 0000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Query to ns-1603.awsdns-08.co.uk for ow.ly/SOA
	Error querying ns-1603.awsdns-08.co.uk/2600:9000:5306:4300:0:0:0:1 for ow.ly/SOA: 'IPv6 transport disabled'
	Received 235 bytes from 205.251.198.67
	;; Answer received from 205.251.198.67 (235 bytes) ;; HEADER SECTION ;; id = 59501 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 1 nscount = 4 arcount = 1 ;; do = 0 ;; EDNS version 0 ;; flags: 0000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; ow.ly. IN SOA ;; ANSWER SECTION (1 record) ow.ly. 900 IN SOA ( ns-795.awsdns-35.net. awsdns-hostmaster.amazon.com. 1 ;serial 7200 ;refresh 900 ;retry 1209600 ;expire 86400 ;minimum ) ;; AUTHORITY SECTION (4 records) ow.ly. 172800 IN NS ns-133.awsdns-16.com. ow.ly. 172800 IN NS ns-1454.awsdns-53.org. ow.ly. 172800 IN NS ns-1603.awsdns-08.co.uk. ow.ly. 172800 IN NS ns-795.awsdns-35.net. ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 0000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Query to ns-795.awsdns-35.net for ow.ly/SOA
	Received 235 bytes from 205.251.195.27
	;; Answer received from 205.251.195.27 (235 bytes) ;; HEADER SECTION ;; id = 3964 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 1 nscount = 4 arcount = 1 ;; do = 0 ;; EDNS version 0 ;; flags: 0000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; ow.ly. IN SOA ;; ANSWER SECTION (1 record) ow.ly. 900 IN SOA ( ns-795.awsdns-35.net. awsdns-hostmaster.amazon.com. 1 ;serial 7200 ;refresh 900 ;retry 1209600 ;expire 86400 ;minimum ) ;; AUTHORITY SECTION (4 records) ow.ly. 172800 IN NS ns-133.awsdns-16.com. ow.ly. 172800 IN NS ns-1454.awsdns-53.org. ow.ly. 172800 IN NS ns-1603.awsdns-08.co.uk. ow.ly. 172800 IN NS ns-795.awsdns-35.net. ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 0000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Query to ns-133.awsdns-16.com for ow.ly/SOA
	Received 235 bytes from 205.251.192.133
	;; Answer received from 205.251.192.133 (235 bytes) ;; HEADER SECTION ;; id = 9736 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 1 nscount = 4 arcount = 1 ;; do = 0 ;; EDNS version 0 ;; flags: 0000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; ow.ly. IN SOA ;; ANSWER SECTION (1 record) ow.ly. 900 IN SOA ( ns-795.awsdns-35.net. awsdns-hostmaster.amazon.com. 1 ;serial 7200 ;refresh 900 ;retry 1209600 ;expire 86400 ;minimum ) ;; AUTHORITY SECTION (4 records) ow.ly. 172800 IN NS ns-133.awsdns-16.com. ow.ly. 172800 IN NS ns-1454.awsdns-53.org. ow.ly. 172800 IN NS ns-1603.awsdns-08.co.uk. ow.ly. 172800 IN NS ns-795.awsdns-35.net. ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 0000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Query to ns-1603.awsdns-08.co.uk for ow.ly/A
	Received 270 bytes from 205.251.198.67
	;; Answer received from 205.251.198.67 (270 bytes) ;; HEADER SECTION ;; id = 39646 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 6 nscount = 4 arcount = 1 ;; do = 0 ;; EDNS version 0 ;; flags: 0000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; ow.ly. IN A ;; ANSWER SECTION (6 records) ow.ly. 60 IN A 54.67.62.204 ow.ly. 60 IN A 54.67.57.56 ow.ly. 60 IN A 54.67.120.65 ow.ly. 60 IN A 54.183.132.164 ow.ly. 60 IN A 54.183.131.91 ow.ly. 60 IN A 54.183.130.144 ;; AUTHORITY SECTION (4 records) ow.ly. 172800 IN NS ns-133.awsdns-16.com. ow.ly. 172800 IN NS ns-1454.awsdns-53.org. ow.ly. 172800 IN NS ns-1603.awsdns-08.co.uk. ow.ly. 172800 IN NS ns-795.awsdns-35.net. ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 0000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	ow.ly A RR has value 54.67.62.204
	ow.ly A RR has value 54.67.57.56
	ow.ly A RR has value 54.67.120.65
	ow.ly A RR has value 54.183.132.164
	ow.ly A RR has value 54.183.131.91
	ow.ly A RR has value 54.183.130.144
	No RRSIGs found

Move your mouse over any or symbols for remediation hints.

Want a second opinion? Test ow.ly at dnsviz.net.

DNSSEC Analyzer

↓ Advanced options ↑ Advanced options

Trust Anchor:
Name Servers: