DNSSEC Debugger

Back to Verisign Labs Tools

Domain Name:

Detail: more(+) / less(-)

Time: 2026-09-14 03:35:55 UTC

Analyzing DNSSEC problems for ow.ly

DS=20326/SHA-256 is now in the chain-of-trust

DS=38696/SHA-256 is now in the chain-of-trust

	Checking DS between Trust Anchor and .
	`. IN DS ( 20326 8 2 e06d44b80b8f1d39a95c0b0d7c65d08458e880409bbc683457104237c7f8ec8d )`
	`. IN DS ( 38696 8 2 683d2d0acb8c9b712a1948b27f741219298d0a450d612c483af444a4c0fb2b16 )`
	Query to c.root-servers.net for ./DNSKEY
	Received 1139 bytes from 192.33.4.12
	;; Response received from [192.33.4.12] 1139 octets ;; HEADER SECTION ;; id = 40823 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 4 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; . IN DNSKEY ;; ANSWER SECTION (4 records) . 172800 IN DNSKEY ( 256 3 8 AwEAAeCYD6Z7WWKVLeuWgowKP+3g+Gs1cnLKq7a3CaQxQpv8bfuFVI0WnG33qaSH/Mw9IBgifrdz f4XY/DQLnyBJ9MfaOyAWuEaEmYJ+GQPiwVVfstGwSA1McfFJUttTgq2Huu74KARhtA8wPo/N3Xcy YQtNhz+qCM5NBb3ecx/naw6sYab9LxS6f2cU0q03++BP5Ks0Uef8WJCa/1izCYE+vMkwoltV+tEN a3hpXiZ7jle/xdgaZrPi5ZGmyLVI34g1XVYrNlsCCTmNvFQIfzW5STFQFsQpizczyFn9r3LzSxxP CNwdlCG84bER0BmdwqbF6Tanv+FxMOavrahkj4wIy5k= ) ; keytag 57780 . 172800 IN DNSKEY ( 257 3 8 AwEAAa96jeuknZlaeSrvyAJj6ZHv28hhOKkx3rLGXVaC6rXTsDc449/cidltpkyGwCJNnOAlFNKF 2jBosZBU5eeHspaQWOmOElZsjICMQMC3aeHbGiShvZsx4wMYSjH8e7Vrhbu6irwCzVBApESjbUdp WWmEnhathWu1jo+siFUiRAAxm9qyJNg/wOZqqzL/dL/q8PkcRU5oUKEpUge71M3ej2/7CPqpdVwu MoTvoB+ZOT4YeGyxMvHmbrxlFzGOHOijtzN+u1TQNatX2XBuzZNQ1K+s2CXkPIZo7s6JgZyvaBev YtxPvYLw4z9mR7K2vaF18UYH9Z9GNUUeayffKC73PYc= ) ; keytag 38696 . 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; keytag 20326 . 172800 IN RRSIG ( DNSKEY 8 0 172800 20260930000000 20260909000000 20326 . oYSvB9Md+++cwEvRgKH+7O3u5mSWT8tgQ6zxO+A22wU/xfavUVWD6q0A4Tpr1ez840UhnuYEZll3 AoYA+Gv06zGip99UY71evaZ/cSG04Ipz2t6erwiKMbMVQDf4Cx25g28PTJjGuFG62BQxN9GOF8aT F+4KgY3/6kAoLiGVtALiW9d+Pa5LvbLicTif3qvus0u6c63BJ22rK8RXEKaXFD93TlyLprBR80Zv 4smHeqO5hVuVtwxq7/daXiv8laEVQfs9Joq/yjPxz7vaFbaJn00/LgpbpLG6r+y2GteVTLrtvT3v FrxfNH9b9NeYogbF7eUFujmm9TukkkjVxp5tKg== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 3 DNSKEY records for .
	`. 172800 IN DNSKEY ( 256 3 8 AwEAAeCYD6Z7WWKVLeuWgowKP+3g+Gs1cnLKq7a3CaQxQpv8bfuFVI0WnG33qaSH/Mw9IBgifrdz f4XY/DQLnyBJ9MfaOyAWuEaEmYJ+GQPiwVVfstGwSA1McfFJUttTgq2Huu74KARhtA8wPo/N3Xcy YQtNhz+qCM5NBb3ecx/naw6sYab9LxS6f2cU0q03++BP5Ks0Uef8WJCa/1izCYE+vMkwoltV+tEN a3hpXiZ7jle/xdgaZrPi5ZGmyLVI34g1XVYrNlsCCTmNvFQIfzW5STFQFsQpizczyFn9r3LzSxxP CNwdlCG84bER0BmdwqbF6Tanv+FxMOavrahkj4wIy5k= ) ; keytag 57780`
	`. 172800 IN DNSKEY ( 257 3 8 AwEAAa96jeuknZlaeSrvyAJj6ZHv28hhOKkx3rLGXVaC6rXTsDc449/cidltpkyGwCJNnOAlFNKF 2jBosZBU5eeHspaQWOmOElZsjICMQMC3aeHbGiShvZsx4wMYSjH8e7Vrhbu6irwCzVBApESjbUdp WWmEnhathWu1jo+siFUiRAAxm9qyJNg/wOZqqzL/dL/q8PkcRU5oUKEpUge71M3ej2/7CPqpdVwu MoTvoB+ZOT4YeGyxMvHmbrxlFzGOHOijtzN+u1TQNatX2XBuzZNQ1K+s2CXkPIZo7s6JgZyvaBev YtxPvYLw4z9mR7K2vaF18UYH9Z9GNUUeayffKC73PYc= ) ; keytag 38696`
	`. 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; keytag 20326`
	DNSKEY=38696/SEP is now in the chain-of-trust
	DS=38696/SHA-256 verifies DNSKEY=38696/SEP
	DNSKEY=20326/SEP is now in the chain-of-trust
	DS=20326/SHA-256 verifies DNSKEY=20326/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`. 172800 IN RRSIG ( DNSKEY 8 0 172800 20260930000000 20260909000000 20326 . oYSvB9Md+++cwEvRgKH+7O3u5mSWT8tgQ6zxO+A22wU/xfavUVWD6q0A4Tpr1ez840UhnuYEZll3 AoYA+Gv06zGip99UY71evaZ/cSG04Ipz2t6erwiKMbMVQDf4Cx25g28PTJjGuFG62BQxN9GOF8aT F+4KgY3/6kAoLiGVtALiW9d+Pa5LvbLicTif3qvus0u6c63BJ22rK8RXEKaXFD93TlyLprBR80Zv 4smHeqO5hVuVtwxq7/daXiv8laEVQfs9Joq/yjPxz7vaFbaJn00/LgpbpLG6r+y2GteVTLrtvT3v FrxfNH9b9NeYogbF7eUFujmm9TukkkjVxp5tKg== )`
	RRSIG=20326 and DNSKEY=20326/SEP verifies the DNSKEY RRset
	DNSKEY=57780 is now in the chain-of-trust
	Query to e.root-servers.net for ow.ly/A
	Received 662 bytes from 192.203.230.10
	;; Response received from [192.203.230.10] 662 octets ;; HEADER SECTION ;; id = 61908 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 7 arcount = 9 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1472, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; ow.ly. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (7 records) ly. 172800 IN NS dns.lttnet.net. ly. 172800 IN NS pch.ltt.ly. ly. 172800 IN NS dns1.lttnet.net. ly. 172800 IN NS ns-ly.afrinic.net. ly. 172800 IN NS phloem.uoregon.edu. ly. 86400 IN DS ( 62311 8 2 08e9ac56f605a728d048c803787ab044b0c81caea2031eac9edea77150a1bdbe ) ly. 86400 IN RRSIG ( DS 8 1 86400 20260926170000 20260913160000 57780 . u8+9BUCw5NyAk5jdAy9/PD6P3ecXqV6XW+55/tdyk6o3QybcSnMoowFYfWgZdxv3O0QgF5jErvrq 1HErkptUpTKmuBCqSDq1PdRYzOXZA/ikvpwNvqMbFN+Tf86aruxjUPEqvkwkSTP/Z6wKgWClsGS4 aUB9U1i+EznDPazsspYgDuEwWIdrGDLR3vyARdhO2FsMsIg70RNq6MiviTA8vAJmpXZfP4b8BaFk r+UrNIeTgHR1sf4IORCbf47G63IOF+gfi0gh231jYHu8lNtm6JW/9p89bvWqWbO1Udp6stgssw3Z JKtX4NyZbBI1g/ZuQx0735Kfwi/5t0/Cd16D2Q== ) ;; ADDITIONAL SECTION (9 records) dns.lttnet.net. 172800 IN A 62.240.36.9 pch.ltt.ly. 172800 IN A 204.61.216.67 pch.ltt.ly. 172800 IN AAAA 2001:500:14:6067:ad::1 dns1.lttnet.net. 172800 IN A 62.68.42.9 ns-ly.afrinic.net. 172800 IN A 196.216.168.24 ns-ly.afrinic.net. 172800 IN AAAA 2001:43f8:120::24 phloem.uoregon.edu. 172800 IN A 128.223.32.35 phloem.uoregon.edu. 172800 IN AAAA 2001:468:d01:20::80df:2023 ;; { "EDNS-VERSION": 0 }
	Query to b.root-servers.net for ly/DNSKEY
	Received 671 bytes from 170.247.170.2
	;; Response received from [170.247.170.2] 671 octets ;; HEADER SECTION ;; id = 37233 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 7 arcount = 9 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; ly. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (7 records) ly. 172800 IN NS dns.lttnet.net. ly. 172800 IN NS pch.ltt.ly. ly. 172800 IN NS dns1.lttnet.net. ly. 172800 IN NS ns-ly.afrinic.net. ly. 172800 IN NS phloem.uoregon.edu. ly. 86400 IN DS ( 62311 8 2 08e9ac56f605a728d048c803787ab044b0c81caea2031eac9edea77150a1bdbe ) ly. 86400 IN RRSIG ( DS 8 1 86400 20260926170000 20260913160000 57780 . u8+9BUCw5NyAk5jdAy9/PD6P3ecXqV6XW+55/tdyk6o3QybcSnMoowFYfWgZdxv3O0QgF5jErvrq 1HErkptUpTKmuBCqSDq1PdRYzOXZA/ikvpwNvqMbFN+Tf86aruxjUPEqvkwkSTP/Z6wKgWClsGS4 aUB9U1i+EznDPazsspYgDuEwWIdrGDLR3vyARdhO2FsMsIg70RNq6MiviTA8vAJmpXZfP4b8BaFk r+UrNIeTgHR1sf4IORCbf47G63IOF+gfi0gh231jYHu8lNtm6JW/9p89bvWqWbO1Udp6stgssw3Z JKtX4NyZbBI1g/ZuQx0735Kfwi/5t0/Cd16D2Q== ) ;; ADDITIONAL SECTION (9 records) pch.ltt.ly. 172800 IN A 204.61.216.67 pch.ltt.ly. 172800 IN AAAA 2001:500:14:6067:ad::1 dns.lttnet.net. 172800 IN A 62.240.36.9 dns1.lttnet.net. 172800 IN A 62.68.42.9 ns-ly.afrinic.net. 172800 IN A 196.216.168.24 ns-ly.afrinic.net. 172800 IN AAAA 2001:43f8:120::24 phloem.uoregon.edu. 172800 IN A 128.223.32.35 phloem.uoregon.edu. 172800 IN AAAA 2001:468:d01:20::80df:2023 ;; { "EDNS-VERSION": 0 }
	Found child zone ly

	Checking DS between . and ly
	Query to a.root-servers.net for ly/DS
	Received 366 bytes from 198.41.0.4
	;; Response received from [198.41.0.4] 366 octets ;; HEADER SECTION ;; id = 19527 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; ly. IN DS ;; ANSWER SECTION (2 records) ly. 86400 IN DS ( 62311 8 2 08e9ac56f605a728d048c803787ab044b0c81caea2031eac9edea77150a1bdbe ) ly. 86400 IN RRSIG ( DS 8 1 86400 20260926170000 20260913160000 57780 . u8+9BUCw5NyAk5jdAy9/PD6P3ecXqV6XW+55/tdyk6o3QybcSnMoowFYfWgZdxv3O0QgF5jErvrq 1HErkptUpTKmuBCqSDq1PdRYzOXZA/ikvpwNvqMbFN+Tf86aruxjUPEqvkwkSTP/Z6wKgWClsGS4 aUB9U1i+EznDPazsspYgDuEwWIdrGDLR3vyARdhO2FsMsIg70RNq6MiviTA8vAJmpXZfP4b8BaFk r+UrNIeTgHR1sf4IORCbf47G63IOF+gfi0gh231jYHu8lNtm6JW/9p89bvWqWbO1Udp6stgssw3Z JKtX4NyZbBI1g/ZuQx0735Kfwi/5t0/Cd16D2Q== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 1 DS records for ly in the . zone
	DS=62311/SHA-256 has algorithm RSASHA256
	Found 1 RRSIGs over DS RRset
	`ly. 86400 IN RRSIG ( DS 8 1 86400 20260926170000 20260913160000 57780 . u8+9BUCw5NyAk5jdAy9/PD6P3ecXqV6XW+55/tdyk6o3QybcSnMoowFYfWgZdxv3O0QgF5jErvrq 1HErkptUpTKmuBCqSDq1PdRYzOXZA/ikvpwNvqMbFN+Tf86aruxjUPEqvkwkSTP/Z6wKgWClsGS4 aUB9U1i+EznDPazsspYgDuEwWIdrGDLR3vyARdhO2FsMsIg70RNq6MiviTA8vAJmpXZfP4b8BaFk r+UrNIeTgHR1sf4IORCbf47G63IOF+gfi0gh231jYHu8lNtm6JW/9p89bvWqWbO1Udp6stgssw3Z JKtX4NyZbBI1g/ZuQx0735Kfwi/5t0/Cd16D2Q== )`
	RRSIG=57780 and DNSKEY=57780 verifies the DS RRset
	DS=62311/SHA-256 is now in the chain-of-trust
	`ly. 86400 IN DS ( 62311 8 2 08e9ac56f605a728d048c803787ab044b0c81caea2031eac9edea77150a1bdbe )`
	Query to ns-ly.afrinic.net for ly/DNSKEY
	Received 1385 bytes from 196.216.168.24
	;; Response received from [196.216.168.24] 1385 octets ;; HEADER SECTION ;; id = 34716 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 3 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; ly. IN DNSKEY ;; ANSWER SECTION (3 records) ly. 172800 IN DNSKEY ( 256 3 8 AwEAAbaer2VCPAG1aNyETPSC03BQOBygW4cvB69DAxFQ65R7qzTKE7lmjHM3sQle/6FlMJZUeDce nUDQmO5dxWCTPwPMuDDzPIQBDbmbNDUSPwCj10WyUtcRfJW8ypkoVvfMfYNLKlUHR3n1BT8dr6xx R1MlC7u9KNcO+o2YEIKiS8e1wy3JUdKk9QWnNduPE2JrfUAjEc3L014Y6iVm5mKBOCcKVYjdQZU/ 7zL2Q+Wt5BlHOx8MuApIHGf56sc+eIlWRANiN9upmGPltTPGRcalp0MbgYcYYjJ9ObcjKAX+vo8N 5RhvT1rOkmKCnlfOifL+3BbzXEa5ro1ZgzzhkRFWHMM= ) ; keytag 29979 ly. 172800 IN DNSKEY ( 257 3 8 AwEAAcbhsGvQrDj3AA1GU31NNkDhJe+ghg7C+sHdX/gnBpFWMohDkZIXLVPTZ7i+6uHktDguiIIm S+X1F8l6vBguMUeLn82zwtiY05SPDGezNavkDxp9QkdANVpOhvLruoCOAtLHKNhUwPvdk21ZkTau ZYctCBNRXs5r7/8mmbg0O9O1qouP3KovP6Oo7N2VhpzfaqR0zRRYpvTt0oqabTplbVYihU7CxxgX MY5WLSftHV7faedrbPRjgesFELLykxQWC8TPZ9XnqzD9mUkpDjjz2bfgQKaVdOtu6Q0MH7OF0J3g 58NL6tATmj3+gN0vf1nbR515CVsapOOEVt7Rl0rrPkvb2pSZXfR65BGDVJMA1rRPCW2ZL1x2sU+t rVFv1eRonA67LYipR2I9+wy71OWuiTpxjG74EvlDRMYVMPmJo4AoDo1v5ZpLN9yDH5FyLV2Cg+IX NXO9jOstxWIjK3xkhbDCr8LcKU7p9JL44WhM6D+dSBqesyGGW97s2pUUxIEL0FnwO5R56vhvRmDy 5iVIw/iYx7+RpeJypXjIIBS2lniZ3SNdFDeuSQOSn+owOvccbFNJcDBBFpfBBerukV+LgN3Z/Q2z FWG9SNwVoQapYM80MB/85RMgN0CO/wvqUitdlnsCOnfYgGw+4tS3LWh5kw4SIMUB0YdlhJ3BUNhF f+F1 ) ; keytag 62311 ly. 172800 IN RRSIG ( DNSKEY 8 1 172800 20260923180000 20260906180000 62311 ly. OAyVVf2CnSLDCtbnfxTzhLBal1/f3vTG8f/82VRfaTAWEqOg2KT0Ma/b27gROW8UBfZRrxsxH/1Q p82sswo34yvPF+kmjqE1eEARI8FoyESzy6Dq4gmj2R3u2Ez2EvYaHXOHqmu/LWsjjbYJ+IxGvmWJ jMW4CLQRRWjRiBdmOYAMIbtZcUH59x+o2aCz15JZQMPPtpFlCjvYVlcIgB6F9gjJpvuy/c6EqJoa FhJao0QoRJr2HhkT1F6jRs7fhpLczdwcK4AW0GML1NA/RV4vJ5A1TVKW4CTYf34qvqDa0AqERLlv XMDCay0ohTMJ4odasP0JL03MwTc/38C2+Qk204iYbCFZRNOm3JmP5rAi9DcbUs8tyfFU5sveIudl NNfB7Yr2iLWMn9ePqhCwBf+/kn1i3+lYx0rTroPAA6tEF6wCqPeEqRRiFZd33tgZeOqXADxa1f8V 8B0ouNyW1LXRMqY2RV57X9oBxz5KS96oY3Rb2iS2q4Ps8GVncBsp5N3LfWJ3HThdb2UTgEX2SiMg zTSwysX792ilsHpFfgdZ+/cMiH6QG4LD1jHo+3ov8ydgdbtjxNKlBP0YgeVoIAtVtfkkCSo+6cSZ V4+j72bGoJ7JJGWbwxAMaJqjv2ssOhDHDpub9tAqEpLK8CGWJ0Tf4wQAF2ZgaKmYqnoKwD7+tus= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 2 DNSKEY records for ly
	`ly. 172800 IN DNSKEY ( 256 3 8 AwEAAbaer2VCPAG1aNyETPSC03BQOBygW4cvB69DAxFQ65R7qzTKE7lmjHM3sQle/6FlMJZUeDce nUDQmO5dxWCTPwPMuDDzPIQBDbmbNDUSPwCj10WyUtcRfJW8ypkoVvfMfYNLKlUHR3n1BT8dr6xx R1MlC7u9KNcO+o2YEIKiS8e1wy3JUdKk9QWnNduPE2JrfUAjEc3L014Y6iVm5mKBOCcKVYjdQZU/ 7zL2Q+Wt5BlHOx8MuApIHGf56sc+eIlWRANiN9upmGPltTPGRcalp0MbgYcYYjJ9ObcjKAX+vo8N 5RhvT1rOkmKCnlfOifL+3BbzXEa5ro1ZgzzhkRFWHMM= ) ; keytag 29979`
	ly. 172800 IN DNSKEY ( 257 3 8 AwEAAcbhsGvQrDj3AA1GU31NNkDhJe+ghg7C+sHdX/gnBpFWMohDkZIXLVPTZ7i+6uHktDguiIIm S+X1F8l6vBguMUeLn82zwtiY05SPDGezNavkDxp9QkdANVpOhvLruoCOAtLHKNhUwPvdk21ZkTau ZYctCBNRXs5r7/8mmbg0O9O1qouP3KovP6Oo7N2VhpzfaqR0zRRYpvTt0oqabTplbVYihU7CxxgX MY5WLSftHV7faedrbPRjgesFELLykxQWC8TPZ9XnqzD9mUkpDjjz2bfgQKaVdOtu6Q0MH7OF0J3g 58NL6tATmj3+gN0vf1nbR515CVsapOOEVt7Rl0rrPkvb2pSZXfR65BGDVJMA1rRPCW2ZL1x2sU+t rVFv1eRonA67LYipR2I9+wy71OWuiTpxjG74EvlDRMYVMPmJo4AoDo1v5ZpLN9yDH5FyLV2Cg+IX NXO9jOstxWIjK3xkhbDCr8LcKU7p9JL44WhM6D+dSBqesyGGW97s2pUUxIEL0FnwO5R56vhvRmDy 5iVIw/iYx7+RpeJypXjIIBS2lniZ3SNdFDeuSQOSn+owOvccbFNJcDBBFpfBBerukV+LgN3Z/Q2z FWG9SNwVoQapYM80MB/85RMgN0CO/wvqUitdlnsCOnfYgGw+4tS3LWh5kw4SIMUB0YdlhJ3BUNhF f+F1 ) ; keytag 62311
	DNSKEY=62311/SEP is now in the chain-of-trust
	DS=62311/SHA-256 verifies DNSKEY=62311/SEP
	Found 1 RRSIGs over DNSKEY RRset
	ly. 172800 IN RRSIG ( DNSKEY 8 1 172800 20260923180000 20260906180000 62311 ly. OAyVVf2CnSLDCtbnfxTzhLBal1/f3vTG8f/82VRfaTAWEqOg2KT0Ma/b27gROW8UBfZRrxsxH/1Q p82sswo34yvPF+kmjqE1eEARI8FoyESzy6Dq4gmj2R3u2Ez2EvYaHXOHqmu/LWsjjbYJ+IxGvmWJ jMW4CLQRRWjRiBdmOYAMIbtZcUH59x+o2aCz15JZQMPPtpFlCjvYVlcIgB6F9gjJpvuy/c6EqJoa FhJao0QoRJr2HhkT1F6jRs7fhpLczdwcK4AW0GML1NA/RV4vJ5A1TVKW4CTYf34qvqDa0AqERLlv XMDCay0ohTMJ4odasP0JL03MwTc/38C2+Qk204iYbCFZRNOm3JmP5rAi9DcbUs8tyfFU5sveIudl NNfB7Yr2iLWMn9ePqhCwBf+/kn1i3+lYx0rTroPAA6tEF6wCqPeEqRRiFZd33tgZeOqXADxa1f8V 8B0ouNyW1LXRMqY2RV57X9oBxz5KS96oY3Rb2iS2q4Ps8GVncBsp5N3LfWJ3HThdb2UTgEX2SiMg zTSwysX792ilsHpFfgdZ+/cMiH6QG4LD1jHo+3ov8ydgdbtjxNKlBP0YgeVoIAtVtfkkCSo+6cSZ V4+j72bGoJ7JJGWbwxAMaJqjv2ssOhDHDpub9tAqEpLK8CGWJ0Tf4wQAF2ZgaKmYqnoKwD7+tus= )
	RRSIG=62311 and DNSKEY=62311/SEP verifies the DNSKEY RRset
	DNSKEY=29979 is now in the chain-of-trust
	Query to dns1.lttnet.net for ow.ly/A
	Received 921 bytes from 62.68.42.9
	;; Response received from [62.68.42.9] 921 octets ;; HEADER SECTION ;; id = 22085 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 8 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; ow.ly. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (8 records) ow.ly. 3600 IN NS ns-795.awsdns-35.net. ow.ly. 3600 IN NS ns-1603.awsdns-08.co.uk. ow.ly. 3600 IN NS ns-1454.awsdns-53.org. ow.ly. 3600 IN NS ns-133.awsdns-16.com. NSOODMFK0CFT4OI3KCTA8M5U0R3LR7NG.ly. 600 IN NSEC3 ( 1 1 0 08b532de ntgpl4qp7toh2l5ua92d75vpngjhbbbl NS SOA TXT RRSIG DNSKEY NSEC3PARAM ) NSOODMFK0CFT4OI3KCTA8M5U0R3LR7NG.ly. 600 IN RRSIG ( NSEC3 8 2 600 20260926110000 20260909110000 29979 ly. bEPKGGKJXYGhts+f2ze6yjV+u+Yql1Y/Tj4fjb8Ld4YvLJyHlACzI1QyMbHgdKNO2Mu8a1A2BNfI DGMxmKQwlh4NU62KbaPRZeeobk/NFuFHkYaN2m1Nuh38FhXYUd3hxdSebMI72MMtxR5fQVoKTEUU IC2afIKWDtYlMYxdhvYM3Wakh1JHJwE0xcgZKQ6uaBUv5Hd2fKhWq2Sk0OjHe5Y9/xQaplRiUV2e aVJpIt6h/4thYeaPawHCQja47mzfyAHi9NrusYm471s9H8P2+N+38/Yr2TG0PD/IDSnKqCZRQ78e hvNfK8D4GzT00IFGCVN5ORL3Mn2zowZwtdDbYQ== ) UECK6V44JHS4HOIDV8UM8RCR87NBFSE8.ly. 600 IN NSEC3 ( 1 1 0 08b532de ugpegrc1ei4tp2k70a6gtnsspf1eq4er NS DS RRSIG ) UECK6V44JHS4HOIDV8UM8RCR87NBFSE8.ly. 600 IN RRSIG ( NSEC3 8 2 600 20260926110000 20260909110000 29979 ly. Fpcd4QStHAkS+7pibdQRF9asWlX8ZXGwQP9JF0FV7bBiqsYckFrrHxMK6TwsPi6Wh0H2zdv3yI/P eyKsTtA3jOFX0agZHS9vhXHJoLTHBkWZ4rStwV5TVaVXOWbjzXr7GSFgzkUfU2vYjbmtYoPfrOSk EWCsepPb0jXwcY0BeWN+4tXE70TxRNRkkFG4pJACIAPLIPmM2mxs6xAonq790gL/YDRVPGQe7K7/ l4mPxl2e8D1Ij9ISQ5s7P/2Moe2XdAL26k4jc47npH+5cRGKSu4DUjW87xGodlhKDDwWnR0k1i49 FosLFaKAxiwOV7XA8Pfb+i8+FI1oB9xJL2PYYg== ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Query to phloem.uoregon.edu for ow.ly/DNSKEY
	Received 921 bytes from 128.223.32.35
	;; Response received from [128.223.32.35] 921 octets ;; HEADER SECTION ;; id = 10481 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 8 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; ow.ly. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (8 records) ow.ly. 3600 IN NS ns-1454.awsdns-53.org. ow.ly. 3600 IN NS ns-795.awsdns-35.net. ow.ly. 3600 IN NS ns-133.awsdns-16.com. ow.ly. 3600 IN NS ns-1603.awsdns-08.co.uk. NSOODMFK0CFT4OI3KCTA8M5U0R3LR7NG.ly. 600 IN NSEC3 ( 1 1 0 08b532de ntgpl4qp7toh2l5ua92d75vpngjhbbbl NS SOA TXT RRSIG DNSKEY NSEC3PARAM ) NSOODMFK0CFT4OI3KCTA8M5U0R3LR7NG.ly. 600 IN RRSIG ( NSEC3 8 2 600 20260926110000 20260909110000 29979 ly. bEPKGGKJXYGhts+f2ze6yjV+u+Yql1Y/Tj4fjb8Ld4YvLJyHlACzI1QyMbHgdKNO2Mu8a1A2BNfI DGMxmKQwlh4NU62KbaPRZeeobk/NFuFHkYaN2m1Nuh38FhXYUd3hxdSebMI72MMtxR5fQVoKTEUU IC2afIKWDtYlMYxdhvYM3Wakh1JHJwE0xcgZKQ6uaBUv5Hd2fKhWq2Sk0OjHe5Y9/xQaplRiUV2e aVJpIt6h/4thYeaPawHCQja47mzfyAHi9NrusYm471s9H8P2+N+38/Yr2TG0PD/IDSnKqCZRQ78e hvNfK8D4GzT00IFGCVN5ORL3Mn2zowZwtdDbYQ== ) UECK6V44JHS4HOIDV8UM8RCR87NBFSE8.ly. 600 IN NSEC3 ( 1 1 0 08b532de ugpegrc1ei4tp2k70a6gtnsspf1eq4er NS DS RRSIG ) UECK6V44JHS4HOIDV8UM8RCR87NBFSE8.ly. 600 IN RRSIG ( NSEC3 8 2 600 20260926110000 20260909110000 29979 ly. Fpcd4QStHAkS+7pibdQRF9asWlX8ZXGwQP9JF0FV7bBiqsYckFrrHxMK6TwsPi6Wh0H2zdv3yI/P eyKsTtA3jOFX0agZHS9vhXHJoLTHBkWZ4rStwV5TVaVXOWbjzXr7GSFgzkUfU2vYjbmtYoPfrOSk EWCsepPb0jXwcY0BeWN+4tXE70TxRNRkkFG4pJACIAPLIPmM2mxs6xAonq790gL/YDRVPGQe7K7/ l4mPxl2e8D1Ij9ISQ5s7P/2Moe2XdAL26k4jc47npH+5cRGKSu4DUjW87xGodlhKDDwWnR0k1i49 FosLFaKAxiwOV7XA8Pfb+i8+FI1oB9xJL2PYYg== ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found child zone ow.ly

ow.ly

	Checking DS between ly and ow.ly
	Query to pch.ltt.ly for ow.ly/DS
	Received 1129 bytes from 204.61.216.67
	;; Response received from [204.61.216.67] 1129 octets ;; HEADER SECTION ;; id = 22245 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 6 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; ow.ly. IN DS ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (6 records) NSOODMFK0CFT4OI3KCTA8M5U0R3LR7NG.ly. 600 IN NSEC3 ( 1 1 0 08b532de ntgpl4qp7toh2l5ua92d75vpngjhbbbl NS SOA TXT RRSIG DNSKEY NSEC3PARAM ) NSOODMFK0CFT4OI3KCTA8M5U0R3LR7NG.ly. 600 IN RRSIG ( NSEC3 8 2 600 20260926110000 20260909110000 29979 ly. bEPKGGKJXYGhts+f2ze6yjV+u+Yql1Y/Tj4fjb8Ld4YvLJyHlACzI1QyMbHgdKNO2Mu8a1A2BNfI DGMxmKQwlh4NU62KbaPRZeeobk/NFuFHkYaN2m1Nuh38FhXYUd3hxdSebMI72MMtxR5fQVoKTEUU IC2afIKWDtYlMYxdhvYM3Wakh1JHJwE0xcgZKQ6uaBUv5Hd2fKhWq2Sk0OjHe5Y9/xQaplRiUV2e aVJpIt6h/4thYeaPawHCQja47mzfyAHi9NrusYm471s9H8P2+N+38/Yr2TG0PD/IDSnKqCZRQ78e hvNfK8D4GzT00IFGCVN5ORL3Mn2zowZwtdDbYQ== ) ly. 600 IN SOA ( dns.lttnet.net. khaleds.lttnet.net. 2026091404 ;serial 3600 ;refresh 900 ;retry 604800 ;expire 600 ;minimum ) ly. 600 IN RRSIG ( SOA 8 1 3600 20260926110000 20260909110000 29979 ly. ApB8Vxjx/Bm0mc9T93SrdckLoxnL/fQk4QjDTr+IGls6xlDEbThIG0PaSuXN9gPNj5tTbSILoL2r 3sctQHua0SBVoluNTrnX5V82JV4LnA7b+Yq8+Xgco8e6QEiRv/ig9Revo/ACiRFRfCXy4FEZqDiC OFn7Ls/HTB/tBCPeTh2h99czbVK3kIHlVpUztKZcnR/BPPqcAAvOzv29aIwWRPqOEMwMLR+fBn4C IZfbt0B5Um42iepNxzZodDsxpFFvl3nHn+q5TE+RugBZ9WYB4bcS5UGO+PFVP7FqjXgT9tBfdwpr R03AvDBeS7KtaqooAxR8Ky1VcORldjzbv4a4xg== ) UECK6V44JHS4HOIDV8UM8RCR87NBFSE8.ly. 600 IN NSEC3 ( 1 1 0 08b532de ugpegrc1ei4tp2k70a6gtnsspf1eq4er NS DS RRSIG ) UECK6V44JHS4HOIDV8UM8RCR87NBFSE8.ly. 600 IN RRSIG ( NSEC3 8 2 600 20260926110000 20260909110000 29979 ly. Fpcd4QStHAkS+7pibdQRF9asWlX8ZXGwQP9JF0FV7bBiqsYckFrrHxMK6TwsPi6Wh0H2zdv3yI/P eyKsTtA3jOFX0agZHS9vhXHJoLTHBkWZ4rStwV5TVaVXOWbjzXr7GSFgzkUfU2vYjbmtYoPfrOSk EWCsepPb0jXwcY0BeWN+4tXE70TxRNRkkFG4pJACIAPLIPmM2mxs6xAonq790gL/YDRVPGQe7K7/ l4mPxl2e8D1Ij9ISQ5s7P/2Moe2XdAL26k4jc47npH+5cRGKSu4DUjW87xGodlhKDDwWnR0k1i49 FosLFaKAxiwOV7XA8Pfb+i8+FI1oB9xJL2PYYg== ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	No DS records found for ow.ly in the ly zone
	Query to ns-1603.awsdns-08.co.uk for ow.ly/DNSKEY
	Received 118 bytes from 205.251.198.67
	;; Response received from [205.251.198.67] 118 octets ;; HEADER SECTION ;; id = 60603 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 1 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 1 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; ow.ly. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (1 record) ow.ly. 900 IN SOA ( ns-795.awsdns-35.net. awsdns-hostmaster.amazon.com. 1 ;serial 7200 ;refresh 900 ;retry 1209600 ;expire 86400 ;minimum ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	No DNSKEY records found
	Query to ns-1603.awsdns-08.co.uk for ow.ly/A
	Received 222 bytes from 205.251.198.67
	;; Response received from [205.251.198.67] 222 octets ;; HEADER SECTION ;; id = 7792 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 1 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 3 ;; nscount = 4 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; ow.ly. IN A ;; ANSWER SECTION (3 records) ow.ly. 60 IN A 184.194.72.174 ow.ly. 60 IN A 52.73.209.198 ow.ly. 60 IN A 52.200.183.208 ;; AUTHORITY SECTION (4 records) ow.ly. 172800 IN NS ns-133.awsdns-16.com. ow.ly. 172800 IN NS ns-1454.awsdns-53.org. ow.ly. 172800 IN NS ns-1603.awsdns-08.co.uk. ow.ly. 172800 IN NS ns-795.awsdns-35.net. ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	ns-1603.awsdns-08.co.uk is authoritative for ow.ly
	Query to ns-795.awsdns-35.net for ow.ly/SOA
	Received 235 bytes from 205.251.195.27
	;; Response received from [205.251.195.27] 235 octets ;; HEADER SECTION ;; id = 10684 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 1 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 1 ;; nscount = 4 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; ow.ly. IN SOA ;; ANSWER SECTION (1 record) ow.ly. 900 IN SOA ( ns-795.awsdns-35.net. awsdns-hostmaster.amazon.com. 1 ;serial 7200 ;refresh 900 ;retry 1209600 ;expire 86400 ;minimum ) ;; AUTHORITY SECTION (4 records) ow.ly. 172800 IN NS ns-133.awsdns-16.com. ow.ly. 172800 IN NS ns-1454.awsdns-53.org. ow.ly. 172800 IN NS ns-1603.awsdns-08.co.uk. ow.ly. 172800 IN NS ns-795.awsdns-35.net. ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Query to ns-1454.awsdns-53.org for ow.ly/SOA
	Received 235 bytes from 205.251.197.174
	;; Response received from [205.251.197.174] 235 octets ;; HEADER SECTION ;; id = 3138 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 1 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 1 ;; nscount = 4 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; ow.ly. IN SOA ;; ANSWER SECTION (1 record) ow.ly. 900 IN SOA ( ns-795.awsdns-35.net. awsdns-hostmaster.amazon.com. 1 ;serial 7200 ;refresh 900 ;retry 1209600 ;expire 86400 ;minimum ) ;; AUTHORITY SECTION (4 records) ow.ly. 172800 IN NS ns-133.awsdns-16.com. ow.ly. 172800 IN NS ns-1454.awsdns-53.org. ow.ly. 172800 IN NS ns-1603.awsdns-08.co.uk. ow.ly. 172800 IN NS ns-795.awsdns-35.net. ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Query to ns-133.awsdns-16.com for ow.ly/SOA
	Received 235 bytes from 205.251.192.133
	;; Response received from [205.251.192.133] 235 octets ;; HEADER SECTION ;; id = 30695 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 1 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 1 ;; nscount = 4 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; ow.ly. IN SOA ;; ANSWER SECTION (1 record) ow.ly. 900 IN SOA ( ns-795.awsdns-35.net. awsdns-hostmaster.amazon.com. 1 ;serial 7200 ;refresh 900 ;retry 1209600 ;expire 86400 ;minimum ) ;; AUTHORITY SECTION (4 records) ow.ly. 172800 IN NS ns-133.awsdns-16.com. ow.ly. 172800 IN NS ns-1454.awsdns-53.org. ow.ly. 172800 IN NS ns-1603.awsdns-08.co.uk. ow.ly. 172800 IN NS ns-795.awsdns-35.net. ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Query to ns-1603.awsdns-08.co.uk for ow.ly/A
	ow.ly A RR has value 184.194.72.174
	ow.ly A RR has value 52.73.209.198
	ow.ly A RR has value 52.200.183.208
	No RRSIGs found

ow.ly

	Query to ns-1454.awsdns-53.org for ow.ly/A
	Received 222 bytes from 205.251.197.174
	;; Response received from [205.251.197.174] 222 octets ;; HEADER SECTION ;; id = 61600 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 1 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 3 ;; nscount = 4 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; ow.ly. IN A ;; ANSWER SECTION (3 records) ow.ly. 60 IN A 184.194.72.174 ow.ly. 60 IN A 52.73.209.198 ow.ly. 60 IN A 52.200.183.208 ;; AUTHORITY SECTION (4 records) ow.ly. 172800 IN NS ns-133.awsdns-16.com. ow.ly. 172800 IN NS ns-1454.awsdns-53.org. ow.ly. 172800 IN NS ns-1603.awsdns-08.co.uk. ow.ly. 172800 IN NS ns-795.awsdns-35.net. ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	ns-1454.awsdns-53.org is authoritative for ow.ly
	Query to ns-1454.awsdns-53.org for ow.ly/A
	ow.ly A RR has value 184.194.72.174
	ow.ly A RR has value 52.73.209.198
	ow.ly A RR has value 52.200.183.208
	No RRSIGs found

ow.ly

	Query to ns-133.awsdns-16.com for ow.ly/A
	Received 222 bytes from 205.251.192.133
	;; Response received from [205.251.192.133] 222 octets ;; HEADER SECTION ;; id = 60707 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 1 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 3 ;; nscount = 4 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; ow.ly. IN A ;; ANSWER SECTION (3 records) ow.ly. 60 IN A 52.200.183.208 ow.ly. 60 IN A 184.194.72.174 ow.ly. 60 IN A 52.73.209.198 ;; AUTHORITY SECTION (4 records) ow.ly. 172800 IN NS ns-133.awsdns-16.com. ow.ly. 172800 IN NS ns-1454.awsdns-53.org. ow.ly. 172800 IN NS ns-1603.awsdns-08.co.uk. ow.ly. 172800 IN NS ns-795.awsdns-35.net. ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	ns-133.awsdns-16.com is authoritative for ow.ly
	Query to ns-133.awsdns-16.com for ow.ly/A
	ow.ly A RR has value 52.200.183.208
	ow.ly A RR has value 184.194.72.174
	ow.ly A RR has value 52.73.209.198
	No RRSIGs found

ow.ly

	Query to ns-795.awsdns-35.net for ow.ly/A
	Received 222 bytes from 205.251.195.27
	;; Response received from [205.251.195.27] 222 octets ;; HEADER SECTION ;; id = 20215 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 1 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 3 ;; nscount = 4 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; ow.ly. IN A ;; ANSWER SECTION (3 records) ow.ly. 60 IN A 184.194.72.174 ow.ly. 60 IN A 52.200.183.208 ow.ly. 60 IN A 52.73.209.198 ;; AUTHORITY SECTION (4 records) ow.ly. 172800 IN NS ns-133.awsdns-16.com. ow.ly. 172800 IN NS ns-1454.awsdns-53.org. ow.ly. 172800 IN NS ns-1603.awsdns-08.co.uk. ow.ly. 172800 IN NS ns-795.awsdns-35.net. ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	ns-795.awsdns-35.net is authoritative for ow.ly
	Query to ns-795.awsdns-35.net for ow.ly/A
	ow.ly A RR has value 184.194.72.174
	ow.ly A RR has value 52.200.183.208
	ow.ly A RR has value 52.73.209.198
	No RRSIGs found

Move your mouse over any or symbols for remediation hints.

Want a second opinion? Test ow.ly at dnsviz.net.

DNSSEC Debugger

↓ Advanced options ↑ Advanced options

Trust Anchor:
Name Servers: