DNSSEC Analyzer

Domain Name:

Time: 2020-07-12 18:52:07 UTC, NTP stratum 4

Analyzing DNSSEC problems for ow.ly

DS=20326/SHA-256 is now in the chain-of-trust

	Checking DS between Trust Anchor and .
	`. IN DS ( 20326 8 2 e06d44b80b8f1d39a95c0b0d7c65d08458e880409bbc683457104237c7f8ec8d )`
	Query to a.root-servers.net for ./DNSKEY
	Received 864 bytes from 198.41.0.4
	;; Answer received from 198.41.0.4 (864 bytes) ;; HEADER SECTION ;; id = 27503 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1472 ;; option: ;; QUESTION SECTION (1 record) ;; . IN DNSKEY ;; ANSWER SECTION (3 records) . 172800 IN DNSKEY ( 256 3 8 AwEAAdauOGxLhfAKFTTZwGhBXbk793QKdWIQRjiSftWdusCwkPhNyJrIjwtNffCWXGLlZAbpcs41 4RE3oS1qVwV+AdXsO92SBu5haGlxMUk0NqZO7Xlf84/wrzGZVRRouPo5pNX/CKS8Mv9UOi0olKGC u31dNfh8qCszWZcloLDgeLzSnQSkvFoGe69vNCfh7feESKedkBC2qRz0BZv9+oJI0IY/3D7WEnV0 NOlf8gSHozhfJFJ/ZAKtvw/Q3ogrVJFk0LyVaU/NVtVA5FM4pVMIRID7pfrPi78aAzG7b/Wh/Pce 4jPAIpS3dApq25YkvMuPvfB91NMf9FemKwlp78PBVcM= ) ; Key ID = 46594 . 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; Key ID = 20326 . 172800 IN RRSIG ( DNSKEY 8 0 172800 20200801000000 20200711000000 20326 . Vladon0p/7tDn7SfPe6dG6iTddTbEL++KLJCI6cjSIDo3QwyAn0uKhjsVstQE//M9DR3RaCzclwK VJ0kuRZJl+tAEimBMhT85+fh2k5aTjyE2z3ysQv0F0clHjbyydnXe6CJ0PxOfs6hLLkHXkX58EYM fN0xlR4Ch2yY3gENKSyc0kcvsgA81JO1eBc1rD7Hy8ROHltlHS7rgI/9Q7OsMvH8c25zU4iRILJS unxWGfXmCrwZOVKDmPqVuWLkufPTKrxhoNTVNoxXfPxPeiXmC/c8YGDLzjssAi5hQaoNnrDFn870 5fJRE10QKPmYZcyHlQov9ItY3qOtVclHmQ99WA== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1472 ;; option:
	Found 2 DNSKEY records for .
	`. 172800 IN DNSKEY ( 256 3 8 AwEAAdauOGxLhfAKFTTZwGhBXbk793QKdWIQRjiSftWdusCwkPhNyJrIjwtNffCWXGLlZAbpcs41 4RE3oS1qVwV+AdXsO92SBu5haGlxMUk0NqZO7Xlf84/wrzGZVRRouPo5pNX/CKS8Mv9UOi0olKGC u31dNfh8qCszWZcloLDgeLzSnQSkvFoGe69vNCfh7feESKedkBC2qRz0BZv9+oJI0IY/3D7WEnV0 NOlf8gSHozhfJFJ/ZAKtvw/Q3ogrVJFk0LyVaU/NVtVA5FM4pVMIRID7pfrPi78aAzG7b/Wh/Pce 4jPAIpS3dApq25YkvMuPvfB91NMf9FemKwlp78PBVcM= ) ; Key ID = 46594`
	`. 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; Key ID = 20326`
	DNSKEY=20326/SEP is now in the chain-of-trust
	DS=20326/SHA-256 verifies DNSKEY=20326/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`. 172800 IN RRSIG ( DNSKEY 8 0 172800 20200801000000 20200711000000 20326 . Vladon0p/7tDn7SfPe6dG6iTddTbEL++KLJCI6cjSIDo3QwyAn0uKhjsVstQE//M9DR3RaCzclwK VJ0kuRZJl+tAEimBMhT85+fh2k5aTjyE2z3ysQv0F0clHjbyydnXe6CJ0PxOfs6hLLkHXkX58EYM fN0xlR4Ch2yY3gENKSyc0kcvsgA81JO1eBc1rD7Hy8ROHltlHS7rgI/9Q7OsMvH8c25zU4iRILJS unxWGfXmCrwZOVKDmPqVuWLkufPTKrxhoNTVNoxXfPxPeiXmC/c8YGDLzjssAi5hQaoNnrDFn870 5fJRE10QKPmYZcyHlQov9ItY3qOtVclHmQ99WA== )`
	RRSIG=20326 and DNSKEY=20326/SEP verifies the DNSKEY RRset
	DNSKEY=46594 is now in the chain-of-trust
	Query to d.root-servers.net for ow.ly/A
	Received 638 bytes from 199.7.91.13
	;; Answer received from 199.7.91.13 (638 bytes) ;; HEADER SECTION ;; id = 32599 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 7 arcount = 9 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1450 ;; option: ;; QUESTION SECTION (1 record) ;; ow.ly. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (7 records) ly. 172800 IN NS dns.lttnet.net. ly. 172800 IN NS pch.ltt.ly. ly. 172800 IN NS dns1.lttnet.net. ly. 172800 IN NS ns-ly.afrinic.net. ly. 172800 IN NS phloem.uoregon.edu. ly. 86400 IN NSEC ma. NS RRSIG NSEC ly. 86400 IN RRSIG ( NSEC 8 1 86400 20200725170000 20200712160000 46594 . gYusYlNhFi4V/ROgGu0dwgWWx6gSwdOfl9M1VEz6Q2gIOBan8KcfRsiCOP5UqAZhwVv4OCdYNh8O zGIRZZGQsnvbSDjZ87We5Sb/i8tSvSckLg1P1Bk5f4ns5HxxVpuRr1zyRjfyQHX47pTtMSW4km9v ACTXQ1zTdOhwB7vpcxd3En3jSIK1HWdTMmcFOV+cB9yUtaKzWKbNW2s1ZNbp2wy9yl5HuZOcUs2i deB0oSw/Yxg/AWmUjgdqmz82MICizjrv5Fwy4GpnnjE4g1b5gU23zo+Zy6K4F1hn171M9+Z06L+0 Jgt6t/l9p+DpV6KL6Yeez6HyCI4S+b7RYFwtrw== ) ;; ADDITIONAL SECTION (9 records) dns.lttnet.net. 172800 IN A 62.240.36.9 pch.ltt.ly. 172800 IN A 204.61.216.67 dns1.lttnet.net. 172800 IN A 62.68.42.9 ns-ly.afrinic.net. 172800 IN A 196.216.168.24 phloem.uoregon.edu. 172800 IN A 128.223.32.35 pch.ltt.ly. 172800 IN AAAA 2001:500:14:6067:ad::1 ns-ly.afrinic.net. 172800 IN AAAA 2001:43f8:120::24 phloem.uoregon.edu. 172800 IN AAAA 2001:468:d01:20::80df:2023 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1450 ;; option:
	Query to a.root-servers.net for ly/DNSKEY
	Received 635 bytes from 198.41.0.4
	;; Answer received from 198.41.0.4 (635 bytes) ;; HEADER SECTION ;; id = 22367 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 7 arcount = 9 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1472 ;; option: ;; QUESTION SECTION (1 record) ;; ly. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (7 records) ly. 172800 IN NS dns.lttnet.net. ly. 172800 IN NS pch.ltt.ly. ly. 172800 IN NS dns1.lttnet.net. ly. 172800 IN NS ns-ly.afrinic.net. ly. 172800 IN NS phloem.uoregon.edu. ly. 86400 IN NSEC ma. NS RRSIG NSEC ly. 86400 IN RRSIG ( NSEC 8 1 86400 20200725170000 20200712160000 46594 . gYusYlNhFi4V/ROgGu0dwgWWx6gSwdOfl9M1VEz6Q2gIOBan8KcfRsiCOP5UqAZhwVv4OCdYNh8O zGIRZZGQsnvbSDjZ87We5Sb/i8tSvSckLg1P1Bk5f4ns5HxxVpuRr1zyRjfyQHX47pTtMSW4km9v ACTXQ1zTdOhwB7vpcxd3En3jSIK1HWdTMmcFOV+cB9yUtaKzWKbNW2s1ZNbp2wy9yl5HuZOcUs2i deB0oSw/Yxg/AWmUjgdqmz82MICizjrv5Fwy4GpnnjE4g1b5gU23zo+Zy6K4F1hn171M9+Z06L+0 Jgt6t/l9p+DpV6KL6Yeez6HyCI4S+b7RYFwtrw== ) ;; ADDITIONAL SECTION (9 records) dns.lttnet.net. 172800 IN A 62.240.36.9 pch.ltt.ly. 172800 IN A 204.61.216.67 dns1.lttnet.net. 172800 IN A 62.68.42.9 ns-ly.afrinic.net. 172800 IN A 196.216.168.24 phloem.uoregon.edu. 172800 IN A 128.223.32.35 pch.ltt.ly. 172800 IN AAAA 2001:500:14:6067:ad::1 ns-ly.afrinic.net. 172800 IN AAAA 2001:43f8:120::24 phloem.uoregon.edu. 172800 IN AAAA 2001:468:d01:20::80df:2023 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1472 ;; option:
	Found child zone ly

	Checking DS between . and ly
	Query to i.root-servers.net for ly/DS
	Received 703 bytes from 192.36.148.17
	;; Answer received from 192.36.148.17 (703 bytes) ;; HEADER SECTION ;; id = 29164 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 4 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; ly. IN DS ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (4 records) . 86400 IN SOA ( a.root-servers.net. nstld.verisign-grs.com. 2020071201 ;serial 1800 ;refresh 900 ;retry 604800 ;expire 86400 ;minimum ) . 86400 IN RRSIG ( SOA 8 0 86400 20200725170000 20200712160000 46594 . 1NjOlH3F20v59IUFrUWjz5lC5ASMc6s3dDDhhGh+B98s6x1t2e2oiOETiqm51Jb3fSC1I3OSWBlW wNnzpaRUAxZlU/bfgg1a/pF6x/1rfWi4zdG/VpSq/+XhI5t9dOrq/Xa4wvSgzmZSvSGovmj5h1Yp yf9exBbs7fP9T5achVZB2EPNYGUzU2uxNCIzT64NKtQOBMsBf5AccncqxFEMdZ3ODZVXz/1PEgGk GtNRt47Ry63pPSus88vtIoV2qo5oJwHAdnFlFelWWvceuGEMESwrV0ktg77TOYKLG0besXewX78P nr4B/tp1BZBN7VB6oW+AtQChAuvi8wVcBSoCxg== ) ly. 86400 IN NSEC ma. NS RRSIG NSEC ly. 86400 IN RRSIG ( NSEC 8 1 86400 20200725170000 20200712160000 46594 . gYusYlNhFi4V/ROgGu0dwgWWx6gSwdOfl9M1VEz6Q2gIOBan8KcfRsiCOP5UqAZhwVv4OCdYNh8O zGIRZZGQsnvbSDjZ87We5Sb/i8tSvSckLg1P1Bk5f4ns5HxxVpuRr1zyRjfyQHX47pTtMSW4km9v ACTXQ1zTdOhwB7vpcxd3En3jSIK1HWdTMmcFOV+cB9yUtaKzWKbNW2s1ZNbp2wy9yl5HuZOcUs2i deB0oSw/Yxg/AWmUjgdqmz82MICizjrv5Fwy4GpnnjE4g1b5gU23zo+Zy6K4F1hn171M9+Z06L+0 Jgt6t/l9p+DpV6KL6Yeez6HyCI4S+b7RYFwtrw== ) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	No DS records found for ly in the . zone
	Query to dns1.lttnet.net for ly/DNSKEY
	Received 89 bytes from 62.68.42.9
	;; Answer received from 62.68.42.9 (89 bytes) ;; HEADER SECTION ;; id = 16007 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 1 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; ly. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (1 record) ly. 600 IN SOA ( dns.lttnet.net. khaleds.lttnet.net. 2020071282 ;serial 3600 ;refresh 900 ;retry 2419200 ;expire 600 ;minimum ) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	No DNSKEY records found
	Query to pch.ltt.ly for ow.ly/A
	Received 174 bytes from 204.61.216.67
	;; Answer received from 204.61.216.67 (174 bytes) ;; HEADER SECTION ;; id = 16098 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 4 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; ow.ly. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (4 records) ow.ly. 172800 IN NS ns-795.awsdns-35.net. ow.ly. 172800 IN NS ns-1454.awsdns-53.org. ow.ly. 172800 IN NS ns-1603.awsdns-08.co.uk. ow.ly. 172800 IN NS ns-133.awsdns-16.com. ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Query to phloem.uoregon.edu for ow.ly/DNSKEY
	Received 174 bytes from 128.223.32.35
	;; Answer received from 128.223.32.35 (174 bytes) ;; HEADER SECTION ;; id = 39799 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 4 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; ow.ly. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (4 records) ow.ly. 172800 IN NS ns-1603.awsdns-08.co.uk. ow.ly. 172800 IN NS ns-133.awsdns-16.com. ow.ly. 172800 IN NS ns-1454.awsdns-53.org. ow.ly. 172800 IN NS ns-795.awsdns-35.net. ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found child zone ow.ly

ow.ly

	Checking DS between ly and ow.ly
	Query to ns-ly.afrinic.net for ow.ly/DS
	Received 92 bytes from 196.216.168.24
	;; Answer received from 196.216.168.24 (92 bytes) ;; HEADER SECTION ;; id = 19326 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 1 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; ow.ly. IN DS ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (1 record) ly. 600 IN SOA ( dns.lttnet.net. khaleds.lttnet.net. 2020071282 ;serial 3600 ;refresh 900 ;retry 2419200 ;expire 600 ;minimum ) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	No DS records found for ow.ly in the ly zone
	Query to ns-795.awsdns-35.net for ow.ly/DNSKEY
	Received 118 bytes from 205.251.195.27
	;; Answer received from 205.251.195.27 (118 bytes) ;; HEADER SECTION ;; id = 17920 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 1 arcount = 1 ;; do = 0 ;; EDNS version 0 ;; flags: 0000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; ow.ly. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (1 record) ow.ly. 900 IN SOA ( ns-795.awsdns-35.net. awsdns-hostmaster.amazon.com. 1 ;serial 7200 ;refresh 900 ;retry 1209600 ;expire 86400 ;minimum ) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 0000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	No DNSKEY records found
	Query to ns-133.awsdns-16.com for ow.ly/A
	Received 270 bytes from 205.251.192.133
	;; Answer received from 205.251.192.133 (270 bytes) ;; HEADER SECTION ;; id = 59758 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 6 nscount = 4 arcount = 1 ;; do = 0 ;; EDNS version 0 ;; flags: 0000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; ow.ly. IN A ;; ANSWER SECTION (6 records) ow.ly. 300 IN A 54.67.120.65 ow.ly. 300 IN A 54.67.62.204 ow.ly. 300 IN A 54.183.131.91 ow.ly. 300 IN A 54.183.130.144 ow.ly. 300 IN A 54.67.57.56 ow.ly. 300 IN A 54.183.132.164 ;; AUTHORITY SECTION (4 records) ow.ly. 172800 IN NS ns-133.awsdns-16.com. ow.ly. 172800 IN NS ns-1454.awsdns-53.org. ow.ly. 172800 IN NS ns-1603.awsdns-08.co.uk. ow.ly. 172800 IN NS ns-795.awsdns-35.net. ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 0000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	ow.ly is authoritative for ow.ly
	Query to ns-1454.awsdns-53.org for ow.ly/SOA
	Received 235 bytes from 205.251.197.174
	;; Answer received from 205.251.197.174 (235 bytes) ;; HEADER SECTION ;; id = 40339 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 1 nscount = 4 arcount = 1 ;; do = 0 ;; EDNS version 0 ;; flags: 0000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; ow.ly. IN SOA ;; ANSWER SECTION (1 record) ow.ly. 900 IN SOA ( ns-795.awsdns-35.net. awsdns-hostmaster.amazon.com. 1 ;serial 7200 ;refresh 900 ;retry 1209600 ;expire 86400 ;minimum ) ;; AUTHORITY SECTION (4 records) ow.ly. 172800 IN NS ns-133.awsdns-16.com. ow.ly. 172800 IN NS ns-1454.awsdns-53.org. ow.ly. 172800 IN NS ns-1603.awsdns-08.co.uk. ow.ly. 172800 IN NS ns-795.awsdns-35.net. ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 0000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Query to ns-795.awsdns-35.net for ow.ly/SOA
	Received 235 bytes from 205.251.195.27
	;; Answer received from 205.251.195.27 (235 bytes) ;; HEADER SECTION ;; id = 64213 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 1 nscount = 4 arcount = 1 ;; do = 0 ;; EDNS version 0 ;; flags: 0000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; ow.ly. IN SOA ;; ANSWER SECTION (1 record) ow.ly. 900 IN SOA ( ns-795.awsdns-35.net. awsdns-hostmaster.amazon.com. 1 ;serial 7200 ;refresh 900 ;retry 1209600 ;expire 86400 ;minimum ) ;; AUTHORITY SECTION (4 records) ow.ly. 172800 IN NS ns-133.awsdns-16.com. ow.ly. 172800 IN NS ns-1454.awsdns-53.org. ow.ly. 172800 IN NS ns-1603.awsdns-08.co.uk. ow.ly. 172800 IN NS ns-795.awsdns-35.net. ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 0000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Query to ns-1603.awsdns-08.co.uk for ow.ly/SOA
	Received 235 bytes from 205.251.198.67
	;; Answer received from 205.251.198.67 (235 bytes) ;; HEADER SECTION ;; id = 10602 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 1 nscount = 4 arcount = 1 ;; do = 0 ;; EDNS version 0 ;; flags: 0000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; ow.ly. IN SOA ;; ANSWER SECTION (1 record) ow.ly. 900 IN SOA ( ns-795.awsdns-35.net. awsdns-hostmaster.amazon.com. 1 ;serial 7200 ;refresh 900 ;retry 1209600 ;expire 86400 ;minimum ) ;; AUTHORITY SECTION (4 records) ow.ly. 172800 IN NS ns-133.awsdns-16.com. ow.ly. 172800 IN NS ns-1454.awsdns-53.org. ow.ly. 172800 IN NS ns-1603.awsdns-08.co.uk. ow.ly. 172800 IN NS ns-795.awsdns-35.net. ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 0000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Query to ns-133.awsdns-16.com for ow.ly/SOA
	Received 235 bytes from 205.251.192.133
	;; Answer received from 205.251.192.133 (235 bytes) ;; HEADER SECTION ;; id = 40974 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 1 nscount = 4 arcount = 1 ;; do = 0 ;; EDNS version 0 ;; flags: 0000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; ow.ly. IN SOA ;; ANSWER SECTION (1 record) ow.ly. 900 IN SOA ( ns-795.awsdns-35.net. awsdns-hostmaster.amazon.com. 1 ;serial 7200 ;refresh 900 ;retry 1209600 ;expire 86400 ;minimum ) ;; AUTHORITY SECTION (4 records) ow.ly. 172800 IN NS ns-133.awsdns-16.com. ow.ly. 172800 IN NS ns-1454.awsdns-53.org. ow.ly. 172800 IN NS ns-1603.awsdns-08.co.uk. ow.ly. 172800 IN NS ns-795.awsdns-35.net. ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 0000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Query to ns-133.awsdns-16.com for ow.ly/A
	Received 270 bytes from 205.251.192.133
	;; Answer received from 205.251.192.133 (270 bytes) ;; HEADER SECTION ;; id = 7674 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 6 nscount = 4 arcount = 1 ;; do = 0 ;; EDNS version 0 ;; flags: 0000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; ow.ly. IN A ;; ANSWER SECTION (6 records) ow.ly. 300 IN A 54.67.57.56 ow.ly. 300 IN A 54.183.132.164 ow.ly. 300 IN A 54.183.131.91 ow.ly. 300 IN A 54.67.120.65 ow.ly. 300 IN A 54.183.130.144 ow.ly. 300 IN A 54.67.62.204 ;; AUTHORITY SECTION (4 records) ow.ly. 172800 IN NS ns-133.awsdns-16.com. ow.ly. 172800 IN NS ns-1454.awsdns-53.org. ow.ly. 172800 IN NS ns-1603.awsdns-08.co.uk. ow.ly. 172800 IN NS ns-795.awsdns-35.net. ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 0000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	ow.ly A RR has value 54.67.57.56
	ow.ly A RR has value 54.183.132.164
	ow.ly A RR has value 54.183.131.91
	ow.ly A RR has value 54.67.120.65
	ow.ly A RR has value 54.183.130.144
	ow.ly A RR has value 54.67.62.204
	No RRSIGs found

Move your mouse over any or symbols for remediation hints.

Want a second opinion? Test ow.ly at dnsviz.net.

DNSSEC Analyzer

↓ Advanced options ↑ Advanced options

Trust Anchor:
Name Servers: