DNSSEC Debugger

Domain Name:

Time: 2025-09-16 03:08:26 UTC

Analyzing DNSSEC problems for ow.ly

DS=20326/SHA-256 is now in the chain-of-trust

	Checking DS between Trust Anchor and .
	`. IN DS ( 20326 8 2 e06d44b80b8f1d39a95c0b0d7c65d08458e880409bbc683457104237c7f8ec8d )`
	Query to g.root-servers.net for ./DNSKEY
	Received 1417 bytes from 192.112.36.4
	;; Response received from [192.112.36.4] 1417 octets ;; HEADER SECTION ;; id = 45013 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 5 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; . IN DNSKEY ;; ANSWER SECTION (5 records) . 172800 IN DNSKEY ( 256 3 8 AwEAAbEbGCpGTDrcZTWqWWE72nphyshpRcILdzCVlBGU9Ln1Fui9kkseUOP+g5GLUeVFKdTloeRT A9+EYiQdXgWXmXmuW/nGxZjAikluF/O9NzLVrr5iZnth2xu+F48nrJlAgWWiMNau54NI5sZ3iVQf hFsq2pZmf43RauRPniYMShOLO7EBWWXr5glDSgZGS9fSm6xHwwF+g8D4m8oanjvdCBNxXzSEKS31 ibxjLifTfvwCg3y4XXcNW9U6Nu3JmoKUdxqpPPIkBvVQbIz4UO2FwaR13uXC03ALP1Yx2QNSS4SZ lcIMtAftQR9wtCiuPWQnFv4jkzWqlhp1Lmf7bcoL9yk= ) ; keytag 53148 . 172800 IN DNSKEY ( 257 3 8 AwEAAa96jeuknZlaeSrvyAJj6ZHv28hhOKkx3rLGXVaC6rXTsDc449/cidltpkyGwCJNnOAlFNKF 2jBosZBU5eeHspaQWOmOElZsjICMQMC3aeHbGiShvZsx4wMYSjH8e7Vrhbu6irwCzVBApESjbUdp WWmEnhathWu1jo+siFUiRAAxm9qyJNg/wOZqqzL/dL/q8PkcRU5oUKEpUge71M3ej2/7CPqpdVwu MoTvoB+ZOT4YeGyxMvHmbrxlFzGOHOijtzN+u1TQNatX2XBuzZNQ1K+s2CXkPIZo7s6JgZyvaBev YtxPvYLw4z9mR7K2vaF18UYH9Z9GNUUeayffKC73PYc= ) ; keytag 38696 . 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; keytag 20326 . 172800 IN DNSKEY ( 256 3 8 AwEAAbauxLSFZ+KSWi2cT6TJbm3d+GIVqb2N1XnDjMsRme0b6JlGp/cvwmM5CaJ5LQ7tG1r7LuTH jYZadtbNk2nZmclq9r4KInS48ungoAZb0gJXVw8IvBTBb1YWQmiBqD285pJuORwTii7DF++nNJJk 3i55HJt9SmBI7m7t8nvx7OOY/w0inxg3fLH2uY0SKO8he4FGwMc4Ubiab8N8Yhyhh+FkKKdD/+oA cuGF75PjlSXO460B4MlNLlEcjDEzIsKauRYx4YVgSaNomGhMMFblmXRzgW+1R6ywvm5mC9+omlyy izZp2GJfPwGMezuKSGDndO6CYYEc5/lsRhvBYsGjdPM= ) ; keytag 46441 . 172800 IN RRSIG ( DNSKEY 8 0 172800 20250930000000 20250909000000 20326 . aqj52+DKW6PhTa31l3xyxa0lbMd8T/UyK1sNUC42EY1+cSp0hSC0VlW82RsWYU5G5NmewrInT/Sx glWFlFz94yVqiKAK7ZNQr94nRbA7okrrlfnloiBi3cQ1IvEUgvNcmlZMLTeA6rINvdcBwS7ljMOH m0vQDce9IOxhQT7iAu23oiNORw5nWG/npNkYRFDD4yQvD3HsNeXFTuyDuc57ZEjs/pnIG5nkcqx7 tp/ba3XbOGllDr/V/0ubak7OeWum1eckIljqUsx5BnfBfIA7rJ2JJBIT7JMJ/O/cflTKoJFHQoKG TVYrNVBq9vsnZ01Q4ss688IvI8vO3zkP6LQLEA== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 4 DNSKEY records for .
	`. 172800 IN DNSKEY ( 256 3 8 AwEAAbEbGCpGTDrcZTWqWWE72nphyshpRcILdzCVlBGU9Ln1Fui9kkseUOP+g5GLUeVFKdTloeRT A9+EYiQdXgWXmXmuW/nGxZjAikluF/O9NzLVrr5iZnth2xu+F48nrJlAgWWiMNau54NI5sZ3iVQf hFsq2pZmf43RauRPniYMShOLO7EBWWXr5glDSgZGS9fSm6xHwwF+g8D4m8oanjvdCBNxXzSEKS31 ibxjLifTfvwCg3y4XXcNW9U6Nu3JmoKUdxqpPPIkBvVQbIz4UO2FwaR13uXC03ALP1Yx2QNSS4SZ lcIMtAftQR9wtCiuPWQnFv4jkzWqlhp1Lmf7bcoL9yk= ) ; keytag 53148`
	`. 172800 IN DNSKEY ( 257 3 8 AwEAAa96jeuknZlaeSrvyAJj6ZHv28hhOKkx3rLGXVaC6rXTsDc449/cidltpkyGwCJNnOAlFNKF 2jBosZBU5eeHspaQWOmOElZsjICMQMC3aeHbGiShvZsx4wMYSjH8e7Vrhbu6irwCzVBApESjbUdp WWmEnhathWu1jo+siFUiRAAxm9qyJNg/wOZqqzL/dL/q8PkcRU5oUKEpUge71M3ej2/7CPqpdVwu MoTvoB+ZOT4YeGyxMvHmbrxlFzGOHOijtzN+u1TQNatX2XBuzZNQ1K+s2CXkPIZo7s6JgZyvaBev YtxPvYLw4z9mR7K2vaF18UYH9Z9GNUUeayffKC73PYc= ) ; keytag 38696`
	`. 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; keytag 20326`
	`. 172800 IN DNSKEY ( 256 3 8 AwEAAbauxLSFZ+KSWi2cT6TJbm3d+GIVqb2N1XnDjMsRme0b6JlGp/cvwmM5CaJ5LQ7tG1r7LuTH jYZadtbNk2nZmclq9r4KInS48ungoAZb0gJXVw8IvBTBb1YWQmiBqD285pJuORwTii7DF++nNJJk 3i55HJt9SmBI7m7t8nvx7OOY/w0inxg3fLH2uY0SKO8he4FGwMc4Ubiab8N8Yhyhh+FkKKdD/+oA cuGF75PjlSXO460B4MlNLlEcjDEzIsKauRYx4YVgSaNomGhMMFblmXRzgW+1R6ywvm5mC9+omlyy izZp2GJfPwGMezuKSGDndO6CYYEc5/lsRhvBYsGjdPM= ) ; keytag 46441`
	DNSKEY=20326/SEP is now in the chain-of-trust
	DS=20326/SHA-256 verifies DNSKEY=20326/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`. 172800 IN RRSIG ( DNSKEY 8 0 172800 20250930000000 20250909000000 20326 . aqj52+DKW6PhTa31l3xyxa0lbMd8T/UyK1sNUC42EY1+cSp0hSC0VlW82RsWYU5G5NmewrInT/Sx glWFlFz94yVqiKAK7ZNQr94nRbA7okrrlfnloiBi3cQ1IvEUgvNcmlZMLTeA6rINvdcBwS7ljMOH m0vQDce9IOxhQT7iAu23oiNORw5nWG/npNkYRFDD4yQvD3HsNeXFTuyDuc57ZEjs/pnIG5nkcqx7 tp/ba3XbOGllDr/V/0ubak7OeWum1eckIljqUsx5BnfBfIA7rJ2JJBIT7JMJ/O/cflTKoJFHQoKG TVYrNVBq9vsnZ01Q4ss688IvI8vO3zkP6LQLEA== )`
	RRSIG=20326 and DNSKEY=20326/SEP verifies the DNSKEY RRset
	DNSKEY=53148 is now in the chain-of-trust
	DNSKEY=38696/SEP is now in the chain-of-trust
	DNSKEY=46441 is now in the chain-of-trust
	Query to e.root-servers.net for ow.ly/A
	Received 662 bytes from 192.203.230.10
	;; Response received from [192.203.230.10] 662 octets ;; HEADER SECTION ;; id = 38739 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 7 arcount = 9 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1472, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; ow.ly. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (7 records) ly. 172800 IN NS dns.lttnet.net. ly. 172800 IN NS pch.ltt.ly. ly. 172800 IN NS dns1.lttnet.net. ly. 172800 IN NS ns-ly.afrinic.net. ly. 172800 IN NS phloem.uoregon.edu. ly. 86400 IN DS ( 62311 8 2 08e9ac56f605a728d048c803787ab044b0c81caea2031eac9edea77150a1bdbe ) ly. 86400 IN RRSIG ( DS 8 1 86400 20250928200000 20250915190000 46441 . b40Ipr5eYLG3azAqAMh9YyhUYZIhL2CJoMRGVToyoZfWqxMsoJECn2fB5JUIcpspw6KLAzJh8u6d eli7VHwqpXXXRgPl4MtylHaJXFpnxBPD4HVowg13IZw0lm8+AjerAN7ec+z4+L430/P+v1NZAxa6 Pb5jg+o3xeoejz9iXpZxxWD3V0OlA2GLCiVqv0I5c/ILqZe45I+TZ6iDpekwY58c2UqWyvdxrSja mhY/NVRknieGH13xawuWUdzaxq3UBI9VFpowAvWXH5l3uJ2n4bhm5KgMm/F3Lrn8rrqPbUIEWpch C3g+pgCKX+NL51jcua2xljeStWW6q9+jPRrKHw== ) ;; ADDITIONAL SECTION (9 records) dns.lttnet.net. 172800 IN A 62.240.36.9 pch.ltt.ly. 172800 IN A 204.61.216.67 pch.ltt.ly. 172800 IN AAAA 2001:500:14:6067:ad::1 dns1.lttnet.net. 172800 IN A 62.68.42.9 ns-ly.afrinic.net. 172800 IN A 196.216.168.24 ns-ly.afrinic.net. 172800 IN AAAA 2001:43f8:120::24 phloem.uoregon.edu. 172800 IN A 128.223.32.35 phloem.uoregon.edu. 172800 IN AAAA 2001:468:d01:20::80df:2023 ;; { "EDNS-VERSION": 0 }
	Query to c.root-servers.net for ly/DNSKEY
	Received 664 bytes from 192.33.4.12
	;; Response received from [192.33.4.12] 664 octets ;; HEADER SECTION ;; id = 4094 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 7 arcount = 9 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; ly. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (7 records) ly. 172800 IN NS dns1.lttnet.net. ly. 172800 IN NS ns-ly.afrinic.net. ly. 172800 IN NS dns.lttnet.net. ly. 172800 IN NS pch.ltt.ly. ly. 172800 IN NS phloem.uoregon.edu. ly. 86400 IN DS ( 62311 8 2 08e9ac56f605a728d048c803787ab044b0c81caea2031eac9edea77150a1bdbe ) ly. 86400 IN RRSIG ( DS 8 1 86400 20250928200000 20250915190000 46441 . b40Ipr5eYLG3azAqAMh9YyhUYZIhL2CJoMRGVToyoZfWqxMsoJECn2fB5JUIcpspw6KLAzJh8u6d eli7VHwqpXXXRgPl4MtylHaJXFpnxBPD4HVowg13IZw0lm8+AjerAN7ec+z4+L430/P+v1NZAxa6 Pb5jg+o3xeoejz9iXpZxxWD3V0OlA2GLCiVqv0I5c/ILqZe45I+TZ6iDpekwY58c2UqWyvdxrSja mhY/NVRknieGH13xawuWUdzaxq3UBI9VFpowAvWXH5l3uJ2n4bhm5KgMm/F3Lrn8rrqPbUIEWpch C3g+pgCKX+NL51jcua2xljeStWW6q9+jPRrKHw== ) ;; ADDITIONAL SECTION (9 records) phloem.uoregon.edu. 172800 IN A 128.223.32.35 ns-ly.afrinic.net. 172800 IN A 196.216.168.24 dns1.lttnet.net. 172800 IN A 62.68.42.9 pch.ltt.ly. 172800 IN A 204.61.216.67 dns.lttnet.net. 172800 IN A 62.240.36.9 phloem.uoregon.edu. 172800 IN AAAA 2001:468:d01:20::80df:2023 ns-ly.afrinic.net. 172800 IN AAAA 2001:43f8:120::24 pch.ltt.ly. 172800 IN AAAA 2001:500:14:6067:ad::1 ;; { "EDNS-VERSION": 0 }
	Found child zone ly

	Checking DS between . and ly
	Query to m.root-servers.net for ly/DS
	Received 366 bytes from 202.12.27.33
	;; Response received from [202.12.27.33] 366 octets ;; HEADER SECTION ;; id = 40109 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; ly. IN DS ;; ANSWER SECTION (2 records) ly. 86400 IN DS ( 62311 8 2 08e9ac56f605a728d048c803787ab044b0c81caea2031eac9edea77150a1bdbe ) ly. 86400 IN RRSIG ( DS 8 1 86400 20250928200000 20250915190000 46441 . b40Ipr5eYLG3azAqAMh9YyhUYZIhL2CJoMRGVToyoZfWqxMsoJECn2fB5JUIcpspw6KLAzJh8u6d eli7VHwqpXXXRgPl4MtylHaJXFpnxBPD4HVowg13IZw0lm8+AjerAN7ec+z4+L430/P+v1NZAxa6 Pb5jg+o3xeoejz9iXpZxxWD3V0OlA2GLCiVqv0I5c/ILqZe45I+TZ6iDpekwY58c2UqWyvdxrSja mhY/NVRknieGH13xawuWUdzaxq3UBI9VFpowAvWXH5l3uJ2n4bhm5KgMm/F3Lrn8rrqPbUIEWpch C3g+pgCKX+NL51jcua2xljeStWW6q9+jPRrKHw== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 1 DS records for ly in the . zone
	DS=62311/SHA-256 has algorithm RSASHA256
	Found 1 RRSIGs over DS RRset
	`ly. 86400 IN RRSIG ( DS 8 1 86400 20250928200000 20250915190000 46441 . b40Ipr5eYLG3azAqAMh9YyhUYZIhL2CJoMRGVToyoZfWqxMsoJECn2fB5JUIcpspw6KLAzJh8u6d eli7VHwqpXXXRgPl4MtylHaJXFpnxBPD4HVowg13IZw0lm8+AjerAN7ec+z4+L430/P+v1NZAxa6 Pb5jg+o3xeoejz9iXpZxxWD3V0OlA2GLCiVqv0I5c/ILqZe45I+TZ6iDpekwY58c2UqWyvdxrSja mhY/NVRknieGH13xawuWUdzaxq3UBI9VFpowAvWXH5l3uJ2n4bhm5KgMm/F3Lrn8rrqPbUIEWpch C3g+pgCKX+NL51jcua2xljeStWW6q9+jPRrKHw== )`
	RRSIG=46441 and DNSKEY=46441 verifies the DS RRset
	DS=62311/SHA-256 is now in the chain-of-trust
	`ly. 86400 IN DS ( 62311 8 2 08e9ac56f605a728d048c803787ab044b0c81caea2031eac9edea77150a1bdbe )`
	Query to dns.lttnet.net for ly/DNSKEY
	Received 1385 bytes from 62.240.36.9
	;; Response received from [62.240.36.9] 1385 octets ;; HEADER SECTION ;; id = 57426 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 3 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; ly. IN DNSKEY ;; ANSWER SECTION (3 records) ly. 172800 IN DNSKEY ( 257 3 8 AwEAAcbhsGvQrDj3AA1GU31NNkDhJe+ghg7C+sHdX/gnBpFWMohDkZIXLVPTZ7i+6uHktDguiIIm S+X1F8l6vBguMUeLn82zwtiY05SPDGezNavkDxp9QkdANVpOhvLruoCOAtLHKNhUwPvdk21ZkTau ZYctCBNRXs5r7/8mmbg0O9O1qouP3KovP6Oo7N2VhpzfaqR0zRRYpvTt0oqabTplbVYihU7CxxgX MY5WLSftHV7faedrbPRjgesFELLykxQWC8TPZ9XnqzD9mUkpDjjz2bfgQKaVdOtu6Q0MH7OF0J3g 58NL6tATmj3+gN0vf1nbR515CVsapOOEVt7Rl0rrPkvb2pSZXfR65BGDVJMA1rRPCW2ZL1x2sU+t rVFv1eRonA67LYipR2I9+wy71OWuiTpxjG74EvlDRMYVMPmJo4AoDo1v5ZpLN9yDH5FyLV2Cg+IX NXO9jOstxWIjK3xkhbDCr8LcKU7p9JL44WhM6D+dSBqesyGGW97s2pUUxIEL0FnwO5R56vhvRmDy 5iVIw/iYx7+RpeJypXjIIBS2lniZ3SNdFDeuSQOSn+owOvccbFNJcDBBFpfBBerukV+LgN3Z/Q2z FWG9SNwVoQapYM80MB/85RMgN0CO/wvqUitdlnsCOnfYgGw+4tS3LWh5kw4SIMUB0YdlhJ3BUNhF f+F1 ) ; keytag 62311 ly. 172800 IN DNSKEY ( 256 3 8 AwEAAddkMrn2FPudhZMFxhP7Mgy2Vt/lIc6jFF8fYQadNhHAAfJ1bsIcTN6XcWZApHm4XkNRGi5v rWsTHwO1i6nVGT4gi2kRIQ22M1I5MJ617sPiLCAKQFrIoeqbLtFN/CRIrzadLmLfMzA3VdMUQOUB yh1bgGiBBb+FPMV64mkD5eS2rkmBKfuBJS0/6MOb5c2/+CyKJQpGFFHsQxUn3yai73wj5IzaaFGM 6oofxXxEreEMI3nhEwYXVvKEZPrUXzgByS9Ad88ZY2j7vl+XrMFhzW6a9MkyaAH222rabPzC7SHx XadizHTBqWagvl0IUItWKxPGw2rR0zVl96S8gNSuiFU= ) ; keytag 49200 ly. 172800 IN RRSIG ( DNSKEY 8 1 172800 20250923180000 20250906180000 62311 ly. caHNwEqpOvou+aACAN+dubLRw2/IWqzcd7AMMz2U43PzlYISrs86SJl+3aPw1rl0DPwOiQR6mGfq tVeesGFoNL9MAlTw/3c9DsYpAeN924bP2isbl1UceBGbNzsRKOvlm+7T3Q45QQAaV4LFrool7pd8 hMpDGK3dUFYNsOuimMCxfTKVwPisMA9XlP0vfbKlOjrkexdcp8TQ6L9mHpf0DeawWtFWrHQ+j0Jl qHL5M6+xH2YFx7nf9BBU8zGhooIqxiFr0mm7bdxJR7YReJunuMIQB87uCW1eCWwCtgdXoWI+XFoW FA2YdWs9TfL68IVDuDJbxRxhF9FB/J9CEjgsLXa6TPX/RQZXMCjCmc+2KD6mata9mrWN7b9ohtOy vx0FbGz2nAOwrzp7P9AHnIu8hMiOQ368WpV6wY15RDuDkmIu422D9vXMLwhQGZs7QHNgxP5jHfl0 RF/HE1YTj9vg9ktWFuBZkwlSxmNr+isdwBurGQ1xqsQFyJsGPgcBAyxvlWvlld1txVjllBhndD+V BhqKgiHxEEIxaV8F9PE3LpBLORSTy4Ewn9uPe0Ay/BxisbP5Dg1dYiD/2W4+MHFncXa6h5fnIlOP 5E5VusXfXh+FRcmTgCeSJHhxJK3M81Vrm20ntZ7JT4rg2mRDnPqyZjt91QSDZK/ws9K3H6Y6hjA= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 2 DNSKEY records for ly
	ly. 172800 IN DNSKEY ( 257 3 8 AwEAAcbhsGvQrDj3AA1GU31NNkDhJe+ghg7C+sHdX/gnBpFWMohDkZIXLVPTZ7i+6uHktDguiIIm S+X1F8l6vBguMUeLn82zwtiY05SPDGezNavkDxp9QkdANVpOhvLruoCOAtLHKNhUwPvdk21ZkTau ZYctCBNRXs5r7/8mmbg0O9O1qouP3KovP6Oo7N2VhpzfaqR0zRRYpvTt0oqabTplbVYihU7CxxgX MY5WLSftHV7faedrbPRjgesFELLykxQWC8TPZ9XnqzD9mUkpDjjz2bfgQKaVdOtu6Q0MH7OF0J3g 58NL6tATmj3+gN0vf1nbR515CVsapOOEVt7Rl0rrPkvb2pSZXfR65BGDVJMA1rRPCW2ZL1x2sU+t rVFv1eRonA67LYipR2I9+wy71OWuiTpxjG74EvlDRMYVMPmJo4AoDo1v5ZpLN9yDH5FyLV2Cg+IX NXO9jOstxWIjK3xkhbDCr8LcKU7p9JL44WhM6D+dSBqesyGGW97s2pUUxIEL0FnwO5R56vhvRmDy 5iVIw/iYx7+RpeJypXjIIBS2lniZ3SNdFDeuSQOSn+owOvccbFNJcDBBFpfBBerukV+LgN3Z/Q2z FWG9SNwVoQapYM80MB/85RMgN0CO/wvqUitdlnsCOnfYgGw+4tS3LWh5kw4SIMUB0YdlhJ3BUNhF f+F1 ) ; keytag 62311
	`ly. 172800 IN DNSKEY ( 256 3 8 AwEAAddkMrn2FPudhZMFxhP7Mgy2Vt/lIc6jFF8fYQadNhHAAfJ1bsIcTN6XcWZApHm4XkNRGi5v rWsTHwO1i6nVGT4gi2kRIQ22M1I5MJ617sPiLCAKQFrIoeqbLtFN/CRIrzadLmLfMzA3VdMUQOUB yh1bgGiBBb+FPMV64mkD5eS2rkmBKfuBJS0/6MOb5c2/+CyKJQpGFFHsQxUn3yai73wj5IzaaFGM 6oofxXxEreEMI3nhEwYXVvKEZPrUXzgByS9Ad88ZY2j7vl+XrMFhzW6a9MkyaAH222rabPzC7SHx XadizHTBqWagvl0IUItWKxPGw2rR0zVl96S8gNSuiFU= ) ; keytag 49200`
	DNSKEY=62311/SEP is now in the chain-of-trust
	DS=62311/SHA-256 verifies DNSKEY=62311/SEP
	Found 1 RRSIGs over DNSKEY RRset
	ly. 172800 IN RRSIG ( DNSKEY 8 1 172800 20250923180000 20250906180000 62311 ly. caHNwEqpOvou+aACAN+dubLRw2/IWqzcd7AMMz2U43PzlYISrs86SJl+3aPw1rl0DPwOiQR6mGfq tVeesGFoNL9MAlTw/3c9DsYpAeN924bP2isbl1UceBGbNzsRKOvlm+7T3Q45QQAaV4LFrool7pd8 hMpDGK3dUFYNsOuimMCxfTKVwPisMA9XlP0vfbKlOjrkexdcp8TQ6L9mHpf0DeawWtFWrHQ+j0Jl qHL5M6+xH2YFx7nf9BBU8zGhooIqxiFr0mm7bdxJR7YReJunuMIQB87uCW1eCWwCtgdXoWI+XFoW FA2YdWs9TfL68IVDuDJbxRxhF9FB/J9CEjgsLXa6TPX/RQZXMCjCmc+2KD6mata9mrWN7b9ohtOy vx0FbGz2nAOwrzp7P9AHnIu8hMiOQ368WpV6wY15RDuDkmIu422D9vXMLwhQGZs7QHNgxP5jHfl0 RF/HE1YTj9vg9ktWFuBZkwlSxmNr+isdwBurGQ1xqsQFyJsGPgcBAyxvlWvlld1txVjllBhndD+V BhqKgiHxEEIxaV8F9PE3LpBLORSTy4Ewn9uPe0Ay/BxisbP5Dg1dYiD/2W4+MHFncXa6h5fnIlOP 5E5VusXfXh+FRcmTgCeSJHhxJK3M81Vrm20ntZ7JT4rg2mRDnPqyZjt91QSDZK/ws9K3H6Y6hjA= )
	RRSIG=62311 and DNSKEY=62311/SEP verifies the DNSKEY RRset
	DNSKEY=49200 is now in the chain-of-trust
	Query to pch.ltt.ly for ow.ly/A
	Received 921 bytes from 204.61.216.67
	;; Response received from [204.61.216.67] 921 octets ;; HEADER SECTION ;; id = 61992 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 8 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; ow.ly. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (8 records) ow.ly. 86400 IN NS ns-1454.awsdns-53.org. ow.ly. 86400 IN NS ns-1603.awsdns-08.co.uk. ow.ly. 86400 IN NS ns-133.awsdns-16.com. ow.ly. 86400 IN NS ns-795.awsdns-35.net. CMA8AGDGI6KCLAESELJBARAV4OE8HP0E.ly. 600 IN NSEC3 ( 1 1 0 57026d3a d1vf56mj3alg0nkkn4jtaiu2nupm8qco NS SOA TXT RRSIG DNSKEY NSEC3PARAM ) CMA8AGDGI6KCLAESELJBARAV4OE8HP0E.ly. 600 IN RRSIG ( NSEC3 8 2 600 20250930030000 20250913030000 49200 ly. AJjkPEDhcgQosvZC33Wl9RatCYWDXnT2XsafEPKwmhjZbWRib6r1gQfCVucDxphLbYaDLUYdoJLg lbynQQAtXgFcfDEB3AKiumpiS22ZrohISSm5ZmeOIeLzWSIZJh3CGsJWd2MtexigksQVbcVJRNui 5FSQkF7NSs2ehRhZ26nowOAnod2VAN85BvLVJKCwGUO/mWw2jHUn/Eq37UpbsfEJ6JFelrfxr/r+ NynUhnD6MQJtUgMibrGYtxMYHY1u0lxjXXHdG2Z2UoEUXB64Rn+Ip79B6Y9SzXBr1jD3Jii8w/Wi ZRMA9sDcMlQlWYYyq3h9X/09P1Dwp2qUI1bqNw== ) K79C20L174I4MTE20LGSKGE1G12HV0SI.ly. 600 IN NSEC3 ( 1 1 0 57026d3a krbpivlh4mvvtsqfbcotat4cd8sg92n7 NS DS RRSIG ) K79C20L174I4MTE20LGSKGE1G12HV0SI.ly. 600 IN RRSIG ( NSEC3 8 2 600 20250930030000 20250913030000 49200 ly. rVGTR8fFu9xBwXZ25k8WcRoJVktqSEedfH6LWUmnywNc6iFMkfMtjRdEPJcN72IqnHuA1u8wTi9G HVpjzmi/HO04QMKJiyNpfbiqOPIdgZsW8Sex8HxfJVkLkuOc7B4nwSCgqXyQGnqvEO64OhT5Wd3W qkNQhOEgkWv/Ql+HwKhFo2zCP/a0thFaD9f+em6Ydn8o/MtgFALg6huAGzpu5vO41HtDQ5RTCRW7 miVYohSoV0SavhYOMfaW8YcEikw5GL/9ULxMifTgu2uP6HsUi9K9l1nltH+TZRI1IDrPB0scs3+W iFTvL2AssM7Qww7AqDM/nb1oUW0FBFPhK1MaIA== ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Query to dns1.lttnet.net for ow.ly/DNSKEY
	Received 921 bytes from 62.68.42.9
	;; Response received from [62.68.42.9] 921 octets ;; HEADER SECTION ;; id = 46356 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 8 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; ow.ly. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (8 records) ow.ly. 86400 IN NS ns-795.awsdns-35.net. ow.ly. 86400 IN NS ns-133.awsdns-16.com. ow.ly. 86400 IN NS ns-1603.awsdns-08.co.uk. ow.ly. 86400 IN NS ns-1454.awsdns-53.org. CMA8AGDGI6KCLAESELJBARAV4OE8HP0E.ly. 600 IN NSEC3 ( 1 1 0 57026d3a d1vf56mj3alg0nkkn4jtaiu2nupm8qco NS SOA TXT RRSIG DNSKEY NSEC3PARAM ) CMA8AGDGI6KCLAESELJBARAV4OE8HP0E.ly. 600 IN RRSIG ( NSEC3 8 2 600 20250930030000 20250913030000 49200 ly. AJjkPEDhcgQosvZC33Wl9RatCYWDXnT2XsafEPKwmhjZbWRib6r1gQfCVucDxphLbYaDLUYdoJLg lbynQQAtXgFcfDEB3AKiumpiS22ZrohISSm5ZmeOIeLzWSIZJh3CGsJWd2MtexigksQVbcVJRNui 5FSQkF7NSs2ehRhZ26nowOAnod2VAN85BvLVJKCwGUO/mWw2jHUn/Eq37UpbsfEJ6JFelrfxr/r+ NynUhnD6MQJtUgMibrGYtxMYHY1u0lxjXXHdG2Z2UoEUXB64Rn+Ip79B6Y9SzXBr1jD3Jii8w/Wi ZRMA9sDcMlQlWYYyq3h9X/09P1Dwp2qUI1bqNw== ) K79C20L174I4MTE20LGSKGE1G12HV0SI.ly. 600 IN NSEC3 ( 1 1 0 57026d3a krbpivlh4mvvtsqfbcotat4cd8sg92n7 NS DS RRSIG ) K79C20L174I4MTE20LGSKGE1G12HV0SI.ly. 600 IN RRSIG ( NSEC3 8 2 600 20250930030000 20250913030000 49200 ly. rVGTR8fFu9xBwXZ25k8WcRoJVktqSEedfH6LWUmnywNc6iFMkfMtjRdEPJcN72IqnHuA1u8wTi9G HVpjzmi/HO04QMKJiyNpfbiqOPIdgZsW8Sex8HxfJVkLkuOc7B4nwSCgqXyQGnqvEO64OhT5Wd3W qkNQhOEgkWv/Ql+HwKhFo2zCP/a0thFaD9f+em6Ydn8o/MtgFALg6huAGzpu5vO41HtDQ5RTCRW7 miVYohSoV0SavhYOMfaW8YcEikw5GL/9ULxMifTgu2uP6HsUi9K9l1nltH+TZRI1IDrPB0scs3+W iFTvL2AssM7Qww7AqDM/nb1oUW0FBFPhK1MaIA== ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found child zone ow.ly

ow.ly

	Checking DS between ly and ow.ly
	Query to phloem.uoregon.edu for ow.ly/DS
	Received 1129 bytes from 128.223.32.35
	;; Response received from [128.223.32.35] 1129 octets ;; HEADER SECTION ;; id = 30711 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 6 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; ow.ly. IN DS ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (6 records) CMA8AGDGI6KCLAESELJBARAV4OE8HP0E.ly. 600 IN NSEC3 ( 1 1 0 57026d3a d1vf56mj3alg0nkkn4jtaiu2nupm8qco NS SOA TXT RRSIG DNSKEY NSEC3PARAM ) CMA8AGDGI6KCLAESELJBARAV4OE8HP0E.ly. 600 IN RRSIG ( NSEC3 8 2 600 20250930030000 20250913030000 49200 ly. AJjkPEDhcgQosvZC33Wl9RatCYWDXnT2XsafEPKwmhjZbWRib6r1gQfCVucDxphLbYaDLUYdoJLg lbynQQAtXgFcfDEB3AKiumpiS22ZrohISSm5ZmeOIeLzWSIZJh3CGsJWd2MtexigksQVbcVJRNui 5FSQkF7NSs2ehRhZ26nowOAnod2VAN85BvLVJKCwGUO/mWw2jHUn/Eq37UpbsfEJ6JFelrfxr/r+ NynUhnD6MQJtUgMibrGYtxMYHY1u0lxjXXHdG2Z2UoEUXB64Rn+Ip79B6Y9SzXBr1jD3Jii8w/Wi ZRMA9sDcMlQlWYYyq3h9X/09P1Dwp2qUI1bqNw== ) ly. 600 IN SOA ( dns.lttnet.net. khaleds.lttnet.net. 2025091602 ;serial 3600 ;refresh 900 ;retry 604800 ;expire 600 ;minimum ) ly. 600 IN RRSIG ( SOA 8 1 3600 20250930030000 20250913030000 49200 ly. 1QhOyOUFr8Ms6I9MMe3SC7ufQw5p9wUf7DtNATvN7c66s38QjhZg8exTzurfI3aCotnHBjGgwT+m 8g1yVrVBl+hvjQqsRjXrXiYCBHyz/wjZ81vGXerWVxxQ8J4zHTvQJkKFCImo50TsoV/V/RQIUi6h aKmaSRxgWlMzFvNTLF8Sxc21peWPzrlSV5pbKT7XOYDWgp0KbiQKAKsO3lF3joOuQJLKsGpU1TeB cTAvVraauB6S4q9KW5W5f8U5bNHcbtG4ScZ1jjBRL2U3YXqxfujWl3VnrTRyME4upK49sTSvSl74 n4YIWuuwf7tg/upzIuJykGyN6DB3f4NobgVKxA== ) K79C20L174I4MTE20LGSKGE1G12HV0SI.ly. 600 IN NSEC3 ( 1 1 0 57026d3a krbpivlh4mvvtsqfbcotat4cd8sg92n7 NS DS RRSIG ) K79C20L174I4MTE20LGSKGE1G12HV0SI.ly. 600 IN RRSIG ( NSEC3 8 2 600 20250930030000 20250913030000 49200 ly. rVGTR8fFu9xBwXZ25k8WcRoJVktqSEedfH6LWUmnywNc6iFMkfMtjRdEPJcN72IqnHuA1u8wTi9G HVpjzmi/HO04QMKJiyNpfbiqOPIdgZsW8Sex8HxfJVkLkuOc7B4nwSCgqXyQGnqvEO64OhT5Wd3W qkNQhOEgkWv/Ql+HwKhFo2zCP/a0thFaD9f+em6Ydn8o/MtgFALg6huAGzpu5vO41HtDQ5RTCRW7 miVYohSoV0SavhYOMfaW8YcEikw5GL/9ULxMifTgu2uP6HsUi9K9l1nltH+TZRI1IDrPB0scs3+W iFTvL2AssM7Qww7AqDM/nb1oUW0FBFPhK1MaIA== ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	No DS records found for ow.ly in the ly zone
	Query to ns-133.awsdns-16.com for ow.ly/DNSKEY
	Received 118 bytes from 205.251.192.133
	;; Response received from [205.251.192.133] 118 octets ;; HEADER SECTION ;; id = 2819 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 1 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 1 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; ow.ly. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (1 record) ow.ly. 900 IN SOA ( ns-795.awsdns-35.net. awsdns-hostmaster.amazon.com. 1 ;serial 7200 ;refresh 900 ;retry 1209600 ;expire 86400 ;minimum ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	No DNSKEY records found
	Query to ns-1603.awsdns-08.co.uk for ow.ly/A
	Received 222 bytes from 205.251.198.67
	;; Response received from [205.251.198.67] 222 octets ;; HEADER SECTION ;; id = 14377 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 1 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 3 ;; nscount = 4 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; ow.ly. IN A ;; ANSWER SECTION (3 records) ow.ly. 60 IN A 3.221.93.183 ow.ly. 60 IN A 35.170.24.84 ow.ly. 60 IN A 54.205.184.222 ;; AUTHORITY SECTION (4 records) ow.ly. 172800 IN NS ns-133.awsdns-16.com. ow.ly. 172800 IN NS ns-1454.awsdns-53.org. ow.ly. 172800 IN NS ns-1603.awsdns-08.co.uk. ow.ly. 172800 IN NS ns-795.awsdns-35.net. ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	ns-1603.awsdns-08.co.uk is authoritative for ow.ly
	Query to ns-1454.awsdns-53.org for ow.ly/SOA
	Received 235 bytes from 205.251.197.174
	;; Response received from [205.251.197.174] 235 octets ;; HEADER SECTION ;; id = 27669 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 1 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 1 ;; nscount = 4 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; ow.ly. IN SOA ;; ANSWER SECTION (1 record) ow.ly. 900 IN SOA ( ns-795.awsdns-35.net. awsdns-hostmaster.amazon.com. 1 ;serial 7200 ;refresh 900 ;retry 1209600 ;expire 86400 ;minimum ) ;; AUTHORITY SECTION (4 records) ow.ly. 172800 IN NS ns-133.awsdns-16.com. ow.ly. 172800 IN NS ns-1454.awsdns-53.org. ow.ly. 172800 IN NS ns-1603.awsdns-08.co.uk. ow.ly. 172800 IN NS ns-795.awsdns-35.net. ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Query to ns-795.awsdns-35.net for ow.ly/SOA
	Received 235 bytes from 205.251.195.27
	;; Response received from [205.251.195.27] 235 octets ;; HEADER SECTION ;; id = 26297 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 1 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 1 ;; nscount = 4 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; ow.ly. IN SOA ;; ANSWER SECTION (1 record) ow.ly. 900 IN SOA ( ns-795.awsdns-35.net. awsdns-hostmaster.amazon.com. 1 ;serial 7200 ;refresh 900 ;retry 1209600 ;expire 86400 ;minimum ) ;; AUTHORITY SECTION (4 records) ow.ly. 172800 IN NS ns-133.awsdns-16.com. ow.ly. 172800 IN NS ns-1454.awsdns-53.org. ow.ly. 172800 IN NS ns-1603.awsdns-08.co.uk. ow.ly. 172800 IN NS ns-795.awsdns-35.net. ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Query to ns-133.awsdns-16.com for ow.ly/SOA
	Received 235 bytes from 205.251.192.133
	;; Response received from [205.251.192.133] 235 octets ;; HEADER SECTION ;; id = 6466 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 1 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 1 ;; nscount = 4 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; ow.ly. IN SOA ;; ANSWER SECTION (1 record) ow.ly. 900 IN SOA ( ns-795.awsdns-35.net. awsdns-hostmaster.amazon.com. 1 ;serial 7200 ;refresh 900 ;retry 1209600 ;expire 86400 ;minimum ) ;; AUTHORITY SECTION (4 records) ow.ly. 172800 IN NS ns-133.awsdns-16.com. ow.ly. 172800 IN NS ns-1454.awsdns-53.org. ow.ly. 172800 IN NS ns-1603.awsdns-08.co.uk. ow.ly. 172800 IN NS ns-795.awsdns-35.net. ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Query to ns-1603.awsdns-08.co.uk for ow.ly/A
	Received 222 bytes from 205.251.198.67
	;; Response received from [205.251.198.67] 222 octets ;; HEADER SECTION ;; id = 47735 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 1 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 3 ;; nscount = 4 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; ow.ly. IN A ;; ANSWER SECTION (3 records) ow.ly. 60 IN A 54.205.184.222 ow.ly. 60 IN A 35.170.24.84 ow.ly. 60 IN A 3.221.93.183 ;; AUTHORITY SECTION (4 records) ow.ly. 172800 IN NS ns-133.awsdns-16.com. ow.ly. 172800 IN NS ns-1454.awsdns-53.org. ow.ly. 172800 IN NS ns-1603.awsdns-08.co.uk. ow.ly. 172800 IN NS ns-795.awsdns-35.net. ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	ow.ly A RR has value 54.205.184.222
	ow.ly A RR has value 35.170.24.84
	ow.ly A RR has value 3.221.93.183
	No RRSIGs found

ow.ly

	Query to ns-1454.awsdns-53.org for ow.ly/A
	Received 222 bytes from 205.251.197.174
	;; Response received from [205.251.197.174] 222 octets ;; HEADER SECTION ;; id = 51463 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 1 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 3 ;; nscount = 4 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; ow.ly. IN A ;; ANSWER SECTION (3 records) ow.ly. 60 IN A 35.170.24.84 ow.ly. 60 IN A 54.205.184.222 ow.ly. 60 IN A 3.221.93.183 ;; AUTHORITY SECTION (4 records) ow.ly. 172800 IN NS ns-133.awsdns-16.com. ow.ly. 172800 IN NS ns-1454.awsdns-53.org. ow.ly. 172800 IN NS ns-1603.awsdns-08.co.uk. ow.ly. 172800 IN NS ns-795.awsdns-35.net. ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	ns-1454.awsdns-53.org is authoritative for ow.ly
	Query to ns-1454.awsdns-53.org for ow.ly/A
	Received 222 bytes from 205.251.197.174
	;; Response received from [205.251.197.174] 222 octets ;; HEADER SECTION ;; id = 31526 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 1 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 3 ;; nscount = 4 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; ow.ly. IN A ;; ANSWER SECTION (3 records) ow.ly. 60 IN A 35.170.24.84 ow.ly. 60 IN A 54.205.184.222 ow.ly. 60 IN A 3.221.93.183 ;; AUTHORITY SECTION (4 records) ow.ly. 172800 IN NS ns-133.awsdns-16.com. ow.ly. 172800 IN NS ns-1454.awsdns-53.org. ow.ly. 172800 IN NS ns-1603.awsdns-08.co.uk. ow.ly. 172800 IN NS ns-795.awsdns-35.net. ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	ow.ly A RR has value 35.170.24.84
	ow.ly A RR has value 54.205.184.222
	ow.ly A RR has value 3.221.93.183
	No RRSIGs found

ow.ly

	Query to ns-133.awsdns-16.com for ow.ly/A
	Received 222 bytes from 205.251.192.133
	;; Response received from [205.251.192.133] 222 octets ;; HEADER SECTION ;; id = 1448 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 1 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 3 ;; nscount = 4 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; ow.ly. IN A ;; ANSWER SECTION (3 records) ow.ly. 60 IN A 3.221.93.183 ow.ly. 60 IN A 35.170.24.84 ow.ly. 60 IN A 54.205.184.222 ;; AUTHORITY SECTION (4 records) ow.ly. 172800 IN NS ns-133.awsdns-16.com. ow.ly. 172800 IN NS ns-1454.awsdns-53.org. ow.ly. 172800 IN NS ns-1603.awsdns-08.co.uk. ow.ly. 172800 IN NS ns-795.awsdns-35.net. ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	ns-133.awsdns-16.com is authoritative for ow.ly
	Query to ns-133.awsdns-16.com for ow.ly/A
	Received 222 bytes from 205.251.192.133
	;; Response received from [205.251.192.133] 222 octets ;; HEADER SECTION ;; id = 16014 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 1 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 3 ;; nscount = 4 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; ow.ly. IN A ;; ANSWER SECTION (3 records) ow.ly. 60 IN A 35.170.24.84 ow.ly. 60 IN A 54.205.184.222 ow.ly. 60 IN A 3.221.93.183 ;; AUTHORITY SECTION (4 records) ow.ly. 172800 IN NS ns-133.awsdns-16.com. ow.ly. 172800 IN NS ns-1454.awsdns-53.org. ow.ly. 172800 IN NS ns-1603.awsdns-08.co.uk. ow.ly. 172800 IN NS ns-795.awsdns-35.net. ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	ow.ly A RR has value 35.170.24.84
	ow.ly A RR has value 54.205.184.222
	ow.ly A RR has value 3.221.93.183
	No RRSIGs found

ow.ly

	Query to ns-795.awsdns-35.net for ow.ly/A
	Received 222 bytes from 205.251.195.27
	;; Response received from [205.251.195.27] 222 octets ;; HEADER SECTION ;; id = 46052 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 1 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 3 ;; nscount = 4 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; ow.ly. IN A ;; ANSWER SECTION (3 records) ow.ly. 60 IN A 54.205.184.222 ow.ly. 60 IN A 35.170.24.84 ow.ly. 60 IN A 3.221.93.183 ;; AUTHORITY SECTION (4 records) ow.ly. 172800 IN NS ns-133.awsdns-16.com. ow.ly. 172800 IN NS ns-1454.awsdns-53.org. ow.ly. 172800 IN NS ns-1603.awsdns-08.co.uk. ow.ly. 172800 IN NS ns-795.awsdns-35.net. ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	ns-795.awsdns-35.net is authoritative for ow.ly
	Query to ns-795.awsdns-35.net for ow.ly/A
	Received 222 bytes from 205.251.195.27
	;; Response received from [205.251.195.27] 222 octets ;; HEADER SECTION ;; id = 21357 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 1 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 3 ;; nscount = 4 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; ow.ly. IN A ;; ANSWER SECTION (3 records) ow.ly. 60 IN A 35.170.24.84 ow.ly. 60 IN A 54.205.184.222 ow.ly. 60 IN A 3.221.93.183 ;; AUTHORITY SECTION (4 records) ow.ly. 172800 IN NS ns-133.awsdns-16.com. ow.ly. 172800 IN NS ns-1454.awsdns-53.org. ow.ly. 172800 IN NS ns-1603.awsdns-08.co.uk. ow.ly. 172800 IN NS ns-795.awsdns-35.net. ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	ow.ly A RR has value 35.170.24.84
	ow.ly A RR has value 54.205.184.222
	ow.ly A RR has value 3.221.93.183
	No RRSIGs found

Move your mouse over any or symbols for remediation hints.

Want a second opinion? Test ow.ly at dnsviz.net.

DNSSEC Debugger

↓ Advanced options ↑ Advanced options

Trust Anchor:
Name Servers: