Back to Verisign Labs Tools
Domain Name: Detail: more(+) / less(-) Time: 2024-05-13 00:59:24 UTC

Analyzing DNSSEC problems for www.paypal.com

.
Found 2 DNSKEY records for .
DS=20326/SHA-256 verifies DNSKEY=20326/SEP
Found 1 RRSIGs over DNSKEY RRset
RRSIG=20326 and DNSKEY=20326/SEP verifies the DNSKEY RRset
com
Found 1 DS records for com in the . zone
DS=19718/SHA-256 has algorithm ECDSAP256SHA256
Found 1 RRSIGs over DS RRset
RRSIG=5613 and DNSKEY=5613 verifies the DS RRset
Found 2 DNSKEY records for com
DS=19718/SHA-256 verifies DNSKEY=19718/SEP
Found 1 RRSIGs over DNSKEY RRset
RRSIG=19718 and DNSKEY=19718/SEP verifies the DNSKEY RRset
paypal.com
Found 1 DS records for paypal.com in the com zone
DS=34800/SHA-256 has algorithm ECDSAP256SHA256
Found 1 RRSIGs over DS RRset
RRSIG=956 and DNSKEY=956 verifies the DS RRset
Found 3 DNSKEY records for paypal.com
DS=34800/SHA-256 verifies DNSKEY=34800/SEP
Found 2 RRSIGs over DNSKEY RRset
RRSIG=34800 and DNSKEY=34800/SEP verifies the DNSKEY RRset
ns1.p57.dynect.net is authoritative for www.paypal.com
www.paypal.com is a CNAME to www.glb.paypal.com
Found 1 RRSIGs over CNAME RRset
RRSIG=34636 and DNSKEY=34636 verifies the CNAME RRset
glb.paypal.com
Found 1 DS records for glb.paypal.com in the paypal.com zone
DS=48553/SHA-256 has algorithm ECDSAP256SHA256
Found 1 RRSIGs over DS RRset
RRSIG=34636 and DNSKEY=34636 verifies the DS RRset
Found 3 DNSKEY records for glb.paypal.com
DS=48553/SHA-256 verifies DNSKEY=48553/SEP
Found 1 RRSIGs over DNSKEY RRset
RRSIG=48553 and DNSKEY=48553/SEP verifies the DNSKEY RRset
ns01.glb.paypalinc.com is authoritative for www.glb.paypal.com
www.glb.paypal.com is a CNAME to paypal-dynamic.map.fastly.net
Found 1 RRSIGs over CNAME RRset
RRSIG=4054 and DNSKEY=4054 verifies the CNAME RRset
.
net
Found 1 DS records for net in the . zone
DS=37331/SHA-256 has algorithm ECDSAP256SHA256
Found 1 RRSIGs over DS RRset
RRSIG=5613 and DNSKEY=5613 verifies the DS RRset
Found 2 DNSKEY records for net
DS=37331/SHA-256 verifies DNSKEY=37331/SEP
Found 1 RRSIGs over DNSKEY RRset
RRSIG=37331 and DNSKEY=37331/SEP verifies the DNSKEY RRset
fastly.net
No DS records found for fastly.net in the net zone
No DNSKEY records found
ns4.fastly.net is authoritative for paypal-dynamic.map.fastly.net
paypal-dynamic.map.fastly.net A RR has value 146.75.77.21
No RRSIGs found
fastly.net
ns2.fastly.net is authoritative for paypal-dynamic.map.fastly.net
paypal-dynamic.map.fastly.net A RR has value 146.75.77.21
No RRSIGs found
fastly.net
ns1.fastly.net is authoritative for paypal-dynamic.map.fastly.net
paypal-dynamic.map.fastly.net A RR has value 151.101.45.21
No RRSIGs found
fastly.net
ns3.fastly.net is authoritative for paypal-dynamic.map.fastly.net
paypal-dynamic.map.fastly.net A RR has value 151.101.45.21
No RRSIGs found

Move your mouse over any or symbols for remediation hints.

Want a second opinion? Test www.paypal.com at dnsviz.net.

DNSSEC Debugger

↓ Advanced options