DNSSEC Debugger - xyzulu.hosting

Domain Name:

Time: 2026-03-14 06:01:52 UTC

Analyzing DNSSEC problems for xyzulu.hosting

DS=20326/SHA-256 is now in the chain-of-trust

	Checking DS between Trust Anchor and .
	`. IN DS ( 20326 8 2 e06d44b80b8f1d39a95c0b0d7c65d08458e880409bbc683457104237c7f8ec8d )`
	Query to i.root-servers.net for ./DNSKEY
	Received 1139 bytes from 192.36.148.17
	;; Response received from [192.36.148.17] 1139 octets ;; HEADER SECTION ;; id = 52198 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 4 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; . IN DNSKEY ;; ANSWER SECTION (4 records) . 172800 IN DNSKEY ( 257 3 8 AwEAAa96jeuknZlaeSrvyAJj6ZHv28hhOKkx3rLGXVaC6rXTsDc449/cidltpkyGwCJNnOAlFNKF 2jBosZBU5eeHspaQWOmOElZsjICMQMC3aeHbGiShvZsx4wMYSjH8e7Vrhbu6irwCzVBApESjbUdp WWmEnhathWu1jo+siFUiRAAxm9qyJNg/wOZqqzL/dL/q8PkcRU5oUKEpUge71M3ej2/7CPqpdVwu MoTvoB+ZOT4YeGyxMvHmbrxlFzGOHOijtzN+u1TQNatX2XBuzZNQ1K+s2CXkPIZo7s6JgZyvaBev YtxPvYLw4z9mR7K2vaF18UYH9Z9GNUUeayffKC73PYc= ) ; keytag 38696 . 172800 IN DNSKEY ( 256 3 8 AwEAAbNTVC2+pry4pc37pZI9Oj6b8FHxT3VGrvSPKLE1Tjyfe2kUZUtVX5xrv6AV4BVO+ygrYjGZ MNgEnbLU4zknnlnhI2e0g6iTza1aZh0dRZXGH16C1NUNq1CxBkUhIYQhQDeIOtLacx+RmFTc+hSH JJ2MJ79IS00kA7eKi6mofQ7SPJmdJVjI+JAx791y0f5QaB+iHGANU53FwiYXNUQjfAzCrtOaSevG sx8SO8BTaXLAjFq5eewOtwScVwfVDhEXlvpE6e+mIncwhNKaMRD9IPuHENqCNPI5MjxfAMVS6cEY 8eEozIkv/vHc+0Auu3n+Fcx6F2Js4KPXaHEShAXugfU= ) ; keytag 21831 . 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; keytag 20326 . 172800 IN RRSIG ( DNSKEY 8 0 172800 20260402000000 20260312000000 20326 . hcmCK2q88XH00Hynv8IgIMVTKrwyb8Lh/uvRpqBPMALNQunyrS+VKrlKb6rBQTFnGHeVR/jj3Eay Uuxv4fy2evliMYKLrfTHtdqD3oUvJMnwmxEMmhS84Ttw+bbTcHeYxb52NFiYVHKb37Y0OWN4lr0p V+3fwFtWumb1NlWZDMNsaHFv6UIdxgUGNBVEyUaTAK6E2jseQcoqv6A0rNxCG+xtz2zSpRV2JM1g dC8zVAcc068OamqrwZlzKqsqAgXP78NOERrFkzffoRaSEmOORcAQpUdCK265DL1Y7Xeq0QaNEKd2 fXglm/IxS+4sMPT+83Q/XasxUu5C3d0qEz76fw== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 3 DNSKEY records for .
	`. 172800 IN DNSKEY ( 257 3 8 AwEAAa96jeuknZlaeSrvyAJj6ZHv28hhOKkx3rLGXVaC6rXTsDc449/cidltpkyGwCJNnOAlFNKF 2jBosZBU5eeHspaQWOmOElZsjICMQMC3aeHbGiShvZsx4wMYSjH8e7Vrhbu6irwCzVBApESjbUdp WWmEnhathWu1jo+siFUiRAAxm9qyJNg/wOZqqzL/dL/q8PkcRU5oUKEpUge71M3ej2/7CPqpdVwu MoTvoB+ZOT4YeGyxMvHmbrxlFzGOHOijtzN+u1TQNatX2XBuzZNQ1K+s2CXkPIZo7s6JgZyvaBev YtxPvYLw4z9mR7K2vaF18UYH9Z9GNUUeayffKC73PYc= ) ; keytag 38696`
	`. 172800 IN DNSKEY ( 256 3 8 AwEAAbNTVC2+pry4pc37pZI9Oj6b8FHxT3VGrvSPKLE1Tjyfe2kUZUtVX5xrv6AV4BVO+ygrYjGZ MNgEnbLU4zknnlnhI2e0g6iTza1aZh0dRZXGH16C1NUNq1CxBkUhIYQhQDeIOtLacx+RmFTc+hSH JJ2MJ79IS00kA7eKi6mofQ7SPJmdJVjI+JAx791y0f5QaB+iHGANU53FwiYXNUQjfAzCrtOaSevG sx8SO8BTaXLAjFq5eewOtwScVwfVDhEXlvpE6e+mIncwhNKaMRD9IPuHENqCNPI5MjxfAMVS6cEY 8eEozIkv/vHc+0Auu3n+Fcx6F2Js4KPXaHEShAXugfU= ) ; keytag 21831`
	`. 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; keytag 20326`
	DNSKEY=20326/SEP is now in the chain-of-trust
	DS=20326/SHA-256 verifies DNSKEY=20326/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`. 172800 IN RRSIG ( DNSKEY 8 0 172800 20260402000000 20260312000000 20326 . hcmCK2q88XH00Hynv8IgIMVTKrwyb8Lh/uvRpqBPMALNQunyrS+VKrlKb6rBQTFnGHeVR/jj3Eay Uuxv4fy2evliMYKLrfTHtdqD3oUvJMnwmxEMmhS84Ttw+bbTcHeYxb52NFiYVHKb37Y0OWN4lr0p V+3fwFtWumb1NlWZDMNsaHFv6UIdxgUGNBVEyUaTAK6E2jseQcoqv6A0rNxCG+xtz2zSpRV2JM1g dC8zVAcc068OamqrwZlzKqsqAgXP78NOERrFkzffoRaSEmOORcAQpUdCK265DL1Y7Xeq0QaNEKd2 fXglm/IxS+4sMPT+83Q/XasxUu5C3d0qEz76fw== )`
	RRSIG=20326 and DNSKEY=20326/SEP verifies the DNSKEY RRset
	DNSKEY=38696/SEP is now in the chain-of-trust
	DNSKEY=21831 is now in the chain-of-trust
	Query to m.root-servers.net for xyzulu.hosting/A
	Received 629 bytes from 202.12.27.33
	;; Response received from [202.12.27.33] 629 octets ;; HEADER SECTION ;; id = 55564 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 6 arcount = 9 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; xyzulu.hosting. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (6 records) hosting. 172800 IN NS c.nic.hosting. hosting. 172800 IN NS d.nic.hosting. hosting. 172800 IN NS a.nic.hosting. hosting. 172800 IN NS b.nic.hosting. hosting. 86400 IN DS ( 52534 13 2 38a38b0f45035c80e0b34bdc83bcae96113866ed2e5321486dbcb4b981303b01 ) hosting. 86400 IN RRSIG ( DS 8 1 86400 20260327050000 20260314040000 21831 . k77oOwfItdSKDL3qjb1Cc9xN2B69usaW54+uqQMrImHDqd59tmzHTNcXwSAN5BeFd7EioI/i7NjY Qt1NCDvWkYOXbSn8kUpFCGkGqRQLhqRDvc/CiilSIAvdWs3oq0W6hghjOaSrcFF9bw7EVD6ZNswZ HnfdmLZKihsmJPB3kfgJNFfx4B9fLhHHZSGrDynnNop04k+yWAW6bwF8LU0EkD38Os5iIhnS9N18 qk7+VokZuyPPUmiRvsw1eBqM2jtDcCmDUYE74jscSK+T66BhDg+RngpuKt6sd7meEaAvQMG9P/48 nnTKybHctOAr+/545JXTEBJxjzL4Y9uakH5UAA== ) ;; ADDITIONAL SECTION (9 records) d.nic.hosting. 172800 IN A 212.18.249.152 c.nic.hosting. 172800 IN A 212.18.248.152 b.nic.hosting. 172800 IN A 185.24.64.152 a.nic.hosting. 172800 IN A 194.169.218.152 d.nic.hosting. 172800 IN AAAA 2a04:2b00:13ff::152 c.nic.hosting. 172800 IN AAAA 2a04:2b00:13ee::152 b.nic.hosting. 172800 IN AAAA 2a04:2b00:13cc::1:152 a.nic.hosting. 172800 IN AAAA 2001:67c:13cc::1:152 ;; { "EDNS-VERSION": 0 }
	Query to b.root-servers.net for hosting/DNSKEY
	Received 615 bytes from 170.247.170.2
	;; Response received from [170.247.170.2] 615 octets ;; HEADER SECTION ;; id = 22546 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 6 arcount = 9 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; hosting. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (6 records) hosting. 172800 IN NS a.nic.hosting. hosting. 172800 IN NS b.nic.hosting. hosting. 172800 IN NS c.nic.hosting. hosting. 172800 IN NS d.nic.hosting. hosting. 86400 IN DS ( 52534 13 2 38a38b0f45035c80e0b34bdc83bcae96113866ed2e5321486dbcb4b981303b01 ) hosting. 86400 IN RRSIG ( DS 8 1 86400 20260327050000 20260314040000 21831 . k77oOwfItdSKDL3qjb1Cc9xN2B69usaW54+uqQMrImHDqd59tmzHTNcXwSAN5BeFd7EioI/i7NjY Qt1NCDvWkYOXbSn8kUpFCGkGqRQLhqRDvc/CiilSIAvdWs3oq0W6hghjOaSrcFF9bw7EVD6ZNswZ HnfdmLZKihsmJPB3kfgJNFfx4B9fLhHHZSGrDynnNop04k+yWAW6bwF8LU0EkD38Os5iIhnS9N18 qk7+VokZuyPPUmiRvsw1eBqM2jtDcCmDUYE74jscSK+T66BhDg+RngpuKt6sd7meEaAvQMG9P/48 nnTKybHctOAr+/545JXTEBJxjzL4Y9uakH5UAA== ) ;; ADDITIONAL SECTION (9 records) a.nic.hosting. 172800 IN A 194.169.218.152 a.nic.hosting. 172800 IN AAAA 2001:67c:13cc::1:152 b.nic.hosting. 172800 IN A 185.24.64.152 b.nic.hosting. 172800 IN AAAA 2a04:2b00:13cc::1:152 c.nic.hosting. 172800 IN A 212.18.248.152 c.nic.hosting. 172800 IN AAAA 2a04:2b00:13ee::152 d.nic.hosting. 172800 IN A 212.18.249.152 d.nic.hosting. 172800 IN AAAA 2a04:2b00:13ff::152 ;; { "EDNS-VERSION": 0 }
	Found child zone hosting

hosting

	Checking DS between . and hosting
	Query to m.root-servers.net for hosting/DS
	Received 371 bytes from 202.12.27.33
	;; Response received from [202.12.27.33] 371 octets ;; HEADER SECTION ;; id = 46548 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; hosting. IN DS ;; ANSWER SECTION (2 records) hosting. 86400 IN DS ( 52534 13 2 38a38b0f45035c80e0b34bdc83bcae96113866ed2e5321486dbcb4b981303b01 ) hosting. 86400 IN RRSIG ( DS 8 1 86400 20260327050000 20260314040000 21831 . k77oOwfItdSKDL3qjb1Cc9xN2B69usaW54+uqQMrImHDqd59tmzHTNcXwSAN5BeFd7EioI/i7NjY Qt1NCDvWkYOXbSn8kUpFCGkGqRQLhqRDvc/CiilSIAvdWs3oq0W6hghjOaSrcFF9bw7EVD6ZNswZ HnfdmLZKihsmJPB3kfgJNFfx4B9fLhHHZSGrDynnNop04k+yWAW6bwF8LU0EkD38Os5iIhnS9N18 qk7+VokZuyPPUmiRvsw1eBqM2jtDcCmDUYE74jscSK+T66BhDg+RngpuKt6sd7meEaAvQMG9P/48 nnTKybHctOAr+/545JXTEBJxjzL4Y9uakH5UAA== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 1 DS records for hosting in the . zone
	DS=52534/SHA-256 has algorithm ECDSAP256SHA256
	Found 1 RRSIGs over DS RRset
	`hosting. 86400 IN RRSIG ( DS 8 1 86400 20260327050000 20260314040000 21831 . k77oOwfItdSKDL3qjb1Cc9xN2B69usaW54+uqQMrImHDqd59tmzHTNcXwSAN5BeFd7EioI/i7NjY Qt1NCDvWkYOXbSn8kUpFCGkGqRQLhqRDvc/CiilSIAvdWs3oq0W6hghjOaSrcFF9bw7EVD6ZNswZ HnfdmLZKihsmJPB3kfgJNFfx4B9fLhHHZSGrDynnNop04k+yWAW6bwF8LU0EkD38Os5iIhnS9N18 qk7+VokZuyPPUmiRvsw1eBqM2jtDcCmDUYE74jscSK+T66BhDg+RngpuKt6sd7meEaAvQMG9P/48 nnTKybHctOAr+/545JXTEBJxjzL4Y9uakH5UAA== )`
	RRSIG=21831 and DNSKEY=21831 verifies the DS RRset
	DS=52534/SHA-256 is now in the chain-of-trust
	`hosting. 86400 IN DS ( 52534 13 2 38a38b0f45035c80e0b34bdc83bcae96113866ed2e5321486dbcb4b981303b01 )`
	Query to b.nic.hosting for hosting/DNSKEY
	Received 299 bytes from 185.24.64.152
	;; Response received from [185.24.64.152] 299 octets ;; HEADER SECTION ;; id = 40001 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 3 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; hosting. IN DNSKEY ;; ANSWER SECTION (3 records) hosting. 3600 IN DNSKEY ( 256 3 13 UCk3OX3eSleH0MperH3YXVWA89zcafvDF4v+x0e+D8qkc5jEcybLH2uFhNvEpJuorcuqpEna4whx GpjoyB//EQ== ) ; keytag 56523 hosting. 3600 IN DNSKEY ( 257 3 13 uPF1HOdgfjFgJLZad1aQ24mztV6XjiNli4Kv2PY3ghmwWpiYXS2Gs46WlF+5ASEAnCHfv7VLOSWS JWC++HjpqA== ) ; keytag 52534 hosting. 3600 IN RRSIG ( DNSKEY 13 1 3600 20260411131223 20260312114223 52534 hosting. C206rE9ImyVKKUcGiON8L6CBMNXwl2PaRdPnlLkB5tW/oYqyxWjzj/KbV1imL6tazE1SAB1OaBgg GHRnLvo4yw== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 2 DNSKEY records for hosting
	`hosting. 3600 IN DNSKEY ( 256 3 13 UCk3OX3eSleH0MperH3YXVWA89zcafvDF4v+x0e+D8qkc5jEcybLH2uFhNvEpJuorcuqpEna4whx GpjoyB//EQ== ) ; keytag 56523`
	`hosting. 3600 IN DNSKEY ( 257 3 13 uPF1HOdgfjFgJLZad1aQ24mztV6XjiNli4Kv2PY3ghmwWpiYXS2Gs46WlF+5ASEAnCHfv7VLOSWS JWC++HjpqA== ) ; keytag 52534`
	DNSKEY=52534/SEP is now in the chain-of-trust
	DS=52534/SHA-256 verifies DNSKEY=52534/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`hosting. 3600 IN RRSIG ( DNSKEY 13 1 3600 20260411131223 20260312114223 52534 hosting. C206rE9ImyVKKUcGiON8L6CBMNXwl2PaRdPnlLkB5tW/oYqyxWjzj/KbV1imL6tazE1SAB1OaBgg GHRnLvo4yw== )`
	RRSIG=52534 and DNSKEY=52534/SEP verifies the DNSKEY RRset
	DNSKEY=56523 is now in the chain-of-trust
	Query to d.nic.hosting for xyzulu.hosting/A
	Received 249 bytes from 212.18.249.152
	;; Response received from [212.18.249.152] 249 octets ;; HEADER SECTION ;; id = 22991 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 4 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; xyzulu.hosting. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (4 records) xyzulu.hosting. 3600 IN NS igor.ns.cloudflare.com. xyzulu.hosting. 3600 IN NS jill.ns.cloudflare.com. xyzulu.hosting. 3600 IN DS ( 2371 13 2 accd91d301fc115eeb65494d9a67fb16fb91898f475620f190643b47113f17e0 ) xyzulu.hosting. 3600 IN RRSIG ( DS 13 2 3600 20260411150149 20260312133149 56523 hosting. NWFpHt4ccbhbFC4EEOlRKH5tEE+NuBuLC0e6nNuMTGovmJWpApVKY/ILVpbUxvUFEPHP5+xjtXIJ aV+xMb7g4g== ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Query to a.nic.hosting for xyzulu.hosting/DNSKEY
	Received 249 bytes from 194.169.218.152
	;; Response received from [194.169.218.152] 249 octets ;; HEADER SECTION ;; id = 38481 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 4 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; xyzulu.hosting. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (4 records) xyzulu.hosting. 3600 IN NS igor.ns.cloudflare.com. xyzulu.hosting. 3600 IN NS jill.ns.cloudflare.com. xyzulu.hosting. 3600 IN DS ( 2371 13 2 accd91d301fc115eeb65494d9a67fb16fb91898f475620f190643b47113f17e0 ) xyzulu.hosting. 3600 IN RRSIG ( DS 13 2 3600 20260411150149 20260312133149 56523 hosting. NWFpHt4ccbhbFC4EEOlRKH5tEE+NuBuLC0e6nNuMTGovmJWpApVKY/ILVpbUxvUFEPHP5+xjtXIJ aV+xMb7g4g== ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found child zone xyzulu.hosting

xyzulu.hosting

	Checking DS between hosting and xyzulu.hosting
	Query to b.nic.hosting for xyzulu.hosting/DS
	Received 194 bytes from 185.24.64.152
	;; Response received from [185.24.64.152] 194 octets ;; HEADER SECTION ;; id = 5589 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; xyzulu.hosting. IN DS ;; ANSWER SECTION (2 records) xyzulu.hosting. 3600 IN DS ( 2371 13 2 accd91d301fc115eeb65494d9a67fb16fb91898f475620f190643b47113f17e0 ) xyzulu.hosting. 3600 IN RRSIG ( DS 13 2 3600 20260411150149 20260312133149 56523 hosting. NWFpHt4ccbhbFC4EEOlRKH5tEE+NuBuLC0e6nNuMTGovmJWpApVKY/ILVpbUxvUFEPHP5+xjtXIJ aV+xMb7g4g== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 1 DS records for xyzulu.hosting in the hosting zone
	DS=2371/SHA-256 has algorithm ECDSAP256SHA256
	Found 1 RRSIGs over DS RRset
	`xyzulu.hosting. 3600 IN RRSIG ( DS 13 2 3600 20260411150149 20260312133149 56523 hosting. NWFpHt4ccbhbFC4EEOlRKH5tEE+NuBuLC0e6nNuMTGovmJWpApVKY/ILVpbUxvUFEPHP5+xjtXIJ aV+xMb7g4g== )`
	RRSIG=56523 and DNSKEY=56523 verifies the DS RRset
	DS=2371/SHA-256 is now in the chain-of-trust
	`xyzulu.hosting. 3600 IN DS ( 2371 13 2 accd91d301fc115eeb65494d9a67fb16fb91898f475620f190643b47113f17e0 )`
	Query to jill.ns.cloudflare.com for xyzulu.hosting/DNSKEY
	Received 313 bytes from 173.245.58.122
	;; Response received from [173.245.58.122] 313 octets ;; HEADER SECTION ;; id = 848 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 3 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; xyzulu.hosting. IN DNSKEY ;; ANSWER SECTION (3 records) xyzulu.hosting. 3600 IN DNSKEY ( 257 3 13 mdsswUyr3DPW132mOi8V9xESWE8jTo0dxCjjnopKl+GqJxpVXckHAeF+KkxLbxILfDLUT0rAK9iU zy1L53eKGQ== ) ; keytag 2371 xyzulu.hosting. 3600 IN DNSKEY ( 256 3 13 oJMRESz5E4gYzS/q6XDrvU1qMPYIjCWzJaOau8XNEZeqCYKD5ar0IRd8KqXXFJkqmVfRvMGPmM1x 8fGAa2XhSA== ) ; keytag 34505 xyzulu.hosting. 3600 IN RRSIG ( DNSKEY 13 2 3600 20260511103737 20260311103737 2371 xyzulu.hosting. YjjndYfk4TjKi2a0bB6BWD+3i/bc4EAZWaWeHY5/d5YcBdHoCJLT4xSLB/sBM9NsOo6jz9tqmimB GmQ33/NyYg== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 2 DNSKEY records for xyzulu.hosting
	`xyzulu.hosting. 3600 IN DNSKEY ( 257 3 13 mdsswUyr3DPW132mOi8V9xESWE8jTo0dxCjjnopKl+GqJxpVXckHAeF+KkxLbxILfDLUT0rAK9iU zy1L53eKGQ== ) ; keytag 2371`
	`xyzulu.hosting. 3600 IN DNSKEY ( 256 3 13 oJMRESz5E4gYzS/q6XDrvU1qMPYIjCWzJaOau8XNEZeqCYKD5ar0IRd8KqXXFJkqmVfRvMGPmM1x 8fGAa2XhSA== ) ; keytag 34505`
	DNSKEY=2371/SEP is now in the chain-of-trust
	DS=2371/SHA-256 verifies DNSKEY=2371/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`xyzulu.hosting. 3600 IN RRSIG ( DNSKEY 13 2 3600 20260511103737 20260311103737 2371 xyzulu.hosting. YjjndYfk4TjKi2a0bB6BWD+3i/bc4EAZWaWeHY5/d5YcBdHoCJLT4xSLB/sBM9NsOo6jz9tqmimB GmQ33/NyYg== )`
	RRSIG=2371 and DNSKEY=2371/SEP verifies the DNSKEY RRset
	DNSKEY=34505 is now in the chain-of-trust
	Query to jill.ns.cloudflare.com for xyzulu.hosting/A
	Received 185 bytes from 173.245.58.122
	;; Response received from [173.245.58.122] 185 octets ;; HEADER SECTION ;; id = 64741 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 3 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; xyzulu.hosting. IN A ;; ANSWER SECTION (3 records) xyzulu.hosting. 300 IN A 104.21.38.235 xyzulu.hosting. 300 IN A 172.67.140.199 xyzulu.hosting. 300 IN RRSIG ( A 13 2 300 20260315070152 20260313050152 34505 xyzulu.hosting. cNOV0zKa50mVAnsegsj2reO7Vv9akA8fUgDarwV6P2yuvxLBOWLh8Qlv3sJY+YWKR6wxs3gu3aKI ARsyWIKBHA== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	jill.ns.cloudflare.com is authoritative for xyzulu.hosting
	Found RRSIG signed by xyzulu.hosting zone
	Query to igor.ns.cloudflare.com for xyzulu.hosting/SOA
	Received 215 bytes from 108.162.193.119
	;; Response received from [108.162.193.119] 215 octets ;; HEADER SECTION ;; id = 40004 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; xyzulu.hosting. IN SOA ;; ANSWER SECTION (2 records) xyzulu.hosting. 1800 IN SOA ( igor.ns.cloudflare.com. dns.cloudflare.com. 2398797562 ;serial 10000 ;refresh 2400 ;retry 604800 ;expire 1800 ;minimum ) xyzulu.hosting. 1800 IN RRSIG ( SOA 13 2 1800 20260315070152 20260313050152 34505 xyzulu.hosting. 4kjbthz5n6taOCRo8reYGXVB4y84rIPA6dR1tLhRKaDljvJoXOiH81QTFExSNNLdGsMZxwJyRJd/ GIxhsgojhg== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Query to jill.ns.cloudflare.com for xyzulu.hosting/A
	Received 185 bytes from 108.162.192.122
	;; Response received from [108.162.192.122] 185 octets ;; HEADER SECTION ;; id = 13685 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 3 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; xyzulu.hosting. IN A ;; ANSWER SECTION (3 records) xyzulu.hosting. 300 IN A 172.67.140.199 xyzulu.hosting. 300 IN A 104.21.38.235 xyzulu.hosting. 300 IN RRSIG ( A 13 2 300 20260315070152 20260313050152 34505 xyzulu.hosting. O25Ca6eFiB+VxoiXfPVm2UXl9HkYpGGRjWzfPugn+SWVthxQVvm5psIVajnU+wB067lnORThhkNS 7Q2YLiaM5g== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	xyzulu.hosting A RR has value 172.67.140.199
	xyzulu.hosting A RR has value 104.21.38.235
	Found 1 RRSIGs over A RRset
	`xyzulu.hosting. 300 IN RRSIG ( A 13 2 300 20260315070152 20260313050152 34505 xyzulu.hosting. O25Ca6eFiB+VxoiXfPVm2UXl9HkYpGGRjWzfPugn+SWVthxQVvm5psIVajnU+wB067lnORThhkNS 7Q2YLiaM5g== )`
	RRSIG=34505 and DNSKEY=34505 verifies the A RRset

xyzulu.hosting

	Query to igor.ns.cloudflare.com for xyzulu.hosting/A
	Received 185 bytes from 172.64.33.119
	;; Response received from [172.64.33.119] 185 octets ;; HEADER SECTION ;; id = 39077 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 3 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; xyzulu.hosting. IN A ;; ANSWER SECTION (3 records) xyzulu.hosting. 300 IN A 172.67.140.199 xyzulu.hosting. 300 IN A 104.21.38.235 xyzulu.hosting. 300 IN RRSIG ( A 13 2 300 20260315070152 20260313050152 34505 xyzulu.hosting. 0sxvliOqQiCy1MSWE/fxX5busmwATMk1Whk0mDOGsQl1CRdby53NitRWT4Z516q4ojr5L0dx4iY/ 6qrfP44P8w== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	igor.ns.cloudflare.com is authoritative for xyzulu.hosting
	Found RRSIG signed by xyzulu.hosting zone
	Query to igor.ns.cloudflare.com for xyzulu.hosting/A
	Received 185 bytes from 173.245.59.119
	;; Response received from [173.245.59.119] 185 octets ;; HEADER SECTION ;; id = 56260 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 3 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; xyzulu.hosting. IN A ;; ANSWER SECTION (3 records) xyzulu.hosting. 300 IN A 172.67.140.199 xyzulu.hosting. 300 IN A 104.21.38.235 xyzulu.hosting. 300 IN RRSIG ( A 13 2 300 20260315070152 20260313050152 34505 xyzulu.hosting. O1jgd9+jsUkOZ0fwaOen7g+LBmYiPgUbsWm5qHp6lvJbLMlaTEDHtcW5/2t7wrD5EVIicHRGPPWY 5u1lLydXwg== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	xyzulu.hosting A RR has value 172.67.140.199
	xyzulu.hosting A RR has value 104.21.38.235
	Found 1 RRSIGs over A RRset
	`xyzulu.hosting. 300 IN RRSIG ( A 13 2 300 20260315070152 20260313050152 34505 xyzulu.hosting. O1jgd9+jsUkOZ0fwaOen7g+LBmYiPgUbsWm5qHp6lvJbLMlaTEDHtcW5/2t7wrD5EVIicHRGPPWY 5u1lLydXwg== )`
	RRSIG=34505 and DNSKEY=34505 verifies the A RRset

Move your mouse over any or symbols for remediation hints.

Want a second opinion? Test xyzulu.hosting at dnsviz.net.

DNSSEC Debugger

↓ Advanced options ↑ Advanced options

Trust Anchor:
Name Servers: