DNSSEC Debugger - comcast.com

Domain Name:

Time: 2024-05-21 07:21:06 UTC

Analyzing DNSSEC problems for comcast.com

DS=20326/SHA-256 is now in the chain-of-trust

	Checking DS between Trust Anchor and .
	`. IN DS ( 20326 8 2 e06d44b80b8f1d39a95c0b0d7c65d08458e880409bbc683457104237c7f8ec8d )`
	Query to k.root-servers.net for ./DNSKEY
	Received 864 bytes from 193.0.14.129
	;; Response received from [193.0.14.129] 864 octets ;; HEADER SECTION ;; id = 34730 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; . IN DNSKEY ;; ANSWER SECTION (3 records) . 172800 IN DNSKEY ( 256 3 8 AwEAAZBALoOFImwcJJg9Iu7Vy7ZyLjhtXfvO1c9k4vHjOpf9i7U1kKtrBvhnwsOni1sb50gkUayR tMDTUQqvljMMf4bpkyEtcE5evCzhHbFLq1coL5QOix3mfJm++FvIMaAt52nOvAdqR/luuI11bA1A mSCIJKAUx147DcfOHYKg3as+dznn3Iah4cWBMVzDe7PPsFS1AO6gU8EpmiRJ9VMNA09fOyDuq9+d 6sw8UUnJRMAFAuPLhUFjUAOuWOw74BC9lOtMQpbLMz8pX0CDKdOXDHjyj61nxSSWxPdUjeoxI17l QTpSPRtqRHFn5Fgj2e+9BVwhhWGDQN8kUVSJHZtQiI0= ) ; Key ID = 5613 . 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; Key ID = 20326 . 172800 IN RRSIG ( DNSKEY 8 0 172800 20240611000000 20240521000000 20326 . W/Hsuxwei6HE8IzojCIwmIP/lrqd6TZmm1cv7VEm7bjqgUyc5FBDUSNxWfIQiwLTn+Xqk8ZVG/68 0XZptzkT2ZxyXwK7AGFAvGrKiFBertupXxU7I5uYs27GPOnnKwlA5ZrUJW0AK66XIKMb+qVMHa7C 2agO1VOsAUSDeZtR8XJmJbzIMZN2GBlSowjWe90CX0jU+ncr58MOYEiI6N2JsWJi4gU546OrmhJd hEnPGDX/gPF5OjrgDZER2+PyjSEGdxdP0nbqlBcC39aLm3lfHNNJDzC+dxgL04qt1RiTTPhDbuMp hE2l6WxjC9N8wWzM+h0IKgDMc2oVSc4B+U5Kjw== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 2 DNSKEY records for .
	`. 172800 IN DNSKEY ( 256 3 8 AwEAAZBALoOFImwcJJg9Iu7Vy7ZyLjhtXfvO1c9k4vHjOpf9i7U1kKtrBvhnwsOni1sb50gkUayR tMDTUQqvljMMf4bpkyEtcE5evCzhHbFLq1coL5QOix3mfJm++FvIMaAt52nOvAdqR/luuI11bA1A mSCIJKAUx147DcfOHYKg3as+dznn3Iah4cWBMVzDe7PPsFS1AO6gU8EpmiRJ9VMNA09fOyDuq9+d 6sw8UUnJRMAFAuPLhUFjUAOuWOw74BC9lOtMQpbLMz8pX0CDKdOXDHjyj61nxSSWxPdUjeoxI17l QTpSPRtqRHFn5Fgj2e+9BVwhhWGDQN8kUVSJHZtQiI0= ) ; Key ID = 5613`
	`. 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; Key ID = 20326`
	DNSKEY=20326/SEP is now in the chain-of-trust
	DS=20326/SHA-256 verifies DNSKEY=20326/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`. 172800 IN RRSIG ( DNSKEY 8 0 172800 20240611000000 20240521000000 20326 . W/Hsuxwei6HE8IzojCIwmIP/lrqd6TZmm1cv7VEm7bjqgUyc5FBDUSNxWfIQiwLTn+Xqk8ZVG/68 0XZptzkT2ZxyXwK7AGFAvGrKiFBertupXxU7I5uYs27GPOnnKwlA5ZrUJW0AK66XIKMb+qVMHa7C 2agO1VOsAUSDeZtR8XJmJbzIMZN2GBlSowjWe90CX0jU+ncr58MOYEiI6N2JsWJi4gU546OrmhJd hEnPGDX/gPF5OjrgDZER2+PyjSEGdxdP0nbqlBcC39aLm3lfHNNJDzC+dxgL04qt1RiTTPhDbuMp hE2l6WxjC9N8wWzM+h0IKgDMc2oVSc4B+U5Kjw== )`
	RRSIG=20326 and DNSKEY=20326/SEP verifies the DNSKEY RRset
	DNSKEY=5613 is now in the chain-of-trust
	Query to g.root-servers.net for comcast.com/A
	Received 1171 bytes from 192.112.36.4
	;; Response received from [192.112.36.4] 1171 octets ;; HEADER SECTION ;; id = 26015 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 15 arcount = 27 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; comcast.com. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (15 records) com. 172800 IN NS m.gtld-servers.net. com. 172800 IN NS g.gtld-servers.net. com. 172800 IN NS f.gtld-servers.net. com. 172800 IN NS k.gtld-servers.net. com. 172800 IN NS j.gtld-servers.net. com. 172800 IN NS d.gtld-servers.net. com. 172800 IN NS l.gtld-servers.net. com. 172800 IN NS a.gtld-servers.net. com. 172800 IN NS c.gtld-servers.net. com. 172800 IN NS i.gtld-servers.net. com. 172800 IN NS h.gtld-servers.net. com. 172800 IN NS e.gtld-servers.net. com. 172800 IN NS b.gtld-servers.net. com. 86400 IN DS ( 19718 13 2 8acbb0cd28f41250a80a491389424d341522d946b0da0c0291f2d3d771d7805a ) com. 86400 IN RRSIG ( DS 8 1 86400 20240603050000 20240521040000 5613 . i5VY2yky/P2hYgjbVeOMIicrUchbbr3ECKzQVJg5gxyYvYvzuSKK5CFOPuPyQWZ8c/5mkhL1pLYP 8orwSAea96UVMfEo1lr8CKvDr1hvAttGYUxViQOFSDWms6hq3c0OTdPCakjWnvFk8n/JUb+hPQf8 dYr9ED6hbs+RNYrarwZFMubjfgKAPjPPSM/yjJTE0CkwO0zxAdibSLLWsj/mFEoJpTIgG+rKaWzm P0OS8vL1QmocGhXmlGHqm4KDOnbzSyM2fDli8qCrO31aDB55WIOHIL1hDUb626tj/0MEMSSLsX/I oTREmdq9S5/oBVmeqgGMK5RJIyx/YooFoMwZxw== ) ;; ADDITIONAL SECTION (27 records) m.gtld-servers.net. 172800 IN A 192.55.83.30 l.gtld-servers.net. 172800 IN A 192.41.162.30 k.gtld-servers.net. 172800 IN A 192.52.178.30 j.gtld-servers.net. 172800 IN A 192.48.79.30 i.gtld-servers.net. 172800 IN A 192.43.172.30 h.gtld-servers.net. 172800 IN A 192.54.112.30 g.gtld-servers.net. 172800 IN A 192.42.93.30 f.gtld-servers.net. 172800 IN A 192.35.51.30 e.gtld-servers.net. 172800 IN A 192.12.94.30 d.gtld-servers.net. 172800 IN A 192.31.80.30 c.gtld-servers.net. 172800 IN A 192.26.92.30 b.gtld-servers.net. 172800 IN A 192.33.14.30 a.gtld-servers.net. 172800 IN A 192.5.6.30 m.gtld-servers.net. 172800 IN AAAA 2001:501:b1f9::30 l.gtld-servers.net. 172800 IN AAAA 2001:500:d937::30 k.gtld-servers.net. 172800 IN AAAA 2001:503:d2d::30 j.gtld-servers.net. 172800 IN AAAA 2001:502:7094::30 i.gtld-servers.net. 172800 IN AAAA 2001:503:39c1::30 h.gtld-servers.net. 172800 IN AAAA 2001:502:8cc::30 g.gtld-servers.net. 172800 IN AAAA 2001:503:eea3::30 f.gtld-servers.net. 172800 IN AAAA 2001:503:d414::30 e.gtld-servers.net. 172800 IN AAAA 2001:502:1ca1::30 d.gtld-servers.net. 172800 IN AAAA 2001:500:856e::30 c.gtld-servers.net. 172800 IN AAAA 2001:503:83eb::30 b.gtld-servers.net. 172800 IN AAAA 2001:503:231d::2:30 a.gtld-servers.net. 172800 IN AAAA 2001:503:a83e::2:30 ;; { "EDNS-VERSION": 0 }
	Query to a.root-servers.net for com/DNSKEY
	Received 1163 bytes from 198.41.0.4
	;; Response received from [198.41.0.4] 1163 octets ;; HEADER SECTION ;; id = 1427 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 15 arcount = 27 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; com. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (15 records) com. 172800 IN NS l.gtld-servers.net. com. 172800 IN NS j.gtld-servers.net. com. 172800 IN NS h.gtld-servers.net. com. 172800 IN NS d.gtld-servers.net. com. 172800 IN NS b.gtld-servers.net. com. 172800 IN NS f.gtld-servers.net. com. 172800 IN NS k.gtld-servers.net. com. 172800 IN NS m.gtld-servers.net. com. 172800 IN NS i.gtld-servers.net. com. 172800 IN NS g.gtld-servers.net. com. 172800 IN NS a.gtld-servers.net. com. 172800 IN NS c.gtld-servers.net. com. 172800 IN NS e.gtld-servers.net. com. 86400 IN DS ( 19718 13 2 8acbb0cd28f41250a80a491389424d341522d946b0da0c0291f2d3d771d7805a ) com. 86400 IN RRSIG ( DS 8 1 86400 20240603050000 20240521040000 5613 . i5VY2yky/P2hYgjbVeOMIicrUchbbr3ECKzQVJg5gxyYvYvzuSKK5CFOPuPyQWZ8c/5mkhL1pLYP 8orwSAea96UVMfEo1lr8CKvDr1hvAttGYUxViQOFSDWms6hq3c0OTdPCakjWnvFk8n/JUb+hPQf8 dYr9ED6hbs+RNYrarwZFMubjfgKAPjPPSM/yjJTE0CkwO0zxAdibSLLWsj/mFEoJpTIgG+rKaWzm P0OS8vL1QmocGhXmlGHqm4KDOnbzSyM2fDli8qCrO31aDB55WIOHIL1hDUb626tj/0MEMSSLsX/I oTREmdq9S5/oBVmeqgGMK5RJIyx/YooFoMwZxw== ) ;; ADDITIONAL SECTION (27 records) l.gtld-servers.net. 172800 IN A 192.41.162.30 l.gtld-servers.net. 172800 IN AAAA 2001:500:d937::30 j.gtld-servers.net. 172800 IN A 192.48.79.30 j.gtld-servers.net. 172800 IN AAAA 2001:502:7094::30 h.gtld-servers.net. 172800 IN A 192.54.112.30 h.gtld-servers.net. 172800 IN AAAA 2001:502:8cc::30 d.gtld-servers.net. 172800 IN A 192.31.80.30 d.gtld-servers.net. 172800 IN AAAA 2001:500:856e::30 b.gtld-servers.net. 172800 IN A 192.33.14.30 b.gtld-servers.net. 172800 IN AAAA 2001:503:231d::2:30 f.gtld-servers.net. 172800 IN A 192.35.51.30 f.gtld-servers.net. 172800 IN AAAA 2001:503:d414::30 k.gtld-servers.net. 172800 IN A 192.52.178.30 k.gtld-servers.net. 172800 IN AAAA 2001:503:d2d::30 m.gtld-servers.net. 172800 IN A 192.55.83.30 m.gtld-servers.net. 172800 IN AAAA 2001:501:b1f9::30 i.gtld-servers.net. 172800 IN A 192.43.172.30 i.gtld-servers.net. 172800 IN AAAA 2001:503:39c1::30 g.gtld-servers.net. 172800 IN A 192.42.93.30 g.gtld-servers.net. 172800 IN AAAA 2001:503:eea3::30 a.gtld-servers.net. 172800 IN A 192.5.6.30 a.gtld-servers.net. 172800 IN AAAA 2001:503:a83e::2:30 c.gtld-servers.net. 172800 IN A 192.26.92.30 c.gtld-servers.net. 172800 IN AAAA 2001:503:83eb::30 e.gtld-servers.net. 172800 IN A 192.12.94.30 e.gtld-servers.net. 172800 IN AAAA 2001:502:1ca1::30 ;; { "EDNS-VERSION": 0 }
	Found child zone com

com

	Checking DS between . and com
	Query to k.root-servers.net for com/DS
	Received 367 bytes from 193.0.14.129
	;; Response received from [193.0.14.129] 367 octets ;; HEADER SECTION ;; id = 32039 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; com. IN DS ;; ANSWER SECTION (2 records) com. 86400 IN DS ( 19718 13 2 8acbb0cd28f41250a80a491389424d341522d946b0da0c0291f2d3d771d7805a ) com. 86400 IN RRSIG ( DS 8 1 86400 20240603050000 20240521040000 5613 . i5VY2yky/P2hYgjbVeOMIicrUchbbr3ECKzQVJg5gxyYvYvzuSKK5CFOPuPyQWZ8c/5mkhL1pLYP 8orwSAea96UVMfEo1lr8CKvDr1hvAttGYUxViQOFSDWms6hq3c0OTdPCakjWnvFk8n/JUb+hPQf8 dYr9ED6hbs+RNYrarwZFMubjfgKAPjPPSM/yjJTE0CkwO0zxAdibSLLWsj/mFEoJpTIgG+rKaWzm P0OS8vL1QmocGhXmlGHqm4KDOnbzSyM2fDli8qCrO31aDB55WIOHIL1hDUb626tj/0MEMSSLsX/I oTREmdq9S5/oBVmeqgGMK5RJIyx/YooFoMwZxw== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 1 DS records for com in the . zone
	DS=19718/SHA-256 has algorithm ECDSAP256SHA256
	Found 1 RRSIGs over DS RRset
	`com. 86400 IN RRSIG ( DS 8 1 86400 20240603050000 20240521040000 5613 . i5VY2yky/P2hYgjbVeOMIicrUchbbr3ECKzQVJg5gxyYvYvzuSKK5CFOPuPyQWZ8c/5mkhL1pLYP 8orwSAea96UVMfEo1lr8CKvDr1hvAttGYUxViQOFSDWms6hq3c0OTdPCakjWnvFk8n/JUb+hPQf8 dYr9ED6hbs+RNYrarwZFMubjfgKAPjPPSM/yjJTE0CkwO0zxAdibSLLWsj/mFEoJpTIgG+rKaWzm P0OS8vL1QmocGhXmlGHqm4KDOnbzSyM2fDli8qCrO31aDB55WIOHIL1hDUb626tj/0MEMSSLsX/I oTREmdq9S5/oBVmeqgGMK5RJIyx/YooFoMwZxw== )`
	RRSIG=5613 and DNSKEY=5613 verifies the DS RRset
	DS=19718/SHA-256 is now in the chain-of-trust
	`com. 86400 IN DS ( 19718 13 2 8acbb0cd28f41250a80a491389424d341522d946b0da0c0291f2d3d771d7805a )`
	Query to c.gtld-servers.net for com/DNSKEY
	Received 291 bytes from 192.26.92.30
	;; Response received from [192.26.92.30] 291 octets ;; HEADER SECTION ;; id = 43621 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; com. IN DNSKEY ;; ANSWER SECTION (3 records) com. 86400 IN DNSKEY ( 257 3 13 tx8EZRAd2+K/DJRV0S+hbBzaRPS/G6JVNBitHzqpsGlz8huE61Ms9ANe6NSDLKJtiTBqfTJWDAyw Ep1FCsEINQ== ) ; Key ID = 19718 com. 86400 IN DNSKEY ( 256 3 13 cCRwZIITlPXwDm0yKpGVYSmWLL4OpEHxA7+Rt3jS0W1N4EMOaF8doSzrJuM7aDbgAR7jtQ9SNCvY ZCH2xSyfaQ== ) ; Key ID = 956 com. 86400 IN RRSIG ( DNSKEY 13 1 86400 20240601140235 20240517135735 19718 com. 3xQE/PGVd6/fhBGV2swH4FDArm3AdolfjBpLicfLAsTXZ6JvqclPaGsZxJuA78TUI+xeal1lT6hR WmRKA4Odrg== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 2 DNSKEY records for com
	`com. 86400 IN DNSKEY ( 257 3 13 tx8EZRAd2+K/DJRV0S+hbBzaRPS/G6JVNBitHzqpsGlz8huE61Ms9ANe6NSDLKJtiTBqfTJWDAyw Ep1FCsEINQ== ) ; Key ID = 19718`
	`com. 86400 IN DNSKEY ( 256 3 13 cCRwZIITlPXwDm0yKpGVYSmWLL4OpEHxA7+Rt3jS0W1N4EMOaF8doSzrJuM7aDbgAR7jtQ9SNCvY ZCH2xSyfaQ== ) ; Key ID = 956`
	DNSKEY=19718/SEP is now in the chain-of-trust
	DS=19718/SHA-256 verifies DNSKEY=19718/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`com. 86400 IN RRSIG ( DNSKEY 13 1 86400 20240601140235 20240517135735 19718 com. 3xQE/PGVd6/fhBGV2swH4FDArm3AdolfjBpLicfLAsTXZ6JvqclPaGsZxJuA78TUI+xeal1lT6hR WmRKA4Odrg== )`
	RRSIG=19718 and DNSKEY=19718/SEP verifies the DNSKEY RRset
	DNSKEY=956 is now in the chain-of-trust
	Query to k.gtld-servers.net for comcast.com/A
	Received 339 bytes from 192.52.178.30
	;; Response received from [192.52.178.30] 339 octets ;; HEADER SECTION ;; id = 48581 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 8 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; comcast.com. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (8 records) comcast.com. 172800 IN NS dns101.comcast.net. comcast.com. 172800 IN NS dns102.comcast.net. comcast.com. 172800 IN NS dns103.comcast.net. comcast.com. 172800 IN NS dns104.comcast.net. comcast.com. 172800 IN NS dns105.comcast.net. comcast.com. 86400 IN DS ( 35356 5 2 222560f35f917bbc701e2d55df628596b5cbd76373bd6a658642791a02e5337c ) comcast.com. 86400 IN DS 35356 5 1 6a4a64ab173f0468a196faa5d97dd134c1c104f8 comcast.com. 86400 IN RRSIG ( DS 13 2 86400 20240526055211 20240519044211 956 com. YxF3rv/MZAXNB3I/cWZxF66EmP2mZ0DTk4zlhmzVR7DBv8K3iO1F1CxvAecshe9gSfF2qHmiIULA Y4C/cvneAQ== ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Query to j.gtld-servers.net for comcast.com/DNSKEY
	Received 339 bytes from 192.48.79.30
	;; Response received from [192.48.79.30] 339 octets ;; HEADER SECTION ;; id = 30784 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 8 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; comcast.com. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (8 records) comcast.com. 172800 IN NS dns101.comcast.net. comcast.com. 172800 IN NS dns102.comcast.net. comcast.com. 172800 IN NS dns103.comcast.net. comcast.com. 172800 IN NS dns104.comcast.net. comcast.com. 172800 IN NS dns105.comcast.net. comcast.com. 86400 IN DS ( 35356 5 2 222560f35f917bbc701e2d55df628596b5cbd76373bd6a658642791a02e5337c ) comcast.com. 86400 IN DS 35356 5 1 6a4a64ab173f0468a196faa5d97dd134c1c104f8 comcast.com. 86400 IN RRSIG ( DS 13 2 86400 20240526055211 20240519044211 956 com. YxF3rv/MZAXNB3I/cWZxF66EmP2mZ0DTk4zlhmzVR7DBv8K3iO1F1CxvAecshe9gSfF2qHmiIULA Y4C/cvneAQ== ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found child zone comcast.com

comcast.com

	Checking DS between com and comcast.com
	Query to d.gtld-servers.net for comcast.com/DS
	Received 1118 bytes from 192.31.80.30
	;; Response received from [192.31.80.30] 1118 octets ;; HEADER SECTION ;; id = 61122 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 14 arcount = 27 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; comcast.com. IN DS ;; ANSWER SECTION (3 records) comcast.com. 86400 IN DS ( 35356 5 2 222560f35f917bbc701e2d55df628596b5cbd76373bd6a658642791a02e5337c ) comcast.com. 86400 IN DS 35356 5 1 6a4a64ab173f0468a196faa5d97dd134c1c104f8 comcast.com. 86400 IN RRSIG ( DS 13 2 86400 20240526055211 20240519044211 956 com. YxF3rv/MZAXNB3I/cWZxF66EmP2mZ0DTk4zlhmzVR7DBv8K3iO1F1CxvAecshe9gSfF2qHmiIULA Y4C/cvneAQ== ) ;; AUTHORITY SECTION (14 records) com. 172800 IN NS e.gtld-servers.net. com. 172800 IN NS k.gtld-servers.net. com. 172800 IN NS h.gtld-servers.net. com. 172800 IN NS d.gtld-servers.net. com. 172800 IN NS a.gtld-servers.net. com. 172800 IN NS i.gtld-servers.net. com. 172800 IN NS f.gtld-servers.net. com. 172800 IN NS l.gtld-servers.net. com. 172800 IN NS j.gtld-servers.net. com. 172800 IN NS b.gtld-servers.net. com. 172800 IN NS c.gtld-servers.net. com. 172800 IN NS m.gtld-servers.net. com. 172800 IN NS g.gtld-servers.net. com. 172800 IN RRSIG ( NS 13 1 172800 20240525042453 20240518031453 956 com. c9BoTeKS8CMTWAx1gP2e7LsXlEdA4iPahD5qOjiuJLRHsKOAVrotuafFCtGGYSKdZBoh/Rd1903+ IMXeY13IbQ== ) ;; ADDITIONAL SECTION (27 records) e.gtld-servers.net. 172800 IN A 192.12.94.30 e.gtld-servers.net. 172800 IN AAAA 2001:502:1ca1::30 k.gtld-servers.net. 172800 IN A 192.52.178.30 k.gtld-servers.net. 172800 IN AAAA 2001:503:d2d::30 h.gtld-servers.net. 172800 IN A 192.54.112.30 h.gtld-servers.net. 172800 IN AAAA 2001:502:8cc::30 d.gtld-servers.net. 172800 IN A 192.31.80.30 d.gtld-servers.net. 172800 IN AAAA 2001:500:856e::30 a.gtld-servers.net. 172800 IN A 192.5.6.30 a.gtld-servers.net. 172800 IN AAAA 2001:503:a83e::2:30 i.gtld-servers.net. 172800 IN A 192.43.172.30 i.gtld-servers.net. 172800 IN AAAA 2001:503:39c1::30 f.gtld-servers.net. 172800 IN A 192.35.51.30 f.gtld-servers.net. 172800 IN AAAA 2001:503:d414::30 l.gtld-servers.net. 172800 IN A 192.41.162.30 l.gtld-servers.net. 172800 IN AAAA 2001:500:d937::30 j.gtld-servers.net. 172800 IN A 192.48.79.30 j.gtld-servers.net. 172800 IN AAAA 2001:502:7094::30 b.gtld-servers.net. 172800 IN A 192.33.14.30 b.gtld-servers.net. 172800 IN AAAA 2001:503:231d::2:30 c.gtld-servers.net. 172800 IN A 192.26.92.30 c.gtld-servers.net. 172800 IN AAAA 2001:503:83eb::30 m.gtld-servers.net. 172800 IN A 192.55.83.30 m.gtld-servers.net. 172800 IN AAAA 2001:501:b1f9::30 g.gtld-servers.net. 172800 IN A 192.42.93.30 g.gtld-servers.net. 172800 IN AAAA 2001:503:eea3::30 ;; { "EDNS-VERSION": 0 }
	Found 2 DS records for comcast.com in the com zone
	DS=35356/SHA-1 uses a deprecated digest algorithm
	DS=35356/SHA-256 has algorithm RSASHA1
	DS=35356/SHA-1 has algorithm RSASHA1
	Found 1 RRSIGs over DS RRset
	`comcast.com. 86400 IN RRSIG ( DS 13 2 86400 20240526055211 20240519044211 956 com. YxF3rv/MZAXNB3I/cWZxF66EmP2mZ0DTk4zlhmzVR7DBv8K3iO1F1CxvAecshe9gSfF2qHmiIULA Y4C/cvneAQ== )`
	RRSIG=956 and DNSKEY=956 verifies the DS RRset
	DS=35356/SHA-256 is now in the chain-of-trust
	`comcast.com. 86400 IN DS ( 35356 5 2 222560f35f917bbc701e2d55df628596b5cbd76373bd6a658642791a02e5337c )`
	`comcast.com. 86400 IN DS 35356 5 1 6a4a64ab173f0468a196faa5d97dd134c1c104f8`
	Query to dns101.comcast.net for comcast.com/DNSKEY
	Received 934 bytes from 69.252.250.103
	;; Response received from [69.252.250.103] 934 octets ;; HEADER SECTION ;; id = 11831 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 4 nscount = 0 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; comcast.com. IN DNSKEY ;; ANSWER SECTION (4 records) comcast.com. 3600 IN DNSKEY ( 257 3 5 AwEAAezwSScBtEyDIIgipf6Sh5YkpsygXHpz5v2rndIPTOVvrSGUbnlGw+oUfZ8p29ZLuNTTDngQ ZfKgifA05aDjDClRWasHeKg+o+eY/KqjxBooSpSzHgU/GRw2KI2zFaeHgg+grcI/rm6RftC4dqoD +MQpLoOtdMZFqWG9HhVPcLXD3VFxKyP4hzunmd5GQdQtg0V8GByq+yq0hl89sm/sVGUUZS65eJcE zenEZqtYd+ET2BRoNOUf6B8g+eji0GQ7vPheKXrXz1n38K2rgHDGupdErgbGyjGTlgzph4tTSDn8 PWt04/ex72u7vU0kdW6pA0uPIATmpij3J3zoVpRMU50= ) ; Key ID = 35356 comcast.com. 3600 IN DNSKEY ( 256 3 5 AwEAAeaGGNTnFy0eVlTM3h0dZUqgpZJunf+BltI8xAt1xY5EIYB9bvDY9fuKf8Xsa4CBZO+9zjNp 5y91YBh6ZxBp1MLpVdA01X9w1wF4V/Fmr094m8sZYZTIY3ORkVGqPrTo74s7UiGKQ2F3ADgWgPfg jwMDXpCpVXQ1eRYxy3+fjc0n ) ; Key ID = 8970 comcast.com. 3600 IN RRSIG ( DNSKEY 5 2 3600 20240604144431 20240518143931 8970 comcast.com. je2MKJYd56ThraGGqOOisCkNk4pNGq1nH6uF2f5dyRgrsgTdZsOv+n8hLcjVcVHPEjJtbj7T1rGS scDUehGhl8uEuqjqii5zujONL3EghIHgNIqPT1grnCHf2u9QvToZd721nkT/JXn+5lX2oWIugxH2 xs/gGY6fAGZANQR7Bic= ) comcast.com. 3600 IN RRSIG ( DNSKEY 5 2 3600 20240901144431 20240504104431 35356 comcast.com. h81+qYZ5yTernw5pjXG/1bZdkYE+wYc7zDJjXfg9eRxUAh14QWd18isXyVoni3sA9gT8p+pNsWCE gDfcNm7CuCgRF4/5fJOrvOzj8MpMVjJaCQCQpzDMjUcC3uId8tI3sJQA5nxOSR3KrpkfoxSH0hNU mvc9/qjuOsRZ3qwv6OtT9GVaLoyOrfkzviWkDAEY2oH8Ed73hqZQEI4ucKA/JCq8i9fE4C1maGJ/ 3HGtyC5F0wgcj6gCAfUQUU8ucIUlXwG8xGI4CLGR/bT+dFqyhkboLZo6PT5rp8epIMKwVlUAsQAm 7atrvKVM5LjVwNq8jPZWrGS79hSmzpe/Se9weQ== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 2 DNSKEY records for comcast.com
	`comcast.com. 3600 IN DNSKEY ( 257 3 5 AwEAAezwSScBtEyDIIgipf6Sh5YkpsygXHpz5v2rndIPTOVvrSGUbnlGw+oUfZ8p29ZLuNTTDngQ ZfKgifA05aDjDClRWasHeKg+o+eY/KqjxBooSpSzHgU/GRw2KI2zFaeHgg+grcI/rm6RftC4dqoD +MQpLoOtdMZFqWG9HhVPcLXD3VFxKyP4hzunmd5GQdQtg0V8GByq+yq0hl89sm/sVGUUZS65eJcE zenEZqtYd+ET2BRoNOUf6B8g+eji0GQ7vPheKXrXz1n38K2rgHDGupdErgbGyjGTlgzph4tTSDn8 PWt04/ex72u7vU0kdW6pA0uPIATmpij3J3zoVpRMU50= ) ; Key ID = 35356`
	`comcast.com. 3600 IN DNSKEY ( 256 3 5 AwEAAeaGGNTnFy0eVlTM3h0dZUqgpZJunf+BltI8xAt1xY5EIYB9bvDY9fuKf8Xsa4CBZO+9zjNp 5y91YBh6ZxBp1MLpVdA01X9w1wF4V/Fmr094m8sZYZTIY3ORkVGqPrTo74s7UiGKQ2F3ADgWgPfg jwMDXpCpVXQ1eRYxy3+fjc0n ) ; Key ID = 8970`
	DNSKEY=35356/SEP is now in the chain-of-trust
	DS=35356/SHA-256 verifies DNSKEY=35356/SEP
	DS=35356/SHA-1 verifies DNSKEY=35356/SEP
	Found 2 RRSIGs over DNSKEY RRset
	`comcast.com. 3600 IN RRSIG ( DNSKEY 5 2 3600 20240604144431 20240518143931 8970 comcast.com. je2MKJYd56ThraGGqOOisCkNk4pNGq1nH6uF2f5dyRgrsgTdZsOv+n8hLcjVcVHPEjJtbj7T1rGS scDUehGhl8uEuqjqii5zujONL3EghIHgNIqPT1grnCHf2u9QvToZd721nkT/JXn+5lX2oWIugxH2 xs/gGY6fAGZANQR7Bic= )`
	`comcast.com. 3600 IN RRSIG ( DNSKEY 5 2 3600 20240901144431 20240504104431 35356 comcast.com. h81+qYZ5yTernw5pjXG/1bZdkYE+wYc7zDJjXfg9eRxUAh14QWd18isXyVoni3sA9gT8p+pNsWCE gDfcNm7CuCgRF4/5fJOrvOzj8MpMVjJaCQCQpzDMjUcC3uId8tI3sJQA5nxOSR3KrpkfoxSH0hNU mvc9/qjuOsRZ3qwv6OtT9GVaLoyOrfkzviWkDAEY2oH8Ed73hqZQEI4ucKA/JCq8i9fE4C1maGJ/ 3HGtyC5F0wgcj6gCAfUQUU8ucIUlXwG8xGI4CLGR/bT+dFqyhkboLZo6PT5rp8epIMKwVlUAsQAm 7atrvKVM5LjVwNq8jPZWrGS79hSmzpe/Se9weQ== )`
	RRSIG=8970 and DNSKEY=8970 verifies the DNSKEY RRset
	RRSIG=35356 and DNSKEY=35356/SEP verifies the DNSKEY RRset
	DNSKEY=8970 is now in the chain-of-trust
	Query to dns103.comcast.net for comcast.com/A
	Received 227 bytes from 68.87.76.228
	;; Response received from [68.87.76.228] 227 octets ;; HEADER SECTION ;; id = 5491 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; comcast.com. IN A ;; ANSWER SECTION (2 records) comcast.com. 300 IN A 96.99.227.0 comcast.com. 300 IN RRSIG ( A 5 2 300 20240604144431 20240518143931 8970 comcast.com. ejpCKqTqDSv73XSS3ZIXugw9z69UDAH+YR5eqt3xMaIqA7L8sS//ch1lYAHDb2eHeOO1DZPl4mFy XurZ8sChXNBkKEs8Gpsfwf36lERc1jFsA1KH7eBgkWEdnP/YzUro7iUOwFp2gwJ8fP5QHXlcq7YO goD6FW+qvXRS8yAl4Sk= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	dns103.comcast.net is authoritative for comcast.com
	Found RRSIG signed by comcast.com zone
	Query to dns105.comcast.net for comcast.com/SOA
	Received 290 bytes from 68.87.72.244
	;; Response received from [68.87.72.244] 290 octets ;; HEADER SECTION ;; id = 2199 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; comcast.com. IN SOA ;; ANSWER SECTION (2 records) comcast.com. 3600 IN SOA ( dns101.comcast.net. domregtech.comcastonline.com. 2009102194 ;serial 7200 ;refresh 3600 ;retry 1209600 ;expire 900 ;minimum ) comcast.com. 3600 IN RRSIG ( SOA 5 2 3600 20240604144431 20240518143931 8970 comcast.com. tkkTztomut4eFZM2wngtmdkJtZONOptPZUvB/UVIzn859TchPvhs4KyChWENAzVA/wVoGLWrslTt ZV8cVxTAIm+bZCmZjn+XGypPszFjP1MHppjBCeIPAvklyPysH0V7XZpFLc/6b12DkDiowdgpd1ka jW21gG+wPXRwDhWBUDs= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Query to dns102.comcast.net for comcast.com/SOA
	Received 290 bytes from 68.87.85.132
	;; Response received from [68.87.85.132] 290 octets ;; HEADER SECTION ;; id = 9494 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; comcast.com. IN SOA ;; ANSWER SECTION (2 records) comcast.com. 3600 IN SOA ( dns101.comcast.net. domregtech.comcastonline.com. 2009102194 ;serial 7200 ;refresh 3600 ;retry 1209600 ;expire 900 ;minimum ) comcast.com. 3600 IN RRSIG ( SOA 5 2 3600 20240604144431 20240518143931 8970 comcast.com. tkkTztomut4eFZM2wngtmdkJtZONOptPZUvB/UVIzn859TchPvhs4KyChWENAzVA/wVoGLWrslTt ZV8cVxTAIm+bZCmZjn+XGypPszFjP1MHppjBCeIPAvklyPysH0V7XZpFLc/6b12DkDiowdgpd1ka jW21gG+wPXRwDhWBUDs= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Query to dns104.comcast.net for comcast.com/SOA
	Received 290 bytes from 68.87.68.244
	;; Response received from [68.87.68.244] 290 octets ;; HEADER SECTION ;; id = 4432 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; comcast.com. IN SOA ;; ANSWER SECTION (2 records) comcast.com. 3600 IN SOA ( dns101.comcast.net. domregtech.comcastonline.com. 2009102194 ;serial 7200 ;refresh 3600 ;retry 1209600 ;expire 900 ;minimum ) comcast.com. 3600 IN RRSIG ( SOA 5 2 3600 20240604144431 20240518143931 8970 comcast.com. tkkTztomut4eFZM2wngtmdkJtZONOptPZUvB/UVIzn859TchPvhs4KyChWENAzVA/wVoGLWrslTt ZV8cVxTAIm+bZCmZjn+XGypPszFjP1MHppjBCeIPAvklyPysH0V7XZpFLc/6b12DkDiowdgpd1ka jW21gG+wPXRwDhWBUDs= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Query to dns101.comcast.net for comcast.com/SOA
	Received 290 bytes from 69.252.250.103
	;; Response received from [69.252.250.103] 290 octets ;; HEADER SECTION ;; id = 9234 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; comcast.com. IN SOA ;; ANSWER SECTION (2 records) comcast.com. 3600 IN SOA ( dns101.comcast.net. domregtech.comcastonline.com. 2009102194 ;serial 7200 ;refresh 3600 ;retry 1209600 ;expire 900 ;minimum ) comcast.com. 3600 IN RRSIG ( SOA 5 2 3600 20240604144431 20240518143931 8970 comcast.com. tkkTztomut4eFZM2wngtmdkJtZONOptPZUvB/UVIzn859TchPvhs4KyChWENAzVA/wVoGLWrslTt ZV8cVxTAIm+bZCmZjn+XGypPszFjP1MHppjBCeIPAvklyPysH0V7XZpFLc/6b12DkDiowdgpd1ka jW21gG+wPXRwDhWBUDs= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Query to dns103.comcast.net for comcast.com/A
	Received 227 bytes from 68.87.76.228
	;; Response received from [68.87.76.228] 227 octets ;; HEADER SECTION ;; id = 45044 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; comcast.com. IN A ;; ANSWER SECTION (2 records) comcast.com. 300 IN A 96.99.227.0 comcast.com. 300 IN RRSIG ( A 5 2 300 20240604144431 20240518143931 8970 comcast.com. ejpCKqTqDSv73XSS3ZIXugw9z69UDAH+YR5eqt3xMaIqA7L8sS//ch1lYAHDb2eHeOO1DZPl4mFy XurZ8sChXNBkKEs8Gpsfwf36lERc1jFsA1KH7eBgkWEdnP/YzUro7iUOwFp2gwJ8fP5QHXlcq7YO goD6FW+qvXRS8yAl4Sk= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	comcast.com A RR has value 96.99.227.0
	Found 1 RRSIGs over A RRset
	`comcast.com. 300 IN RRSIG ( A 5 2 300 20240604144431 20240518143931 8970 comcast.com. ejpCKqTqDSv73XSS3ZIXugw9z69UDAH+YR5eqt3xMaIqA7L8sS//ch1lYAHDb2eHeOO1DZPl4mFy XurZ8sChXNBkKEs8Gpsfwf36lERc1jFsA1KH7eBgkWEdnP/YzUro7iUOwFp2gwJ8fP5QHXlcq7YO goD6FW+qvXRS8yAl4Sk= )`
	RRSIG=8970 and DNSKEY=8970 verifies the A RRset

comcast.com

	Query to dns102.comcast.net for comcast.com/A
	Received 227 bytes from 68.87.85.132
	;; Response received from [68.87.85.132] 227 octets ;; HEADER SECTION ;; id = 64574 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; comcast.com. IN A ;; ANSWER SECTION (2 records) comcast.com. 300 IN A 96.99.227.0 comcast.com. 300 IN RRSIG ( A 5 2 300 20240604144431 20240518143931 8970 comcast.com. ejpCKqTqDSv73XSS3ZIXugw9z69UDAH+YR5eqt3xMaIqA7L8sS//ch1lYAHDb2eHeOO1DZPl4mFy XurZ8sChXNBkKEs8Gpsfwf36lERc1jFsA1KH7eBgkWEdnP/YzUro7iUOwFp2gwJ8fP5QHXlcq7YO goD6FW+qvXRS8yAl4Sk= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	dns102.comcast.net is authoritative for comcast.com
	Found RRSIG signed by comcast.com zone
	Query to dns102.comcast.net for comcast.com/A
	Received 227 bytes from 68.87.85.132
	;; Response received from [68.87.85.132] 227 octets ;; HEADER SECTION ;; id = 28209 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; comcast.com. IN A ;; ANSWER SECTION (2 records) comcast.com. 300 IN A 96.99.227.0 comcast.com. 300 IN RRSIG ( A 5 2 300 20240604144431 20240518143931 8970 comcast.com. ejpCKqTqDSv73XSS3ZIXugw9z69UDAH+YR5eqt3xMaIqA7L8sS//ch1lYAHDb2eHeOO1DZPl4mFy XurZ8sChXNBkKEs8Gpsfwf36lERc1jFsA1KH7eBgkWEdnP/YzUro7iUOwFp2gwJ8fP5QHXlcq7YO goD6FW+qvXRS8yAl4Sk= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	comcast.com A RR has value 96.99.227.0
	Found 1 RRSIGs over A RRset
	`comcast.com. 300 IN RRSIG ( A 5 2 300 20240604144431 20240518143931 8970 comcast.com. ejpCKqTqDSv73XSS3ZIXugw9z69UDAH+YR5eqt3xMaIqA7L8sS//ch1lYAHDb2eHeOO1DZPl4mFy XurZ8sChXNBkKEs8Gpsfwf36lERc1jFsA1KH7eBgkWEdnP/YzUro7iUOwFp2gwJ8fP5QHXlcq7YO goD6FW+qvXRS8yAl4Sk= )`
	RRSIG=8970 and DNSKEY=8970 verifies the A RRset

comcast.com

	Query to dns105.comcast.net for comcast.com/A
	Received 227 bytes from 68.87.72.244
	;; Response received from [68.87.72.244] 227 octets ;; HEADER SECTION ;; id = 16231 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; comcast.com. IN A ;; ANSWER SECTION (2 records) comcast.com. 300 IN A 96.99.227.0 comcast.com. 300 IN RRSIG ( A 5 2 300 20240604144431 20240518143931 8970 comcast.com. ejpCKqTqDSv73XSS3ZIXugw9z69UDAH+YR5eqt3xMaIqA7L8sS//ch1lYAHDb2eHeOO1DZPl4mFy XurZ8sChXNBkKEs8Gpsfwf36lERc1jFsA1KH7eBgkWEdnP/YzUro7iUOwFp2gwJ8fP5QHXlcq7YO goD6FW+qvXRS8yAl4Sk= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	dns105.comcast.net is authoritative for comcast.com
	Found RRSIG signed by comcast.com zone
	Query to dns105.comcast.net for comcast.com/A
	Received 227 bytes from 68.87.72.244
	;; Response received from [68.87.72.244] 227 octets ;; HEADER SECTION ;; id = 36602 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; comcast.com. IN A ;; ANSWER SECTION (2 records) comcast.com. 300 IN A 96.99.227.0 comcast.com. 300 IN RRSIG ( A 5 2 300 20240604144431 20240518143931 8970 comcast.com. ejpCKqTqDSv73XSS3ZIXugw9z69UDAH+YR5eqt3xMaIqA7L8sS//ch1lYAHDb2eHeOO1DZPl4mFy XurZ8sChXNBkKEs8Gpsfwf36lERc1jFsA1KH7eBgkWEdnP/YzUro7iUOwFp2gwJ8fP5QHXlcq7YO goD6FW+qvXRS8yAl4Sk= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	comcast.com A RR has value 96.99.227.0
	Found 1 RRSIGs over A RRset
	`comcast.com. 300 IN RRSIG ( A 5 2 300 20240604144431 20240518143931 8970 comcast.com. ejpCKqTqDSv73XSS3ZIXugw9z69UDAH+YR5eqt3xMaIqA7L8sS//ch1lYAHDb2eHeOO1DZPl4mFy XurZ8sChXNBkKEs8Gpsfwf36lERc1jFsA1KH7eBgkWEdnP/YzUro7iUOwFp2gwJ8fP5QHXlcq7YO goD6FW+qvXRS8yAl4Sk= )`
	RRSIG=8970 and DNSKEY=8970 verifies the A RRset

comcast.com

	Query to dns104.comcast.net for comcast.com/A
	Received 227 bytes from 68.87.68.244
	;; Response received from [68.87.68.244] 227 octets ;; HEADER SECTION ;; id = 42265 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; comcast.com. IN A ;; ANSWER SECTION (2 records) comcast.com. 300 IN A 96.99.227.0 comcast.com. 300 IN RRSIG ( A 5 2 300 20240604144431 20240518143931 8970 comcast.com. ejpCKqTqDSv73XSS3ZIXugw9z69UDAH+YR5eqt3xMaIqA7L8sS//ch1lYAHDb2eHeOO1DZPl4mFy XurZ8sChXNBkKEs8Gpsfwf36lERc1jFsA1KH7eBgkWEdnP/YzUro7iUOwFp2gwJ8fP5QHXlcq7YO goD6FW+qvXRS8yAl4Sk= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	dns104.comcast.net is authoritative for comcast.com
	Found RRSIG signed by comcast.com zone
	Query to dns104.comcast.net for comcast.com/A
	Received 227 bytes from 68.87.68.244
	;; Response received from [68.87.68.244] 227 octets ;; HEADER SECTION ;; id = 5217 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; comcast.com. IN A ;; ANSWER SECTION (2 records) comcast.com. 300 IN A 96.99.227.0 comcast.com. 300 IN RRSIG ( A 5 2 300 20240604144431 20240518143931 8970 comcast.com. ejpCKqTqDSv73XSS3ZIXugw9z69UDAH+YR5eqt3xMaIqA7L8sS//ch1lYAHDb2eHeOO1DZPl4mFy XurZ8sChXNBkKEs8Gpsfwf36lERc1jFsA1KH7eBgkWEdnP/YzUro7iUOwFp2gwJ8fP5QHXlcq7YO goD6FW+qvXRS8yAl4Sk= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	comcast.com A RR has value 96.99.227.0
	Found 1 RRSIGs over A RRset
	`comcast.com. 300 IN RRSIG ( A 5 2 300 20240604144431 20240518143931 8970 comcast.com. ejpCKqTqDSv73XSS3ZIXugw9z69UDAH+YR5eqt3xMaIqA7L8sS//ch1lYAHDb2eHeOO1DZPl4mFy XurZ8sChXNBkKEs8Gpsfwf36lERc1jFsA1KH7eBgkWEdnP/YzUro7iUOwFp2gwJ8fP5QHXlcq7YO goD6FW+qvXRS8yAl4Sk= )`
	RRSIG=8970 and DNSKEY=8970 verifies the A RRset

comcast.com

	Query to dns101.comcast.net for comcast.com/A
	Received 227 bytes from 69.252.250.103
	;; Response received from [69.252.250.103] 227 octets ;; HEADER SECTION ;; id = 61153 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; comcast.com. IN A ;; ANSWER SECTION (2 records) comcast.com. 300 IN A 96.99.227.0 comcast.com. 300 IN RRSIG ( A 5 2 300 20240604144431 20240518143931 8970 comcast.com. ejpCKqTqDSv73XSS3ZIXugw9z69UDAH+YR5eqt3xMaIqA7L8sS//ch1lYAHDb2eHeOO1DZPl4mFy XurZ8sChXNBkKEs8Gpsfwf36lERc1jFsA1KH7eBgkWEdnP/YzUro7iUOwFp2gwJ8fP5QHXlcq7YO goD6FW+qvXRS8yAl4Sk= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	dns101.comcast.net is authoritative for comcast.com
	Found RRSIG signed by comcast.com zone
	Query to dns101.comcast.net for comcast.com/A
	Received 227 bytes from 69.252.250.103
	;; Response received from [69.252.250.103] 227 octets ;; HEADER SECTION ;; id = 55212 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; comcast.com. IN A ;; ANSWER SECTION (2 records) comcast.com. 300 IN A 96.99.227.0 comcast.com. 300 IN RRSIG ( A 5 2 300 20240604144431 20240518143931 8970 comcast.com. ejpCKqTqDSv73XSS3ZIXugw9z69UDAH+YR5eqt3xMaIqA7L8sS//ch1lYAHDb2eHeOO1DZPl4mFy XurZ8sChXNBkKEs8Gpsfwf36lERc1jFsA1KH7eBgkWEdnP/YzUro7iUOwFp2gwJ8fP5QHXlcq7YO goD6FW+qvXRS8yAl4Sk= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	comcast.com A RR has value 96.99.227.0
	Found 1 RRSIGs over A RRset
	`comcast.com. 300 IN RRSIG ( A 5 2 300 20240604144431 20240518143931 8970 comcast.com. ejpCKqTqDSv73XSS3ZIXugw9z69UDAH+YR5eqt3xMaIqA7L8sS//ch1lYAHDb2eHeOO1DZPl4mFy XurZ8sChXNBkKEs8Gpsfwf36lERc1jFsA1KH7eBgkWEdnP/YzUro7iUOwFp2gwJ8fP5QHXlcq7YO goD6FW+qvXRS8yAl4Sk= )`
	RRSIG=8970 and DNSKEY=8970 verifies the A RRset

Move your mouse over any or symbols for remediation hints.

Want a second opinion? Test comcast.com at dnsviz.net.

DNSSEC Debugger

↓ Advanced options ↑ Advanced options

Trust Anchor:
Name Servers: