DNSSEC Debugger - ether.trade

Domain Name:

Time: 2024-05-17 12:20:33 UTC

Analyzing DNSSEC problems for ether.trade

DS=20326/SHA-256 is now in the chain-of-trust

	Checking DS between Trust Anchor and .
	`. IN DS ( 20326 8 2 e06d44b80b8f1d39a95c0b0d7c65d08458e880409bbc683457104237c7f8ec8d )`
	Query to m.root-servers.net for ./DNSKEY
	Received 865 bytes from 202.12.27.33
	;; Response received from [202.12.27.33] 865 octets ;; HEADER SECTION ;; id = 39602 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; . IN DNSKEY ;; ANSWER SECTION (3 records) . 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; Key ID = 20326 . 172800 IN DNSKEY ( 256 3 8 AwEAAZBALoOFImwcJJg9Iu7Vy7ZyLjhtXfvO1c9k4vHjOpf9i7U1kKtrBvhnwsOni1sb50gkUayR tMDTUQqvljMMf4bpkyEtcE5evCzhHbFLq1coL5QOix3mfJm++FvIMaAt52nOvAdqR/luuI11bA1A mSCIJKAUx147DcfOHYKg3as+dznn3Iah4cWBMVzDe7PPsFS1AO6gU8EpmiRJ9VMNA09fOyDuq9+d 6sw8UUnJRMAFAuPLhUFjUAOuWOw74BC9lOtMQpbLMz8pX0CDKdOXDHjyj61nxSSWxPdUjeoxI17l QTpSPRtqRHFn5Fgj2e+9BVwhhWGDQN8kUVSJHZtQiI0= ) ; Key ID = 5613 . 172800 IN RRSIG ( DNSKEY 8 0 172800 20240601000000 20240511000000 20326 . OgCibhptSNJS9XS2WD2CXYw0HsdjPXn82iYAtzkE7ma1H2BfchG8nRnFZJ9fbrCjXAhDPnKCkuId 8cuJ2PGuLzy9Q3d4zIt7Ow5o8YkpKGEJB6uVi1BRauxVzKgH7u5QnKf8d1AlKFikFdBHHLaZ97XG ci02qRRm1jpe+aY4sLnKHx1kTJozHJp+Xaml/nCiS4AXrCxNyc4EH2/oraODfaewFIOQjpsAMeAw tPrccpst4ZL/9jmZUdRSs3IHwMk9gvSwpZI0YVBWZocKg96CmQQgq9NNNGhpI5gXXdbP++bu4myT GIx8wR1vjK7nau9GJK+76Bt4bc+1FIfpq4mbSg== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 2 DNSKEY records for .
	`. 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; Key ID = 20326`
	`. 172800 IN DNSKEY ( 256 3 8 AwEAAZBALoOFImwcJJg9Iu7Vy7ZyLjhtXfvO1c9k4vHjOpf9i7U1kKtrBvhnwsOni1sb50gkUayR tMDTUQqvljMMf4bpkyEtcE5evCzhHbFLq1coL5QOix3mfJm++FvIMaAt52nOvAdqR/luuI11bA1A mSCIJKAUx147DcfOHYKg3as+dznn3Iah4cWBMVzDe7PPsFS1AO6gU8EpmiRJ9VMNA09fOyDuq9+d 6sw8UUnJRMAFAuPLhUFjUAOuWOw74BC9lOtMQpbLMz8pX0CDKdOXDHjyj61nxSSWxPdUjeoxI17l QTpSPRtqRHFn5Fgj2e+9BVwhhWGDQN8kUVSJHZtQiI0= ) ; Key ID = 5613`
	DNSKEY=20326/SEP is now in the chain-of-trust
	DS=20326/SHA-256 verifies DNSKEY=20326/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`. 172800 IN RRSIG ( DNSKEY 8 0 172800 20240601000000 20240511000000 20326 . OgCibhptSNJS9XS2WD2CXYw0HsdjPXn82iYAtzkE7ma1H2BfchG8nRnFZJ9fbrCjXAhDPnKCkuId 8cuJ2PGuLzy9Q3d4zIt7Ow5o8YkpKGEJB6uVi1BRauxVzKgH7u5QnKf8d1AlKFikFdBHHLaZ97XG ci02qRRm1jpe+aY4sLnKHx1kTJozHJp+Xaml/nCiS4AXrCxNyc4EH2/oraODfaewFIOQjpsAMeAw tPrccpst4ZL/9jmZUdRSs3IHwMk9gvSwpZI0YVBWZocKg96CmQQgq9NNNGhpI5gXXdbP++bu4myT GIx8wR1vjK7nau9GJK+76Bt4bc+1FIfpq4mbSg== )`
	RRSIG=20326 and DNSKEY=20326/SEP verifies the DNSKEY RRset
	DNSKEY=5613 is now in the chain-of-trust
	Query to i.root-servers.net for ether.trade/A
	Received 763 bytes from 192.36.148.17
	;; Response received from [192.36.148.17] 763 octets ;; HEADER SECTION ;; id = 59348 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 8 arcount = 13 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; ether.trade. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (8 records) trade. 172800 IN NS a.nic.trade. trade. 172800 IN NS c.nic.trade. trade. 172800 IN NS b.nic.trade. trade. 172800 IN NS ns1.dns.nic.trade. trade. 172800 IN NS ns2.dns.nic.trade. trade. 172800 IN NS ns3.dns.nic.trade. trade. 86400 IN DS ( 64969 8 2 a6a28c3e7e7027758c2a68a2d255ff07956cf8bc41ce1f8bf8eeaefd9280552b ) trade. 86400 IN RRSIG ( DS 8 1 86400 20240530050000 20240517040000 5613 . DmW2mt/aeiz7sRC0iogLvaunCSFybWfGfb0VlI9ruSl5I6aJbc0gqWZAmfFIvAyOFEsH5384rbuz f3tF+lCXXbkyKEAsEbwOdjyDBO4yv7/czMvzWZ1NHtbqRInrLGoMVdehjLJEfA5QCWmkl6xKOe2W QLEw/0tJ962QUOhJFJ4v8eSjaP4vPZdH/95dn/c0id6QU0+A6WaJJiNTNjQqRCWJpeemfx81p+qO y9LbQt6cvYV6qCPbzcF16XFi2ql8OtOaTw9mwFb4RC8gyOC1dxySaxdbgrfzyvXz+eTAFm/CKeGH 2HEI8pufusGihvvp4CJGBfltvdT8gQ0DfnDxvg== ) ;; ADDITIONAL SECTION (13 records) ns3.dns.nic.trade. 172800 IN A 156.154.159.165 ns2.dns.nic.trade. 172800 IN A 156.154.145.165 ns1.dns.nic.trade. 172800 IN A 156.154.144.165 c.nic.trade. 172800 IN A 37.209.196.10 b.nic.trade. 172800 IN A 37.209.194.10 a.nic.trade. 172800 IN A 37.209.192.10 ns3.dns.nic.trade. 172800 IN AAAA 2610:a1:1073::a5 ns2.dns.nic.trade. 172800 IN AAAA 2610:a1:1072::a5 ns1.dns.nic.trade. 172800 IN AAAA 2610:a1:1071::a5 c.nic.trade. 172800 IN AAAA 2001:dcd:3::10 b.nic.trade. 172800 IN AAAA 2001:dcd:2::10 a.nic.trade. 172800 IN AAAA 2001:dcd:1::10 ;; { "EDNS-VERSION": 0 }
	Query to e.root-servers.net for trade/DNSKEY
	Received 743 bytes from 192.203.230.10
	;; Response received from [192.203.230.10] 743 octets ;; HEADER SECTION ;; id = 17002 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 8 arcount = 13 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; trade. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (8 records) trade. 172800 IN NS a.nic.trade. trade. 172800 IN NS b.nic.trade. trade. 172800 IN NS c.nic.trade. trade. 172800 IN NS ns1.dns.nic.trade. trade. 172800 IN NS ns2.dns.nic.trade. trade. 172800 IN NS ns3.dns.nic.trade. trade. 86400 IN DS ( 64969 8 2 a6a28c3e7e7027758c2a68a2d255ff07956cf8bc41ce1f8bf8eeaefd9280552b ) trade. 86400 IN RRSIG ( DS 8 1 86400 20240530050000 20240517040000 5613 . DmW2mt/aeiz7sRC0iogLvaunCSFybWfGfb0VlI9ruSl5I6aJbc0gqWZAmfFIvAyOFEsH5384rbuz f3tF+lCXXbkyKEAsEbwOdjyDBO4yv7/czMvzWZ1NHtbqRInrLGoMVdehjLJEfA5QCWmkl6xKOe2W QLEw/0tJ962QUOhJFJ4v8eSjaP4vPZdH/95dn/c0id6QU0+A6WaJJiNTNjQqRCWJpeemfx81p+qO y9LbQt6cvYV6qCPbzcF16XFi2ql8OtOaTw9mwFb4RC8gyOC1dxySaxdbgrfzyvXz+eTAFm/CKeGH 2HEI8pufusGihvvp4CJGBfltvdT8gQ0DfnDxvg== ) ;; ADDITIONAL SECTION (13 records) a.nic.trade. 172800 IN A 37.209.192.10 b.nic.trade. 172800 IN A 37.209.194.10 c.nic.trade. 172800 IN A 37.209.196.10 ns1.dns.nic.trade. 172800 IN A 156.154.144.165 ns2.dns.nic.trade. 172800 IN A 156.154.145.165 ns3.dns.nic.trade. 172800 IN A 156.154.159.165 a.nic.trade. 172800 IN AAAA 2001:dcd:1::10 b.nic.trade. 172800 IN AAAA 2001:dcd:2::10 c.nic.trade. 172800 IN AAAA 2001:dcd:3::10 ns1.dns.nic.trade. 172800 IN AAAA 2610:a1:1071::a5 ns2.dns.nic.trade. 172800 IN AAAA 2610:a1:1072::a5 ns3.dns.nic.trade. 172800 IN AAAA 2610:a1:1073::a5 ;; { "EDNS-VERSION": 0 }
	Found child zone trade

trade

	Checking DS between . and trade
	Query to k.root-servers.net for trade/DS
	Received 369 bytes from 193.0.14.129
	;; Response received from [193.0.14.129] 369 octets ;; HEADER SECTION ;; id = 65394 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; trade. IN DS ;; ANSWER SECTION (2 records) trade. 86400 IN DS ( 64969 8 2 a6a28c3e7e7027758c2a68a2d255ff07956cf8bc41ce1f8bf8eeaefd9280552b ) trade. 86400 IN RRSIG ( DS 8 1 86400 20240530050000 20240517040000 5613 . DmW2mt/aeiz7sRC0iogLvaunCSFybWfGfb0VlI9ruSl5I6aJbc0gqWZAmfFIvAyOFEsH5384rbuz f3tF+lCXXbkyKEAsEbwOdjyDBO4yv7/czMvzWZ1NHtbqRInrLGoMVdehjLJEfA5QCWmkl6xKOe2W QLEw/0tJ962QUOhJFJ4v8eSjaP4vPZdH/95dn/c0id6QU0+A6WaJJiNTNjQqRCWJpeemfx81p+qO y9LbQt6cvYV6qCPbzcF16XFi2ql8OtOaTw9mwFb4RC8gyOC1dxySaxdbgrfzyvXz+eTAFm/CKeGH 2HEI8pufusGihvvp4CJGBfltvdT8gQ0DfnDxvg== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 1 DS records for trade in the . zone
	DS=64969/SHA-256 has algorithm RSASHA256
	Found 1 RRSIGs over DS RRset
	`trade. 86400 IN RRSIG ( DS 8 1 86400 20240530050000 20240517040000 5613 . DmW2mt/aeiz7sRC0iogLvaunCSFybWfGfb0VlI9ruSl5I6aJbc0gqWZAmfFIvAyOFEsH5384rbuz f3tF+lCXXbkyKEAsEbwOdjyDBO4yv7/czMvzWZ1NHtbqRInrLGoMVdehjLJEfA5QCWmkl6xKOe2W QLEw/0tJ962QUOhJFJ4v8eSjaP4vPZdH/95dn/c0id6QU0+A6WaJJiNTNjQqRCWJpeemfx81p+qO y9LbQt6cvYV6qCPbzcF16XFi2ql8OtOaTw9mwFb4RC8gyOC1dxySaxdbgrfzyvXz+eTAFm/CKeGH 2HEI8pufusGihvvp4CJGBfltvdT8gQ0DfnDxvg== )`
	RRSIG=5613 and DNSKEY=5613 verifies the DS RRset
	DS=64969/SHA-256 is now in the chain-of-trust
	`trade. 86400 IN DS ( 64969 8 2 a6a28c3e7e7027758c2a68a2d255ff07956cf8bc41ce1f8bf8eeaefd9280552b )`
	Query to ns3.dns.nic.trade for trade/DNSKEY
	Received 1256 bytes from 156.154.159.165
	;; Response received from [156.154.159.165] 1256 octets ;; HEADER SECTION ;; id = 27131 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 5 nscount = 0 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; trade. IN DNSKEY ;; ANSWER SECTION (5 records) trade. 7200 IN DNSKEY ( 257 3 8 AwEAAbqkCuFtRWTShmiOdhGM+baPsrJQER3LMVFY5jmGlszTLlUSD9RXTu6DZTnT0FuONRD7WpEy livHxaihvPTEkvAAovL+H3BMI2uofjJd1MUsYvIHIoy8KI32QvlW81sAD4qJeSa+UGQxR6yfm6ln kZVxv+VlxEq1P7VinLGvJ4F7nkhVZih0jImkXAPZZD+a1aTZt+9szpDOkU9zV6VE3929ezbRtNQT ix83+MQpPcbEJOAAfdWKKXCmjmeHGNsd5yx3nCpTgKNxTKAPaycKgzG3JCeEj+gL5tkZgBvGz9He 1AaE3yIdHdUEGmbXzYnRiYyFs1YKWmTt82UvV5VYtJU= ) ; Key ID = 64969 trade. 7200 IN DNSKEY ( 256 3 8 AwEAAeZeeimjpK4AVFn3TkJmuxrXtdKzt9x64LLMjM3zTujD23uKitYymvuXePn30L6jWHmN41/c eM7Sem4Tud3bHHMbrGQhT2EQdZ0IoqPdE2MY1EtUOpgK8/OTcmrxUDSzIKk/lSw0MLA3V+4oOeCi dBqjQDwXQWRTJ074Yr/snY6GbGmk5bgdltvVjAIST7ES9y1m7NMwHn5fUzxL+NfsseM= ) ; Key ID = 41760 trade. 7200 IN DNSKEY ( 257 3 8 AwEAAbBlW5+Hmr3Rg29IvT0v6KJ2RZZyZwa40PzmEOsfnrjc/25asRJ3mq/X9+KhvIfQ37Hc881n 7GE3Cn54sfb45iiR398WD7G79+WRwjt59Sj6ErSnBS7IBDaLW7R3JEJVYnu6eANugc+Pu+OAXmoC xmQmMqpaHImp+hjVVAgtP0KioWzSamUujoYNx1eh0S/XBaNdoZxH3qcTpCtkgNIQVc88yzO1XfbR Qi5hEIpToKvxrFp2o9MtWrpMvo8boyjFqyhBatAsUZikC8FKLxhKojzJ2NkMiU6qVlDK3Jt2gcdk Lg/x47BnmDvMigVOE2rmiPGlK23/XMvI12mPBg/aQAc= ) ; Key ID = 34372 trade. 7200 IN RRSIG ( DNSKEY 8 1 7200 20240612042648 20240513040720 64969 trade. OLitbSG96EiZvzQ4f+Bfp/3399KOlnTg5/S81VLOKOi9YEQF0sIGGf5/R4Hx+kiKlIDEK1cxu5ul AqEfovNWenkKQxU30gKVPPeIPjO24Y3X3if2g1kVAe5fc5TifRap14AEM3Z67MNcnLtF31A83x3r lMzoaRQeGIkTQ17uvCJzbHqzRra2F2ZGbl6m7LQ9iI1SIKbEpprZYKw9jVuaMdyEhnR5xd+nE06z JH5KZud9nz14hfa8acsuy6F5lGabMVnblf5+SXSEzVoeL0wKkcuwCySYau5hGJiUbXdnMw44pAJR 2IWm48kG9jm1Ypq6OH31otls7qNT0rmkmX06sw== ) trade. 7200 IN RRSIG ( DNSKEY 8 1 7200 20240612042648 20240513040720 41760 trade. smq2flBxSjIw9/Vn4AT63pVMoQ09PhSR+NhAv+KKjwQ7go6z8mhzynTsS70jwbW7c6Y5Dn16QhVo v98ILeUr1vXU/T0dgSYNgoPcnX/tIOQFRDZC/ZuspdcaQfIROKLTK1kY9c+T8tW3TzZT4pj/W99y c8TCO4KSIZ3B03be0FrPskEqo6SmHbFH22z8aOTAyOs3pe4pNCzXWPrQGwTMPw== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 3 DNSKEY records for trade
	`trade. 7200 IN DNSKEY ( 257 3 8 AwEAAbqkCuFtRWTShmiOdhGM+baPsrJQER3LMVFY5jmGlszTLlUSD9RXTu6DZTnT0FuONRD7WpEy livHxaihvPTEkvAAovL+H3BMI2uofjJd1MUsYvIHIoy8KI32QvlW81sAD4qJeSa+UGQxR6yfm6ln kZVxv+VlxEq1P7VinLGvJ4F7nkhVZih0jImkXAPZZD+a1aTZt+9szpDOkU9zV6VE3929ezbRtNQT ix83+MQpPcbEJOAAfdWKKXCmjmeHGNsd5yx3nCpTgKNxTKAPaycKgzG3JCeEj+gL5tkZgBvGz9He 1AaE3yIdHdUEGmbXzYnRiYyFs1YKWmTt82UvV5VYtJU= ) ; Key ID = 64969`
	`trade. 7200 IN DNSKEY ( 256 3 8 AwEAAeZeeimjpK4AVFn3TkJmuxrXtdKzt9x64LLMjM3zTujD23uKitYymvuXePn30L6jWHmN41/c eM7Sem4Tud3bHHMbrGQhT2EQdZ0IoqPdE2MY1EtUOpgK8/OTcmrxUDSzIKk/lSw0MLA3V+4oOeCi dBqjQDwXQWRTJ074Yr/snY6GbGmk5bgdltvVjAIST7ES9y1m7NMwHn5fUzxL+NfsseM= ) ; Key ID = 41760`
	`trade. 7200 IN DNSKEY ( 257 3 8 AwEAAbBlW5+Hmr3Rg29IvT0v6KJ2RZZyZwa40PzmEOsfnrjc/25asRJ3mq/X9+KhvIfQ37Hc881n 7GE3Cn54sfb45iiR398WD7G79+WRwjt59Sj6ErSnBS7IBDaLW7R3JEJVYnu6eANugc+Pu+OAXmoC xmQmMqpaHImp+hjVVAgtP0KioWzSamUujoYNx1eh0S/XBaNdoZxH3qcTpCtkgNIQVc88yzO1XfbR Qi5hEIpToKvxrFp2o9MtWrpMvo8boyjFqyhBatAsUZikC8FKLxhKojzJ2NkMiU6qVlDK3Jt2gcdk Lg/x47BnmDvMigVOE2rmiPGlK23/XMvI12mPBg/aQAc= ) ; Key ID = 34372`
	DNSKEY=64969/SEP is now in the chain-of-trust
	DS=64969/SHA-256 verifies DNSKEY=64969/SEP
	Found 2 RRSIGs over DNSKEY RRset
	`trade. 7200 IN RRSIG ( DNSKEY 8 1 7200 20240612042648 20240513040720 64969 trade. OLitbSG96EiZvzQ4f+Bfp/3399KOlnTg5/S81VLOKOi9YEQF0sIGGf5/R4Hx+kiKlIDEK1cxu5ul AqEfovNWenkKQxU30gKVPPeIPjO24Y3X3if2g1kVAe5fc5TifRap14AEM3Z67MNcnLtF31A83x3r lMzoaRQeGIkTQ17uvCJzbHqzRra2F2ZGbl6m7LQ9iI1SIKbEpprZYKw9jVuaMdyEhnR5xd+nE06z JH5KZud9nz14hfa8acsuy6F5lGabMVnblf5+SXSEzVoeL0wKkcuwCySYau5hGJiUbXdnMw44pAJR 2IWm48kG9jm1Ypq6OH31otls7qNT0rmkmX06sw== )`
	`trade. 7200 IN RRSIG ( DNSKEY 8 1 7200 20240612042648 20240513040720 41760 trade. smq2flBxSjIw9/Vn4AT63pVMoQ09PhSR+NhAv+KKjwQ7go6z8mhzynTsS70jwbW7c6Y5Dn16QhVo v98ILeUr1vXU/T0dgSYNgoPcnX/tIOQFRDZC/ZuspdcaQfIROKLTK1kY9c+T8tW3TzZT4pj/W99y c8TCO4KSIZ3B03be0FrPskEqo6SmHbFH22z8aOTAyOs3pe4pNCzXWPrQGwTMPw== )`
	RRSIG=64969 and DNSKEY=64969/SEP verifies the DNSKEY RRset
	RRSIG=41760 and DNSKEY=41760 verifies the DNSKEY RRset
	DNSKEY=41760 is now in the chain-of-trust
	DNSKEY=34372/SEP is now in the chain-of-trust
	Query to ns2.dns.nic.trade for ether.trade/A
	Received 636 bytes from 156.154.145.165
	;; Response received from [156.154.145.165] 636 octets ;; HEADER SECTION ;; id = 40648 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 6 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; ether.trade. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (6 records) ether.trade. 3600 IN NS ns1.dan.com. ether.trade. 3600 IN NS ns2.dan.com. 8o9l97kse26td94ab8a025bn0s77i293.trade. 900 IN NSEC3 ( 1 1 0 - 8os6a5vuomqmk7rpg2lj706d10at5h11 NS SOA RRSIG DNSKEY NSEC3PARAM ) 6to0vq0nbkc06tt4v4ik1c4taue285km.trade. 900 IN NSEC3 ( 1 1 0 - 6tv32spp5smf36k43fe14ed9pr9mni71 NS DS RRSIG ) 6to0vq0nbkc06tt4v4ik1c4taue285km.trade. 900 IN RRSIG ( NSEC3 8 2 900 20240611162454 20240512153134 41760 trade. Fxel5WiwtLzFN51YmmWwFBhAskJET7UHnDPdqKVyMfSyomRYlXcRM7efBIFkvHbK7y6BzUnSkxOl fAe8TSa6LI5c9tTYxRbuZSsaQrhDFwPNU+zU0kjEgreHtUo1g5yKy+LeJN5m8LvdBvUKfkOTfz28 44BfcjcQRV6ticOPWLK2BUB1EiiU7CMbbqCXFm0+2joGomjqQcSKV8SORsLVzw== ) 8o9l97kse26td94ab8a025bn0s77i293.trade. 900 IN RRSIG ( NSEC3 8 2 900 20240613063443 20240514060243 41760 trade. X1f8SMMHGpPA+nNjMp2x04Xd6N3a5OhqozHpGOdZJUg1K2iljfuXZBUySnLNAzgjkDGLSm3cOx/E 7skc8kuDzsI8Kx+B58EC4+lYaScMaw9sEvUG51HslqFBFOEK+5QOyyiibvNFz2psJnHIU3GIbImI cWSM4Yj7TXkxVHzHZW4TVwbOBjKGc2KM9vk9MobUiJbamZoDAMc5mRR41aEhfg== ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Query to b.nic.trade for ether.trade/DNSKEY
	Received 636 bytes from 37.209.194.10
	;; Response received from [37.209.194.10] 636 octets ;; HEADER SECTION ;; id = 30305 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 6 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; ether.trade. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (6 records) ether.trade. 3600 IN NS ns1.dan.com. ether.trade. 3600 IN NS ns2.dan.com. 8o9l97kse26td94ab8a025bn0s77i293.trade. 900 IN NSEC3 ( 1 1 0 - 8os6a5vuomqmk7rpg2lj706d10at5h11 NS SOA RRSIG DNSKEY NSEC3PARAM ) 8o9l97kse26td94ab8a025bn0s77i293.trade. 900 IN RRSIG ( NSEC3 8 2 900 20240613063443 20240514060243 41760 trade. X1f8SMMHGpPA+nNjMp2x04Xd6N3a5OhqozHpGOdZJUg1K2iljfuXZBUySnLNAzgjkDGLSm3cOx/E 7skc8kuDzsI8Kx+B58EC4+lYaScMaw9sEvUG51HslqFBFOEK+5QOyyiibvNFz2psJnHIU3GIbImI cWSM4Yj7TXkxVHzHZW4TVwbOBjKGc2KM9vk9MobUiJbamZoDAMc5mRR41aEhfg== ) 6to0vq0nbkc06tt4v4ik1c4taue285km.trade. 900 IN NSEC3 ( 1 1 0 - 6tv32spp5smf36k43fe14ed9pr9mni71 NS DS RRSIG ) 6to0vq0nbkc06tt4v4ik1c4taue285km.trade. 900 IN RRSIG ( NSEC3 8 2 900 20240611162454 20240512153134 41760 trade. Fxel5WiwtLzFN51YmmWwFBhAskJET7UHnDPdqKVyMfSyomRYlXcRM7efBIFkvHbK7y6BzUnSkxOl fAe8TSa6LI5c9tTYxRbuZSsaQrhDFwPNU+zU0kjEgreHtUo1g5yKy+LeJN5m8LvdBvUKfkOTfz28 44BfcjcQRV6ticOPWLK2BUB1EiiU7CMbbqCXFm0+2joGomjqQcSKV8SORsLVzw== ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found child zone ether.trade

ether.trade

	Checking DS between trade and ether.trade
	Query to a.nic.trade for ether.trade/DS
	Received 862 bytes from 37.209.192.10
	;; Response received from [37.209.192.10] 862 octets ;; HEADER SECTION ;; id = 10940 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 6 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; ether.trade. IN DS ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (6 records) 8o9l97kse26td94ab8a025bn0s77i293.trade. 900 IN NSEC3 ( 1 1 0 - 8os6a5vuomqmk7rpg2lj706d10at5h11 NS SOA RRSIG DNSKEY NSEC3PARAM ) 8o9l97kse26td94ab8a025bn0s77i293.trade. 900 IN RRSIG ( NSEC3 8 2 900 20240613063443 20240514060243 41760 trade. X1f8SMMHGpPA+nNjMp2x04Xd6N3a5OhqozHpGOdZJUg1K2iljfuXZBUySnLNAzgjkDGLSm3cOx/E 7skc8kuDzsI8Kx+B58EC4+lYaScMaw9sEvUG51HslqFBFOEK+5QOyyiibvNFz2psJnHIU3GIbImI cWSM4Yj7TXkxVHzHZW4TVwbOBjKGc2KM9vk9MobUiJbamZoDAMc5mRR41aEhfg== ) trade. 900 IN SOA ( ns1.dns.nic.trade. admin.tldns.godaddy. 1715945965 ;serial 1800 ;refresh 300 ;retry 604800 ;expire 1800 ;minimum ) trade. 900 IN RRSIG ( SOA 8 1 900 20240616121431 20240517111431 41760 trade. U6hCuj2s7eDgNhubkYae/Gf9RRbCbxOPJ4P91832p+baS1WWnnv/MGl/NjFwGSCGx4sg8hS0hn18 pzpaXIfULfDp6kYwAmNEi0cku//zihV3xAgNPKuDA6d7+1uiKmjaxZ463siSFjGZVleBNy5egkq2 IzknkR2BkkelEcpHpn2X5ttaE3kdineMrxMX7gSl1Afk65bKQONnYAWT5jBqRA== ) 6to0vq0nbkc06tt4v4ik1c4taue285km.trade. 900 IN NSEC3 ( 1 1 0 - 6tv32spp5smf36k43fe14ed9pr9mni71 NS DS RRSIG ) 6to0vq0nbkc06tt4v4ik1c4taue285km.trade. 900 IN RRSIG ( NSEC3 8 2 900 20240611162454 20240512153134 41760 trade. Fxel5WiwtLzFN51YmmWwFBhAskJET7UHnDPdqKVyMfSyomRYlXcRM7efBIFkvHbK7y6BzUnSkxOl fAe8TSa6LI5c9tTYxRbuZSsaQrhDFwPNU+zU0kjEgreHtUo1g5yKy+LeJN5m8LvdBvUKfkOTfz28 44BfcjcQRV6ticOPWLK2BUB1EiiU7CMbbqCXFm0+2joGomjqQcSKV8SORsLVzw== ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	No DS records found for ether.trade in the trade zone
	Query to ns1.dan.com for ether.trade/DNSKEY
	Received 100 bytes from 97.74.98.67
	;; Response received from [97.74.98.67] 100 octets ;; HEADER SECTION ;; id = 13736 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 1 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1200, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; ether.trade. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (1 record) ether.trade. 86400 IN SOA ( ns1.dan.com. dns.jomax.net. 2023031300 ;serial 28800 ;refresh 7200 ;retry 604800 ;expire 86400 ;minimum ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	No DNSKEY records found
	Query to ns1.dan.com for ether.trade/A
	Received 99 bytes from 97.74.98.67
	;; Response received from [97.74.98.67] 99 octets ;; HEADER SECTION ;; id = 21878 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 1 nscount = 2 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1200, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; ether.trade. IN A ;; ANSWER SECTION (1 record) ether.trade. 7200 IN A 3.64.163.50 ;; AUTHORITY SECTION (2 records) ether.trade. 86400 IN NS ns2.dan.com. ether.trade. 86400 IN NS ns1.dan.com. ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	ns1.dan.com is authoritative for ether.trade
	Query to ns2.dan.com for ether.trade/SOA
	Received 132 bytes from 173.201.66.67
	;; Response received from [173.201.66.67] 132 octets ;; HEADER SECTION ;; id = 4003 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 1 nscount = 2 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1200, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; ether.trade. IN SOA ;; ANSWER SECTION (1 record) ether.trade. 86400 IN SOA ( ns1.dan.com. dns.jomax.net. 2023031300 ;serial 28800 ;refresh 7200 ;retry 604800 ;expire 86400 ;minimum ) ;; AUTHORITY SECTION (2 records) ether.trade. 86400 IN NS ns1.dan.com. ether.trade. 86400 IN NS ns2.dan.com. ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Query to ns1.dan.com for ether.trade/A
	Received 99 bytes from 97.74.98.67
	;; Response received from [97.74.98.67] 99 octets ;; HEADER SECTION ;; id = 36586 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 1 nscount = 2 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1200, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; ether.trade. IN A ;; ANSWER SECTION (1 record) ether.trade. 7200 IN A 3.64.163.50 ;; AUTHORITY SECTION (2 records) ether.trade. 86400 IN NS ns2.dan.com. ether.trade. 86400 IN NS ns1.dan.com. ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	ether.trade A RR has value 3.64.163.50
	No RRSIGs found

ether.trade

	Query to ns2.dan.com for ether.trade/A
	Received 99 bytes from 173.201.66.67
	;; Response received from [173.201.66.67] 99 octets ;; HEADER SECTION ;; id = 40918 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 1 nscount = 2 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1200, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; ether.trade. IN A ;; ANSWER SECTION (1 record) ether.trade. 7200 IN A 3.64.163.50 ;; AUTHORITY SECTION (2 records) ether.trade. 86400 IN NS ns2.dan.com. ether.trade. 86400 IN NS ns1.dan.com. ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	ns2.dan.com is authoritative for ether.trade
	Query to ns2.dan.com for ether.trade/A
	Received 99 bytes from 173.201.66.67
	;; Response received from [173.201.66.67] 99 octets ;; HEADER SECTION ;; id = 21485 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 1 nscount = 2 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1200, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; ether.trade. IN A ;; ANSWER SECTION (1 record) ether.trade. 7200 IN A 3.64.163.50 ;; AUTHORITY SECTION (2 records) ether.trade. 86400 IN NS ns2.dan.com. ether.trade. 86400 IN NS ns1.dan.com. ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	ether.trade A RR has value 3.64.163.50
	No RRSIGs found

Move your mouse over any or symbols for remediation hints.

Want a second opinion? Test ether.trade at dnsviz.net.

DNSSEC Debugger

↓ Advanced options ↑ Advanced options

Trust Anchor:
Name Servers: