DNSSEC Debugger - bewabi.co

Back to Verisign Labs Tools

Domain Name:

Detail: more(+) / less(-)

Time: 2026-06-13 10:24:16 UTC

Analyzing DNSSEC problems for bewabi.co

DS=20326/SHA-256 is now in the chain-of-trust

DS=38696/SHA-256 is now in the chain-of-trust

	Checking DS between Trust Anchor and .
	`. IN DS ( 20326 8 2 e06d44b80b8f1d39a95c0b0d7c65d08458e880409bbc683457104237c7f8ec8d )`
	`. IN DS ( 38696 8 2 683d2d0acb8c9b712a1948b27f741219298d0a450d612c483af444a4c0fb2b16 )`
	Query to m.root-servers.net for ./DNSKEY
	Received 1141 bytes from 202.12.27.33
	;; Response received from [202.12.27.33] 1141 octets ;; HEADER SECTION ;; id = 8437 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 4 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; . IN DNSKEY ;; ANSWER SECTION (4 records) . 172800 IN DNSKEY ( 257 3 8 AwEAAa96jeuknZlaeSrvyAJj6ZHv28hhOKkx3rLGXVaC6rXTsDc449/cidltpkyGwCJNnOAlFNKF 2jBosZBU5eeHspaQWOmOElZsjICMQMC3aeHbGiShvZsx4wMYSjH8e7Vrhbu6irwCzVBApESjbUdp WWmEnhathWu1jo+siFUiRAAxm9qyJNg/wOZqqzL/dL/q8PkcRU5oUKEpUge71M3ej2/7CPqpdVwu MoTvoB+ZOT4YeGyxMvHmbrxlFzGOHOijtzN+u1TQNatX2XBuzZNQ1K+s2CXkPIZo7s6JgZyvaBev YtxPvYLw4z9mR7K2vaF18UYH9Z9GNUUeayffKC73PYc= ) ; keytag 38696 . 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; keytag 20326 . 172800 IN DNSKEY ( 256 3 8 AwEAAb5dDYffpgAJ8VUGLwQtWXPlQWsjIFJtCM00/XaKU+8ln+ofah3q2KxEIjvzQg+nqdxRj+8e mtPne1mtYcbFWP4Q9E+DniOJLK09R05FuzvGbrG7DDdRDUX/cedFdV7O8pFEAYpJqYNR9BCTIAV9 73DO2biauKSA31b7I2lK/woxoR1tf5cqJ4SMbJUviuHicAEoUi2ATswloZNWd5T5thmEFZnxFx7D 5UgKCY7oflS7+GU7dNJwEtmFnWYVETHN0kHXVz6aguouaAZp706YXNIoR/iTgQhmsR7XX+wL0Z8Q M2LxQIyU6vRZ06IyuJMGRMiwkSuGElbumyBt12JZbrU= ) ; keytag 54393 . 172800 IN RRSIG ( DNSKEY 8 0 172800 20260701000000 20260610000000 20326 . j4xwc5ju8Rar7jcd8yX1jGrb5c85D/uGNLvUpiKCzuSVqv0zhUS56KtqD0JmBo1rC+aWxywONWS6 o76i4p5TOOWFWdrops0E/Vw3OFQW+jLxsscc+Y9WUbK1PxTB3UPdWfiHw3azpvgsaaUdXAWeev5t MWZXcj4NM7NoCZJk9ig5onr298AVFZoFNZP6edyzWhyhkMX0DOxBH1M8+c8te2dFpck09pK2GEvA P5Cf1zlsGmZOiZRxB2mDLOXnCbqwJnHQSyhpW9QZkJGJbogrNPwMWdV+X3xcQ5n+dL9aRLtAkKeS p8FDo1ZeGo9xAbha9AjeCyPF3VkSRQEw9owjJg== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 3 DNSKEY records for .
	`. 172800 IN DNSKEY ( 257 3 8 AwEAAa96jeuknZlaeSrvyAJj6ZHv28hhOKkx3rLGXVaC6rXTsDc449/cidltpkyGwCJNnOAlFNKF 2jBosZBU5eeHspaQWOmOElZsjICMQMC3aeHbGiShvZsx4wMYSjH8e7Vrhbu6irwCzVBApESjbUdp WWmEnhathWu1jo+siFUiRAAxm9qyJNg/wOZqqzL/dL/q8PkcRU5oUKEpUge71M3ej2/7CPqpdVwu MoTvoB+ZOT4YeGyxMvHmbrxlFzGOHOijtzN+u1TQNatX2XBuzZNQ1K+s2CXkPIZo7s6JgZyvaBev YtxPvYLw4z9mR7K2vaF18UYH9Z9GNUUeayffKC73PYc= ) ; keytag 38696`
	`. 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; keytag 20326`
	`. 172800 IN DNSKEY ( 256 3 8 AwEAAb5dDYffpgAJ8VUGLwQtWXPlQWsjIFJtCM00/XaKU+8ln+ofah3q2KxEIjvzQg+nqdxRj+8e mtPne1mtYcbFWP4Q9E+DniOJLK09R05FuzvGbrG7DDdRDUX/cedFdV7O8pFEAYpJqYNR9BCTIAV9 73DO2biauKSA31b7I2lK/woxoR1tf5cqJ4SMbJUviuHicAEoUi2ATswloZNWd5T5thmEFZnxFx7D 5UgKCY7oflS7+GU7dNJwEtmFnWYVETHN0kHXVz6aguouaAZp706YXNIoR/iTgQhmsR7XX+wL0Z8Q M2LxQIyU6vRZ06IyuJMGRMiwkSuGElbumyBt12JZbrU= ) ; keytag 54393`
	DNSKEY=38696/SEP is now in the chain-of-trust
	DS=38696/SHA-256 verifies DNSKEY=38696/SEP
	DNSKEY=20326/SEP is now in the chain-of-trust
	DS=20326/SHA-256 verifies DNSKEY=20326/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`. 172800 IN RRSIG ( DNSKEY 8 0 172800 20260701000000 20260610000000 20326 . j4xwc5ju8Rar7jcd8yX1jGrb5c85D/uGNLvUpiKCzuSVqv0zhUS56KtqD0JmBo1rC+aWxywONWS6 o76i4p5TOOWFWdrops0E/Vw3OFQW+jLxsscc+Y9WUbK1PxTB3UPdWfiHw3azpvgsaaUdXAWeev5t MWZXcj4NM7NoCZJk9ig5onr298AVFZoFNZP6edyzWhyhkMX0DOxBH1M8+c8te2dFpck09pK2GEvA P5Cf1zlsGmZOiZRxB2mDLOXnCbqwJnHQSyhpW9QZkJGJbogrNPwMWdV+X3xcQ5n+dL9aRLtAkKeS p8FDo1ZeGo9xAbha9AjeCyPF3VkSRQEw9owjJg== )`
	RRSIG=20326 and DNSKEY=20326/SEP verifies the DNSKEY RRset
	DNSKEY=54393 is now in the chain-of-trust
	Query to c.root-servers.net for bewabi.co/A
	Received 625 bytes from 192.33.4.12
	;; Response received from [192.33.4.12] 625 octets ;; HEADER SECTION ;; id = 45894 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 6 arcount = 9 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; bewabi.co. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (6 records) co. 172800 IN NS c.registrydns.co. co. 172800 IN NS d.registrydns.co. co. 172800 IN NS a.registrydns.co. co. 172800 IN NS b.registrydns.co. co. 86400 IN DS ( 7786 8 2 eb84f864cbe86e913796d2c8dd81933aa2c94bbcfb73419a42250bc4650b081b ) co. 86400 IN RRSIG ( DS 8 1 86400 20260626050000 20260613040000 54393 . PUEuIKMGAWp1v0OdsWzwCHUpOB84ZjkOEejEIhdsjx/1rt1u8fO8foprj1k3rKHxOhxaMSFeLO/U vS48mGbW3d0NX6SHMDxk85cDlMprY7x2tywSx+9nQS4gLo2y/6BaFg9esTqiKr1K1gZmfh2EN4RE gi3rOmRNJL0mVh7JQKA6m8uS0mvnjfKWb7gMhbnU4rMrGUnLSa+SA09nBb3yX+m++dBwmhcbuOWI 1sTnan9cjqtjnvNf7/qAMPh3QqVwdeDLZXsj9wwH131BiSXCRo+ogvt4qjSrIFFKtatFtqEzIyH6 sSLMGyYpf/fEre1Fhw6EzBSILzpTfEbspc1xpQ== ) ;; ADDITIONAL SECTION (9 records) a.registrydns.co. 172800 IN A 194.169.218.57 b.registrydns.co. 172800 IN A 185.24.64.57 c.registrydns.co. 172800 IN A 212.18.248.57 d.registrydns.co. 172800 IN A 212.18.249.57 a.registrydns.co. 172800 IN AAAA 2001:67c:13cc::1:57 b.registrydns.co. 172800 IN AAAA 2a04:2b00:13cc::1:57 c.registrydns.co. 172800 IN AAAA 2a04:2b00:13ee::57 d.registrydns.co. 172800 IN AAAA 2a04:2b00:13ff::57 ;; { "EDNS-VERSION": 0 }
	Query to j.root-servers.net for co/DNSKEY
	Received 618 bytes from 192.58.128.30
	;; Response received from [192.58.128.30] 618 octets ;; HEADER SECTION ;; id = 40012 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 6 arcount = 9 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1472, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; co. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (6 records) co. 172800 IN NS a.registrydns.co. co. 172800 IN NS b.registrydns.co. co. 172800 IN NS c.registrydns.co. co. 172800 IN NS d.registrydns.co. co. 86400 IN DS ( 7786 8 2 eb84f864cbe86e913796d2c8dd81933aa2c94bbcfb73419a42250bc4650b081b ) co. 86400 IN RRSIG ( DS 8 1 86400 20260626050000 20260613040000 54393 . PUEuIKMGAWp1v0OdsWzwCHUpOB84ZjkOEejEIhdsjx/1rt1u8fO8foprj1k3rKHxOhxaMSFeLO/U vS48mGbW3d0NX6SHMDxk85cDlMprY7x2tywSx+9nQS4gLo2y/6BaFg9esTqiKr1K1gZmfh2EN4RE gi3rOmRNJL0mVh7JQKA6m8uS0mvnjfKWb7gMhbnU4rMrGUnLSa+SA09nBb3yX+m++dBwmhcbuOWI 1sTnan9cjqtjnvNf7/qAMPh3QqVwdeDLZXsj9wwH131BiSXCRo+ogvt4qjSrIFFKtatFtqEzIyH6 sSLMGyYpf/fEre1Fhw6EzBSILzpTfEbspc1xpQ== ) ;; ADDITIONAL SECTION (9 records) a.registrydns.co. 172800 IN A 194.169.218.57 a.registrydns.co. 172800 IN AAAA 2001:67c:13cc::1:57 b.registrydns.co. 172800 IN A 185.24.64.57 b.registrydns.co. 172800 IN AAAA 2a04:2b00:13cc::1:57 c.registrydns.co. 172800 IN A 212.18.248.57 c.registrydns.co. 172800 IN AAAA 2a04:2b00:13ee::57 d.registrydns.co. 172800 IN A 212.18.249.57 d.registrydns.co. 172800 IN AAAA 2a04:2b00:13ff::57 ;; { "EDNS-VERSION": 0 }
	Found child zone co

	Checking DS between . and co
	Query to l.root-servers.net for co/DS
	Received 366 bytes from 199.7.83.42
	;; Response received from [199.7.83.42] 366 octets ;; HEADER SECTION ;; id = 51925 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; co. IN DS ;; ANSWER SECTION (2 records) co. 86400 IN DS ( 7786 8 2 eb84f864cbe86e913796d2c8dd81933aa2c94bbcfb73419a42250bc4650b081b ) co. 86400 IN RRSIG ( DS 8 1 86400 20260626050000 20260613040000 54393 . PUEuIKMGAWp1v0OdsWzwCHUpOB84ZjkOEejEIhdsjx/1rt1u8fO8foprj1k3rKHxOhxaMSFeLO/U vS48mGbW3d0NX6SHMDxk85cDlMprY7x2tywSx+9nQS4gLo2y/6BaFg9esTqiKr1K1gZmfh2EN4RE gi3rOmRNJL0mVh7JQKA6m8uS0mvnjfKWb7gMhbnU4rMrGUnLSa+SA09nBb3yX+m++dBwmhcbuOWI 1sTnan9cjqtjnvNf7/qAMPh3QqVwdeDLZXsj9wwH131BiSXCRo+ogvt4qjSrIFFKtatFtqEzIyH6 sSLMGyYpf/fEre1Fhw6EzBSILzpTfEbspc1xpQ== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 1 DS records for co in the . zone
	DS=7786/SHA-256 has algorithm RSASHA256
	Found 1 RRSIGs over DS RRset
	`co. 86400 IN RRSIG ( DS 8 1 86400 20260626050000 20260613040000 54393 . PUEuIKMGAWp1v0OdsWzwCHUpOB84ZjkOEejEIhdsjx/1rt1u8fO8foprj1k3rKHxOhxaMSFeLO/U vS48mGbW3d0NX6SHMDxk85cDlMprY7x2tywSx+9nQS4gLo2y/6BaFg9esTqiKr1K1gZmfh2EN4RE gi3rOmRNJL0mVh7JQKA6m8uS0mvnjfKWb7gMhbnU4rMrGUnLSa+SA09nBb3yX+m++dBwmhcbuOWI 1sTnan9cjqtjnvNf7/qAMPh3QqVwdeDLZXsj9wwH131BiSXCRo+ogvt4qjSrIFFKtatFtqEzIyH6 sSLMGyYpf/fEre1Fhw6EzBSILzpTfEbspc1xpQ== )`
	RRSIG=54393 and DNSKEY=54393 verifies the DS RRset
	DS=7786/SHA-256 is now in the chain-of-trust
	`co. 86400 IN DS ( 7786 8 2 eb84f864cbe86e913796d2c8dd81933aa2c94bbcfb73419a42250bc4650b081b )`
	Query to d.registrydns.co for co/DNSKEY
	Received 777 bytes from 212.18.249.57
	;; Response received from [212.18.249.57] 777 octets ;; HEADER SECTION ;; id = 31887 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 3 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; co. IN DNSKEY ;; ANSWER SECTION (3 records) co. 3600 IN DNSKEY ( 257 3 8 AwEAAczABmT0oI8qk/8hB86dKORi8mBv9mHPnIPYNCpDwK/lPjLyjYFR/rqSr3ide6TvE6Fz4Lt1 E6Cr0cES98MQIPNXbb40I/2QuAhG/q6WpdXAH4WQd1qRiqaYfQQsCma94ckEmbSFjAsykAsJO9a/ RhaK8Q3abPiZZEzyXE+KXS+ygztEFnP5BgVuaODvQwCDh1kIFV8Clb29czmsYDLjxc3N1UXj0pCH cP+JtFjhDAWbNMe7YH1GQsYIA0EO2Vq8gozIj7SUgGO64xAA9IrT7wVioUEwxLFialy4G23CxLUA fuOp6u86fZj6bxQnnwtZk9ayJkHu4UopRVJtHR5QbNM= ) ; keytag 7786 co. 3600 IN DNSKEY ( 256 3 8 AwEAAZUNwwlhsXkr6ze4Fg8wjl72xA/8cbM9XNUHAV6qExeHURpQH/DeWl1MaCabYYCGSet/6ZeV mzjCujrZ9cmgSrrn+gCdAFMQbFAYgNoBLKL4EpXZclfQarE6x7mfeEvRAJH0FJSpRgJlIrq7xS4d 11Eg1xJ45XJ9+IgjqLg0D/d9ADxP/0piOBc5cVshYx5uQ2QX5TCoR+Y95hOaiRmntzc= ) ; keytag 16855 co. 3600 IN RRSIG ( DNSKEY 8 1 3600 20260707094802 20260607081802 7786 co. J2MLJALhUyXG9rZGynSWS0YyLCQdnEvVZfO/KzBovlwqFGNVCAKHeU3KUu5ZwHti+AmdKOHPulIk hKruE5gEkXVcWrcCJRKR6KSGX+xD+OYcrPzuBMOB7EhN0NHM3GULAGYJodQQw35WlNrUyZMYkaEu CvkSccs88F1+k0ovL9cREehQWi28J2E619JilrQHz5KdynHS1CNmy+UkJHgM4b7Px8Cge2aRdzQH bogFvoNQIfsaOweC+haoJke4sPX0YLbQdwSDifSuUgeog48955c5vA4vn2Ynw0AkTGiqS2O9owzM myTZTvr2HfHenrnP8bf6Uysbuon07st1u6f7GA== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 2 DNSKEY records for co
	`co. 3600 IN DNSKEY ( 257 3 8 AwEAAczABmT0oI8qk/8hB86dKORi8mBv9mHPnIPYNCpDwK/lPjLyjYFR/rqSr3ide6TvE6Fz4Lt1 E6Cr0cES98MQIPNXbb40I/2QuAhG/q6WpdXAH4WQd1qRiqaYfQQsCma94ckEmbSFjAsykAsJO9a/ RhaK8Q3abPiZZEzyXE+KXS+ygztEFnP5BgVuaODvQwCDh1kIFV8Clb29czmsYDLjxc3N1UXj0pCH cP+JtFjhDAWbNMe7YH1GQsYIA0EO2Vq8gozIj7SUgGO64xAA9IrT7wVioUEwxLFialy4G23CxLUA fuOp6u86fZj6bxQnnwtZk9ayJkHu4UopRVJtHR5QbNM= ) ; keytag 7786`
	`co. 3600 IN DNSKEY ( 256 3 8 AwEAAZUNwwlhsXkr6ze4Fg8wjl72xA/8cbM9XNUHAV6qExeHURpQH/DeWl1MaCabYYCGSet/6ZeV mzjCujrZ9cmgSrrn+gCdAFMQbFAYgNoBLKL4EpXZclfQarE6x7mfeEvRAJH0FJSpRgJlIrq7xS4d 11Eg1xJ45XJ9+IgjqLg0D/d9ADxP/0piOBc5cVshYx5uQ2QX5TCoR+Y95hOaiRmntzc= ) ; keytag 16855`
	DNSKEY=7786/SEP is now in the chain-of-trust
	DS=7786/SHA-256 verifies DNSKEY=7786/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`co. 3600 IN RRSIG ( DNSKEY 8 1 3600 20260707094802 20260607081802 7786 co. J2MLJALhUyXG9rZGynSWS0YyLCQdnEvVZfO/KzBovlwqFGNVCAKHeU3KUu5ZwHti+AmdKOHPulIk hKruE5gEkXVcWrcCJRKR6KSGX+xD+OYcrPzuBMOB7EhN0NHM3GULAGYJodQQw35WlNrUyZMYkaEu CvkSccs88F1+k0ovL9cREehQWi28J2E619JilrQHz5KdynHS1CNmy+UkJHgM4b7Px8Cge2aRdzQH bogFvoNQIfsaOweC+haoJke4sPX0YLbQdwSDifSuUgeog48955c5vA4vn2Ynw0AkTGiqS2O9owzM myTZTvr2HfHenrnP8bf6Uysbuon07st1u6f7GA== )`
	RRSIG=7786 and DNSKEY=7786/SEP verifies the DNSKEY RRset
	DNSKEY=16855 is now in the chain-of-trust
	Query to b.registrydns.co for bewabi.co/A
	Received 640 bytes from 185.24.64.57
	;; Response received from [185.24.64.57] 640 octets ;; HEADER SECTION ;; id = 58048 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 6 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; bewabi.co. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (6 records) bewabi.co. 3600 IN NS ns26.domaincontrol.com. bewabi.co. 3600 IN NS ns25.domaincontrol.com. ldc0c7m112348qmhs09hokrvkepgubv6.co. 900 IN NSEC3 ( 1 1 0 - ldc1mt97tv8h4biaqv3dvqej41kco93e NS SOA RRSIG DNSKEY NSEC3PARAM ) ldc0c7m112348qmhs09hokrvkepgubv6.co. 900 IN RRSIG ( NSEC3 8 2 900 20260706045215 20260606032215 16855 co. W3r12fDgH1mJM9r0lB0iiN13sx+lJXb5HA9vHmXCOsGX+4JIPIzJNRRZlbQI05DEF1v+SLe5B21K cDZsRXlSKIxpt8QHw/FsX/nSHkfybUO7nqz7maohYUpPv0bcYe2rEBUOWXe5E28oGCyhNMw9mD1A U1MBNaElJLxende9JRLf6MtSLgYcD1PM7NY9JHYP0JLocDN+6oTkOM5w+DDtWA== ) cpi1rmn6c0mth7nlb8kp5eoaq8dt2j36.co. 900 IN NSEC3 ( 1 1 0 - cpid7orp1r5i41scf4r7gv00dla647t7 NS DS RRSIG ) cpi1rmn6c0mth7nlb8kp5eoaq8dt2j36.co. 900 IN RRSIG ( NSEC3 8 2 900 20260707124533 20260607111533 16855 co. TcqqzOrtS0ggRsSKPsys13VdmvfB4+oQDn0jkAk7QtyaIh7uMJ7rfQU1M6+0W7jCf4KR7qMaljHH InAg0NLRPIfce8i0oXNyEUdnBH5tikHAUAbBTZRGXIDvIx0lFDVqDZ8i/ecGUTu7q7MTD4DNnSEu PHg0SfnfNxZbgFKZPTs2doX8MAmG1rJblhnFRt/vjKbLXTq9rmfBNq6UCAbkVw== ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Query to a.registrydns.co for bewabi.co/DNSKEY
	Received 640 bytes from 194.169.218.57
	;; Response received from [194.169.218.57] 640 octets ;; HEADER SECTION ;; id = 48638 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 6 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; bewabi.co. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (6 records) bewabi.co. 3600 IN NS ns25.domaincontrol.com. bewabi.co. 3600 IN NS ns26.domaincontrol.com. ldc0c7m112348qmhs09hokrvkepgubv6.co. 900 IN NSEC3 ( 1 1 0 - ldc1mt97tv8h4biaqv3dvqej41kco93e NS SOA RRSIG DNSKEY NSEC3PARAM ) cpi1rmn6c0mth7nlb8kp5eoaq8dt2j36.co. 900 IN NSEC3 ( 1 1 0 - cpid7orp1r5i41scf4r7gv00dla647t7 NS DS RRSIG ) ldc0c7m112348qmhs09hokrvkepgubv6.co. 900 IN RRSIG ( NSEC3 8 2 900 20260706045215 20260606032215 16855 co. W3r12fDgH1mJM9r0lB0iiN13sx+lJXb5HA9vHmXCOsGX+4JIPIzJNRRZlbQI05DEF1v+SLe5B21K cDZsRXlSKIxpt8QHw/FsX/nSHkfybUO7nqz7maohYUpPv0bcYe2rEBUOWXe5E28oGCyhNMw9mD1A U1MBNaElJLxende9JRLf6MtSLgYcD1PM7NY9JHYP0JLocDN+6oTkOM5w+DDtWA== ) cpi1rmn6c0mth7nlb8kp5eoaq8dt2j36.co. 900 IN RRSIG ( NSEC3 8 2 900 20260707124533 20260607111533 16855 co. TcqqzOrtS0ggRsSKPsys13VdmvfB4+oQDn0jkAk7QtyaIh7uMJ7rfQU1M6+0W7jCf4KR7qMaljHH InAg0NLRPIfce8i0oXNyEUdnBH5tikHAUAbBTZRGXIDvIx0lFDVqDZ8i/ecGUTu7q7MTD4DNnSEu PHg0SfnfNxZbgFKZPTs2doX8MAmG1rJblhnFRt/vjKbLXTq9rmfBNq6UCAbkVw== ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found child zone bewabi.co

bewabi.co

	Checking DS between co and bewabi.co
	Query to a.registrydns.co for bewabi.co/DS
	Received 844 bytes from 194.169.218.57
	;; Response received from [194.169.218.57] 844 octets ;; HEADER SECTION ;; id = 61345 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 6 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; bewabi.co. IN DS ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (6 records) co. 900 IN SOA ( ns0.centralnic.net. hostmaster.centralnic.net. 1759681228 ;serial 900 ;refresh 1800 ;retry 6048000 ;expire 3600 ;minimum ) ldc0c7m112348qmhs09hokrvkepgubv6.co. 900 IN NSEC3 ( 1 1 0 - ldc1mt97tv8h4biaqv3dvqej41kco93e NS SOA RRSIG DNSKEY NSEC3PARAM ) cpi1rmn6c0mth7nlb8kp5eoaq8dt2j36.co. 900 IN NSEC3 ( 1 1 0 - cpid7orp1r5i41scf4r7gv00dla647t7 NS DS RRSIG ) co. 900 IN RRSIG ( SOA 8 1 900 20260713102239 20260613085239 16855 co. CCPxka+5eddMJHXewIu38UqwbBjEDrF2eKqeXrx4oMm9GBeuSVbd3ktuNQVCdKyBPEN08U1WbzI2 6vH9DSGf7JrpllGYB0ncBmIb52rOi3JEzY2pjqrqMCyy1XVu7vr4uPDaHCNC68uAdnkfkwAdgKkp jjgh47a2kzZcrh99a+Ev1rkLDgUQ1WpNUmjVJp0jX5RqA21LrnDAl9zpuC3NIQ== ) ldc0c7m112348qmhs09hokrvkepgubv6.co. 900 IN RRSIG ( NSEC3 8 2 900 20260706045215 20260606032215 16855 co. W3r12fDgH1mJM9r0lB0iiN13sx+lJXb5HA9vHmXCOsGX+4JIPIzJNRRZlbQI05DEF1v+SLe5B21K cDZsRXlSKIxpt8QHw/FsX/nSHkfybUO7nqz7maohYUpPv0bcYe2rEBUOWXe5E28oGCyhNMw9mD1A U1MBNaElJLxende9JRLf6MtSLgYcD1PM7NY9JHYP0JLocDN+6oTkOM5w+DDtWA== ) cpi1rmn6c0mth7nlb8kp5eoaq8dt2j36.co. 900 IN RRSIG ( NSEC3 8 2 900 20260707124533 20260607111533 16855 co. TcqqzOrtS0ggRsSKPsys13VdmvfB4+oQDn0jkAk7QtyaIh7uMJ7rfQU1M6+0W7jCf4KR7qMaljHH InAg0NLRPIfce8i0oXNyEUdnBH5tikHAUAbBTZRGXIDvIx0lFDVqDZ8i/ecGUTu7q7MTD4DNnSEu PHg0SfnfNxZbgFKZPTs2doX8MAmG1rJblhnFRt/vjKbLXTq9rmfBNq6UCAbkVw== ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	No DS records found for bewabi.co in the co zone
	Query to ns25.domaincontrol.com for bewabi.co/DNSKEY
	Received 109 bytes from 97.74.102.13
	;; Response received from [97.74.102.13] 109 octets ;; HEADER SECTION ;; id = 29541 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 1 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1200, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; bewabi.co. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (1 record) bewabi.co. 600 IN SOA ( ns25.domaincontrol.com. dns.jomax.net. 2026060504 ;serial 28800 ;refresh 7200 ;retry 604800 ;expire 600 ;minimum ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	No DNSKEY records found
	Query to ns26.domaincontrol.com for bewabi.co/A
	Received 109 bytes from 173.201.70.13
	;; Response received from [173.201.70.13] 109 octets ;; HEADER SECTION ;; id = 61711 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 1 ;; nscount = 2 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1200, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; bewabi.co. IN A ;; ANSWER SECTION (1 record) bewabi.co. 600 IN A 8.232.215.171 ;; AUTHORITY SECTION (2 records) bewabi.co. 3600 IN NS ns26.domaincontrol.com. bewabi.co. 3600 IN NS ns25.domaincontrol.com. ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	ns26.domaincontrol.com is authoritative for bewabi.co
	Query to ns25.domaincontrol.com for bewabi.co/SOA
	Received 142 bytes from 97.74.102.13
	;; Response received from [97.74.102.13] 142 octets ;; HEADER SECTION ;; id = 8094 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 1 ;; nscount = 2 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1200, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; bewabi.co. IN SOA ;; ANSWER SECTION (1 record) bewabi.co. 3600 IN SOA ( ns25.domaincontrol.com. dns.jomax.net. 2026060504 ;serial 28800 ;refresh 7200 ;retry 604800 ;expire 600 ;minimum ) ;; AUTHORITY SECTION (2 records) bewabi.co. 3600 IN NS ns25.domaincontrol.com. bewabi.co. 3600 IN NS ns26.domaincontrol.com. ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Query to ns26.domaincontrol.com for bewabi.co/A
	bewabi.co A RR has value 8.232.215.171
	No RRSIGs found

bewabi.co

	Query to ns25.domaincontrol.com for bewabi.co/A
	Received 109 bytes from 97.74.102.13
	;; Response received from [97.74.102.13] 109 octets ;; HEADER SECTION ;; id = 35728 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 1 ;; nscount = 2 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1200, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; bewabi.co. IN A ;; ANSWER SECTION (1 record) bewabi.co. 600 IN A 8.232.215.171 ;; AUTHORITY SECTION (2 records) bewabi.co. 3600 IN NS ns26.domaincontrol.com. bewabi.co. 3600 IN NS ns25.domaincontrol.com. ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	ns25.domaincontrol.com is authoritative for bewabi.co
	Query to ns25.domaincontrol.com for bewabi.co/A
	bewabi.co A RR has value 8.232.215.171
	No RRSIGs found

Move your mouse over any or symbols for remediation hints.

Want a second opinion? Test bewabi.co at dnsviz.net.

DNSSEC Debugger

↓ Advanced options ↑ Advanced options

Trust Anchor:
Name Servers: