DNSSEC Analyzer - matoken.xyz

Domain Name:

Time: 2019-12-14 10:21:49 UTC, NTP stratum 4

Analyzing DNSSEC problems for matoken.xyz

DS=20326/SHA-256 is now in the chain-of-trust

	Checking DS between Trust Anchor and .
	`. IN DS ( 20326 8 2 e06d44b80b8f1d39a95c0b0d7c65d08458e880409bbc683457104237c7f8ec8d )`
	Query to b.root-servers.net for ./DNSKEY
	Received 864 bytes from 199.9.14.201
	;; Answer received from 199.9.14.201 (864 bytes) ;; HEADER SECTION ;; id = 32816 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; . IN DNSKEY ;; ANSWER SECTION (3 records) . 172800 IN DNSKEY ( 256 3 8 AwEAAbPwrxwtOMENWvblQbUFwBllR7ZtXsu9rg/LdyklKs9gU2GQTeOc59XjhuAPZ4WrT09z6YPL +vzIIJqnG3Hiru7hFUQ4pH0qsLNxrsuZrZYmXAKoVa9SXL1Ap0LygwrIugEk1G4v7Rk/Alt1jLUI E+ZymGtSEhIuGQdXrEmj3ffzXY13H42X4Ja3vJTn/WIQOXY7vwHXGDypSh9j0Tt0hknF1yVJCrIp fkhFWihMKNdMzMprD4bV+PDLRA5YSn3OPIeUnRn9qBUCN11LXQKb+W3Jg+m/5xQRQJzJ/qXgDh1+ aN+Mc9AstP29Y/ZLFmF6cKtL2zoUMN5I5QymeSkJJzc= ) ; Key ID = 22545 . 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; Key ID = 20326 . 172800 IN RRSIG ( DNSKEY 8 0 172800 20191231000000 20191210000000 20326 . M6PHO6VOOLVi9f31412BD96l/dWG8WOE+R6Q+KYMr4aJpS/hTZjjs6EDa249B2cjO7QzSD+qxWNT s7enqC1DsEAjeVm0epe3h6TFVBjX76R0MIqYC3+LjgGjyQnpish6mPApIx0ZC8mxewn0GCvC9Gqk 9S7s7IDD8FQWosXQRChqF9M7qkG1NuKvgPvqgpAk3naii0Eajx8N3XiPo8EwVS3yWOct4wcY8B1s fZjvL7mLDAiggGouyxt5PGm9TdnG7eioZPM1LyX1YgDV4/qUKmp7BHhsVKh/nQaR46yxbcpiRz6R nADB991g/+3bgY8dSACfUI0aBFsRT0DHHnMfpg== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found 2 DNSKEY records for .
	`. 172800 IN DNSKEY ( 256 3 8 AwEAAbPwrxwtOMENWvblQbUFwBllR7ZtXsu9rg/LdyklKs9gU2GQTeOc59XjhuAPZ4WrT09z6YPL +vzIIJqnG3Hiru7hFUQ4pH0qsLNxrsuZrZYmXAKoVa9SXL1Ap0LygwrIugEk1G4v7Rk/Alt1jLUI E+ZymGtSEhIuGQdXrEmj3ffzXY13H42X4Ja3vJTn/WIQOXY7vwHXGDypSh9j0Tt0hknF1yVJCrIp fkhFWihMKNdMzMprD4bV+PDLRA5YSn3OPIeUnRn9qBUCN11LXQKb+W3Jg+m/5xQRQJzJ/qXgDh1+ aN+Mc9AstP29Y/ZLFmF6cKtL2zoUMN5I5QymeSkJJzc= ) ; Key ID = 22545`
	`. 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; Key ID = 20326`
	DNSKEY=20326/SEP is now in the chain-of-trust
	DS=20326/SHA-256 verifies DNSKEY=20326/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`. 172800 IN RRSIG ( DNSKEY 8 0 172800 20191231000000 20191210000000 20326 . M6PHO6VOOLVi9f31412BD96l/dWG8WOE+R6Q+KYMr4aJpS/hTZjjs6EDa249B2cjO7QzSD+qxWNT s7enqC1DsEAjeVm0epe3h6TFVBjX76R0MIqYC3+LjgGjyQnpish6mPApIx0ZC8mxewn0GCvC9Gqk 9S7s7IDD8FQWosXQRChqF9M7qkG1NuKvgPvqgpAk3naii0Eajx8N3XiPo8EwVS3yWOct4wcY8B1s fZjvL7mLDAiggGouyxt5PGm9TdnG7eioZPM1LyX1YgDV4/qUKmp7BHhsVKh/nQaR46yxbcpiRz6R nADB991g/+3bgY8dSACfUI0aBFsRT0DHHnMfpg== )`
	RRSIG=20326 and DNSKEY=20326/SEP verifies the DNSKEY RRset
	DNSKEY=22545 is now in the chain-of-trust
	Query to f.root-servers.net for matoken.xyz/A
	Received 667 bytes from 192.5.5.241
	;; Answer received from 192.5.5.241 (667 bytes) ;; HEADER SECTION ;; id = 49356 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 7 arcount = 9 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1472 ;; option: ;; QUESTION SECTION (1 record) ;; matoken.xyz. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (7 records) xyz. 172800 IN NS x.nic.xyz. xyz. 172800 IN NS y.nic.xyz. xyz. 172800 IN NS z.nic.xyz. xyz. 172800 IN NS generationxyz.nic.xyz. xyz. 86400 IN DS 3599 8 1 3fa3b264f45db5f38bedeaf1a88b76aa318c2c7f xyz. 86400 IN DS ( 3599 8 2 b9733869bc84c86bb59d102ba5da6b27b2088552332a39dcd54bc4e8d66b0499 ) xyz. 86400 IN RRSIG ( DS 8 1 86400 20191227050000 20191214040000 22545 . J5RlXDNaujTlY386ZfHDIZtvE6591itQbpJY3njsHyGJpPa5wXv/SYLMnst8sql5qdabRU/MXopS 7FU7g/i0YhjPlSwvuZ2q1Uqm2o1Id+J2fgTGu41hGbcq4uGObE/OH9vFbSxYy0PpiWLmGz6KfhWU uBY+K8XF/vFRE7y9Pj2V4LVPwjcBqtlBSFXQAhuq+RiEvhzkC1i/J+64x7Lumf9oA6M8BWoTLmvL DcYvYmde00BDKOFpgpViczMlHEABNg2B2g3atAKdHU9N6V70hma/rauCD5YBl3Hov6MpSM+BMhjz Km9O+W2XULTkYVBfjg1BLICNvN5D3Rg+z8u71Q== ) ;; ADDITIONAL SECTION (9 records) x.nic.xyz. 172800 IN A 194.169.218.42 x.nic.xyz. 172800 IN AAAA 2001:67c:13cc::1:42 y.nic.xyz. 172800 IN A 185.24.64.42 y.nic.xyz. 172800 IN AAAA 2a04:2b00:13cc::1:42 z.nic.xyz. 172800 IN A 212.18.248.42 z.nic.xyz. 172800 IN AAAA 2a04:2b00:13ee::42 generationxyz.nic.xyz. 172800 IN A 212.18.249.42 generationxyz.nic.xyz. 172800 IN AAAA 2a04:2b00:13ff::42 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1472 ;; option:
	Query to c.root-servers.net for xyz/DNSKEY
	Received 659 bytes from 192.33.4.12
	;; Answer received from 192.33.4.12 (659 bytes) ;; HEADER SECTION ;; id = 12659 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 7 arcount = 9 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; xyz. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (7 records) xyz. 172800 IN NS x.nic.xyz. xyz. 172800 IN NS generationxyz.nic.xyz. xyz. 172800 IN NS z.nic.xyz. xyz. 172800 IN NS y.nic.xyz. xyz. 86400 IN DS 3599 8 1 3fa3b264f45db5f38bedeaf1a88b76aa318c2c7f xyz. 86400 IN DS ( 3599 8 2 b9733869bc84c86bb59d102ba5da6b27b2088552332a39dcd54bc4e8d66b0499 ) xyz. 86400 IN RRSIG ( DS 8 1 86400 20191227050000 20191214040000 22545 . J5RlXDNaujTlY386ZfHDIZtvE6591itQbpJY3njsHyGJpPa5wXv/SYLMnst8sql5qdabRU/MXopS 7FU7g/i0YhjPlSwvuZ2q1Uqm2o1Id+J2fgTGu41hGbcq4uGObE/OH9vFbSxYy0PpiWLmGz6KfhWU uBY+K8XF/vFRE7y9Pj2V4LVPwjcBqtlBSFXQAhuq+RiEvhzkC1i/J+64x7Lumf9oA6M8BWoTLmvL DcYvYmde00BDKOFpgpViczMlHEABNg2B2g3atAKdHU9N6V70hma/rauCD5YBl3Hov6MpSM+BMhjz Km9O+W2XULTkYVBfjg1BLICNvN5D3Rg+z8u71Q== ) ;; ADDITIONAL SECTION (9 records) x.nic.xyz. 172800 IN A 194.169.218.42 y.nic.xyz. 172800 IN A 185.24.64.42 z.nic.xyz. 172800 IN A 212.18.248.42 generationxyz.nic.xyz. 172800 IN A 212.18.249.42 x.nic.xyz. 172800 IN AAAA 2001:67c:13cc::1:42 y.nic.xyz. 172800 IN AAAA 2a04:2b00:13cc::1:42 z.nic.xyz. 172800 IN AAAA 2a04:2b00:13ee::42 generationxyz.nic.xyz. 172800 IN AAAA 2a04:2b00:13ff::42 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found child zone xyz

xyz

	Checking DS between . and xyz
	Query to h.root-servers.net for xyz/DS
	Received 403 bytes from 198.97.190.53
	;; Answer received from 198.97.190.53 (403 bytes) ;; HEADER SECTION ;; id = 14837 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; xyz. IN DS ;; ANSWER SECTION (3 records) xyz. 86400 IN DS 3599 8 1 3fa3b264f45db5f38bedeaf1a88b76aa318c2c7f xyz. 86400 IN DS ( 3599 8 2 b9733869bc84c86bb59d102ba5da6b27b2088552332a39dcd54bc4e8d66b0499 ) xyz. 86400 IN RRSIG ( DS 8 1 86400 20191227050000 20191214040000 22545 . J5RlXDNaujTlY386ZfHDIZtvE6591itQbpJY3njsHyGJpPa5wXv/SYLMnst8sql5qdabRU/MXopS 7FU7g/i0YhjPlSwvuZ2q1Uqm2o1Id+J2fgTGu41hGbcq4uGObE/OH9vFbSxYy0PpiWLmGz6KfhWU uBY+K8XF/vFRE7y9Pj2V4LVPwjcBqtlBSFXQAhuq+RiEvhzkC1i/J+64x7Lumf9oA6M8BWoTLmvL DcYvYmde00BDKOFpgpViczMlHEABNg2B2g3atAKdHU9N6V70hma/rauCD5YBl3Hov6MpSM+BMhjz Km9O+W2XULTkYVBfjg1BLICNvN5D3Rg+z8u71Q== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found 2 DS records for xyz in the . zone
	DS=3599/SHA-1 has algorithm RSASHA256
	DS=3599/SHA-256 has algorithm RSASHA256
	Found 1 RRSIGs over DS RRset
	`xyz. 86400 IN RRSIG ( DS 8 1 86400 20191227050000 20191214040000 22545 . J5RlXDNaujTlY386ZfHDIZtvE6591itQbpJY3njsHyGJpPa5wXv/SYLMnst8sql5qdabRU/MXopS 7FU7g/i0YhjPlSwvuZ2q1Uqm2o1Id+J2fgTGu41hGbcq4uGObE/OH9vFbSxYy0PpiWLmGz6KfhWU uBY+K8XF/vFRE7y9Pj2V4LVPwjcBqtlBSFXQAhuq+RiEvhzkC1i/J+64x7Lumf9oA6M8BWoTLmvL DcYvYmde00BDKOFpgpViczMlHEABNg2B2g3atAKdHU9N6V70hma/rauCD5YBl3Hov6MpSM+BMhjz Km9O+W2XULTkYVBfjg1BLICNvN5D3Rg+z8u71Q== )`
	RRSIG=22545 and DNSKEY=22545 verifies the DS RRset
	DS=3599/SHA-1 is now in the chain-of-trust
	`xyz. 86400 IN DS 3599 8 1 3fa3b264f45db5f38bedeaf1a88b76aa318c2c7f`
	`xyz. 86400 IN DS ( 3599 8 2 b9733869bc84c86bb59d102ba5da6b27b2088552332a39dcd54bc4e8d66b0499 )`
	Query to z.nic.xyz for xyz/DNSKEY
	Received 895 bytes from 212.18.248.42
	;; Answer received from 212.18.248.42 (895 bytes) ;; HEADER SECTION ;; id = 45185 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 4 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; xyz. IN DNSKEY ;; ANSWER SECTION (4 records) xyz. 3600 IN DNSKEY ( 256 3 8 AwEAAYnyiqR595alMz4rYPvLKR8R7VeRLHek6BFuIPvz25XjlttuF/4vQYyh4lCRx8WxB0hZF809 JkELIgajLmhymQAgJmeeiO+c1fx+pMDxOsKBUFQyXm2LJMRUMCb+k/oY9jdhRf2DtSiYib0kOM1s emESTBTNdgTu7Y+elfVIFhkV ) ; Key ID = 28065 xyz. 3600 IN DNSKEY ( 256 3 8 AwEAAakpQBmIa5167zAo1/nQSJvRBFj6LpSE3bjP9iKBtDuLjpnYfCJIekvgFHAF0u/Zw0m7Wxqp HugYu55ptWUDNFFO/1GuSvxDw0T1wy0I/qugJzfrqKdE58OeXKsQ973Zp3R3wOxPeytwc7GHKuIv am8Op+Y9ki0ul9uViNA0d4qX ) ; Key ID = 10573 xyz. 3600 IN DNSKEY ( 257 3 8 AwEAAbYRTzkgLg4oxcFb/+oFQMvluEut45siTtLiNL7t5Fim/ZnYhkxal6TiCUywnfgiycJyneNm tC/3eoTcz5dlrlRB5dwDehcqiZoFiqjaXGHcykHGFBDynD0/sRcEAQL+bLMv2qA+o2L7pDPHbCGJ VXlUq57oTWfS4esbGDIa+1Bs8gDVMGUZcbRmeeKkc/MH2Oq1ApE5EKjH0ZRvYWS6afsWyvlXD2NX DthS5LltVKqqjhi6dy2O02stOt41z1qwfRlU89b3HXfDghlJ/L33DE+OcTyK0yRJ+ay4WpBgQJL8 GDFKz1hnR2lOjYXLttJD7aHfcYyVO6zYsx2aeHI0OYM= ) ; Key ID = 3599 xyz. 3600 IN RRSIG ( DNSKEY 8 1 3600 20200104130648 20191205225224 3599 xyz. fjJtLqMw4RVljNV3B/66R4QVmFq1iwfeQ9Z3yqZlcMlHgbqvcstrnO77v+oFF20vq2u5SLTSxsFo w/oJDdNqu5PVIW0KuBqDVClKlYCxwZmS9QVBJpDz3scMfOVe3QK4B2pK05VcxOBspZEWx7rBZ9aq h9rA05varqqBOmZqK9kUtDnA6Q9scAwZHVkL23K3Y2J+SWio1lyY2KONUPoIfnlIE9aIy2O2dDlF t/I9ldzNzqHyl9ujMjFLAmoZBuqGuC2e5PvUv1y8rjKLMTyh26YALbBVgAcjyNnME6fT8ULUojMG doZ5xm37tHrkeQri35Emj1TKwsONWNSjogUB1Q== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found 3 DNSKEY records for xyz
	`xyz. 3600 IN DNSKEY ( 256 3 8 AwEAAYnyiqR595alMz4rYPvLKR8R7VeRLHek6BFuIPvz25XjlttuF/4vQYyh4lCRx8WxB0hZF809 JkELIgajLmhymQAgJmeeiO+c1fx+pMDxOsKBUFQyXm2LJMRUMCb+k/oY9jdhRf2DtSiYib0kOM1s emESTBTNdgTu7Y+elfVIFhkV ) ; Key ID = 28065`
	`xyz. 3600 IN DNSKEY ( 256 3 8 AwEAAakpQBmIa5167zAo1/nQSJvRBFj6LpSE3bjP9iKBtDuLjpnYfCJIekvgFHAF0u/Zw0m7Wxqp HugYu55ptWUDNFFO/1GuSvxDw0T1wy0I/qugJzfrqKdE58OeXKsQ973Zp3R3wOxPeytwc7GHKuIv am8Op+Y9ki0ul9uViNA0d4qX ) ; Key ID = 10573`
	`xyz. 3600 IN DNSKEY ( 257 3 8 AwEAAbYRTzkgLg4oxcFb/+oFQMvluEut45siTtLiNL7t5Fim/ZnYhkxal6TiCUywnfgiycJyneNm tC/3eoTcz5dlrlRB5dwDehcqiZoFiqjaXGHcykHGFBDynD0/sRcEAQL+bLMv2qA+o2L7pDPHbCGJ VXlUq57oTWfS4esbGDIa+1Bs8gDVMGUZcbRmeeKkc/MH2Oq1ApE5EKjH0ZRvYWS6afsWyvlXD2NX DthS5LltVKqqjhi6dy2O02stOt41z1qwfRlU89b3HXfDghlJ/L33DE+OcTyK0yRJ+ay4WpBgQJL8 GDFKz1hnR2lOjYXLttJD7aHfcYyVO6zYsx2aeHI0OYM= ) ; Key ID = 3599`
	DNSKEY=3599/SEP is now in the chain-of-trust
	DS=3599/SHA-1 verifies DNSKEY=3599/SEP
	DS=3599/SHA-256 verifies DNSKEY=3599/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`xyz. 3600 IN RRSIG ( DNSKEY 8 1 3600 20200104130648 20191205225224 3599 xyz. fjJtLqMw4RVljNV3B/66R4QVmFq1iwfeQ9Z3yqZlcMlHgbqvcstrnO77v+oFF20vq2u5SLTSxsFo w/oJDdNqu5PVIW0KuBqDVClKlYCxwZmS9QVBJpDz3scMfOVe3QK4B2pK05VcxOBspZEWx7rBZ9aq h9rA05varqqBOmZqK9kUtDnA6Q9scAwZHVkL23K3Y2J+SWio1lyY2KONUPoIfnlIE9aIy2O2dDlF t/I9ldzNzqHyl9ujMjFLAmoZBuqGuC2e5PvUv1y8rjKLMTyh26YALbBVgAcjyNnME6fT8ULUojMG doZ5xm37tHrkeQri35Emj1TKwsONWNSjogUB1Q== )`
	RRSIG=3599 and DNSKEY=3599/SEP verifies the DNSKEY RRset
	DNSKEY=28065 is now in the chain-of-trust
	DNSKEY=10573 is now in the chain-of-trust
	Query to generationxyz.nic.xyz for matoken.xyz/A
	Received 372 bytes from 212.18.249.42
	;; Answer received from 212.18.249.42 (372 bytes) ;; HEADER SECTION ;; id = 14304 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 6 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; matoken.xyz. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (6 records) matoken.xyz. 3600 IN NS ns-cloud-d1.googledomains.com. matoken.xyz. 3600 IN NS ns-cloud-d2.googledomains.com. matoken.xyz. 3600 IN NS ns-cloud-d3.googledomains.com. matoken.xyz. 3600 IN NS ns-cloud-d4.googledomains.com. matoken.xyz. 3600 IN DS ( 37042 8 2 cf2a174c557308595dbf1039b0c5999037d04b2e764c48bd55bdc1cd48eab8ca ) matoken.xyz. 3600 IN RRSIG ( DS 8 2 3600 20191228072506 20191128013909 28065 xyz. SFwWy5GrnxO6osMfQV/xiqnOdOSrJLGSlJa9vaI3bit0S2nL6ozD2G4+C9VxVoCDBlQ5i+cJ2pmr t4btzEC140GCgdTZgDV61xScMLdM+Wt1rWT6bGxPLkRGBJuAaSRQ7KAHhOC31bqnpM3ffwLVDbov 1qPxLQ62f57QlYjNaC0= ) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Query to x.nic.xyz for matoken.xyz/DNSKEY
	Timeout querying x.nic.xyz/194.169.218.42 for matoken.xyz/DNSKEY
	Error querying x.nic.xyz/2001:67c:13cc:0:0:0:1:42 for matoken.xyz/DNSKEY: 'IPv6 transport disabled'
	All Queries to x.nic.xyz for matoken.xyz/DNSKEY timed out or failed
	Query to y.nic.xyz for matoken.xyz/DNSKEY
	Error querying y.nic.xyz/2a04:2b00:13cc:0:0:0:1:42 for matoken.xyz/DNSKEY: 'IPv6 transport disabled'
	Received 372 bytes from 185.24.64.42
	;; Answer received from 185.24.64.42 (372 bytes) ;; HEADER SECTION ;; id = 19225 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 6 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; matoken.xyz. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (6 records) matoken.xyz. 3600 IN NS ns-cloud-d1.googledomains.com. matoken.xyz. 3600 IN NS ns-cloud-d2.googledomains.com. matoken.xyz. 3600 IN NS ns-cloud-d3.googledomains.com. matoken.xyz. 3600 IN NS ns-cloud-d4.googledomains.com. matoken.xyz. 3600 IN DS ( 37042 8 2 cf2a174c557308595dbf1039b0c5999037d04b2e764c48bd55bdc1cd48eab8ca ) matoken.xyz. 3600 IN RRSIG ( DS 8 2 3600 20191228072506 20191128013909 28065 xyz. SFwWy5GrnxO6osMfQV/xiqnOdOSrJLGSlJa9vaI3bit0S2nL6ozD2G4+C9VxVoCDBlQ5i+cJ2pmr t4btzEC140GCgdTZgDV61xScMLdM+Wt1rWT6bGxPLkRGBJuAaSRQ7KAHhOC31bqnpM3ffwLVDbov 1qPxLQ62f57QlYjNaC0= ) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found child zone matoken.xyz

matoken.xyz

	Checking DS between xyz and matoken.xyz
	Query to z.nic.xyz for matoken.xyz/DS
	Received 251 bytes from 212.18.248.42
	;; Answer received from 212.18.248.42 (251 bytes) ;; HEADER SECTION ;; id = 58114 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; matoken.xyz. IN DS ;; ANSWER SECTION (2 records) matoken.xyz. 3600 IN DS ( 37042 8 2 cf2a174c557308595dbf1039b0c5999037d04b2e764c48bd55bdc1cd48eab8ca ) matoken.xyz. 3600 IN RRSIG ( DS 8 2 3600 20191228072506 20191128013909 28065 xyz. SFwWy5GrnxO6osMfQV/xiqnOdOSrJLGSlJa9vaI3bit0S2nL6ozD2G4+C9VxVoCDBlQ5i+cJ2pmr t4btzEC140GCgdTZgDV61xScMLdM+Wt1rWT6bGxPLkRGBJuAaSRQ7KAHhOC31bqnpM3ffwLVDbov 1qPxLQ62f57QlYjNaC0= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found 1 DS records for matoken.xyz in the xyz zone
	DS=37042/SHA-256 has algorithm RSASHA256
	Found 1 RRSIGs over DS RRset
	`matoken.xyz. 3600 IN RRSIG ( DS 8 2 3600 20191228072506 20191128013909 28065 xyz. SFwWy5GrnxO6osMfQV/xiqnOdOSrJLGSlJa9vaI3bit0S2nL6ozD2G4+C9VxVoCDBlQ5i+cJ2pmr t4btzEC140GCgdTZgDV61xScMLdM+Wt1rWT6bGxPLkRGBJuAaSRQ7KAHhOC31bqnpM3ffwLVDbov 1qPxLQ62f57QlYjNaC0= )`
	RRSIG=28065 and DNSKEY=28065 verifies the DS RRset
	DS=37042/SHA-256 is now in the chain-of-trust
	`matoken.xyz. 3600 IN DS ( 37042 8 2 cf2a174c557308595dbf1039b0c5999037d04b2e764c48bd55bdc1cd48eab8ca )`
	Query to ns-cloud-d3.googledomains.com for matoken.xyz/DNSKEY
	Received 911 bytes from 216.239.36.109
	;; Answer received from 216.239.36.109 (911 bytes) ;; HEADER SECTION ;; id = 31408 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 4 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 512 ;; option: ;; QUESTION SECTION (1 record) ;; matoken.xyz. IN DNSKEY ;; ANSWER SECTION (4 records) matoken.xyz. 300 IN DNSKEY ( 256 3 8 AwEAAZf1t5PoS6AjkqovYtgsDIpfKJrCjvE1JN9m/iQ99IbUkHfbZqTL0tDe+23jd6dTiNyEnnwX Axt3arF1yYAWWQkGp4NWz2HJffR/lJOgS0bS3P0gXBHlFSb2KcVTE5kCast/4SO8KY1BD2UNXiqP VjcPNq1beyX1f6ac2EspbP1B ) ; Key ID = 14359 matoken.xyz. 300 IN DNSKEY ( 256 3 8 AwEAAbT/vpM29muRqOEtMbgOfsGukpfzDbDTzAaBHXmF/BBWO9akcLO+5vrJWbr9jcPdYYfZdSPQ pOwMUosR21t0Sdtule+0nZX5BBtuWl4Rm6Ysrf/6r/pNDSotRqKBFxcia4ExaBPqtZwwYs7cRMQN UbCQf2r/Owh8vpRMVIJ6LwR3 ) ; Key ID = 62940 matoken.xyz. 300 IN DNSKEY ( 257 3 8 AwEAAaUPT5a7Ch5cTVkcgDVrf9FCMxCMA+7McAz2x4933N8dFqqC+9OH4yAwoQW+VjXzLF4pbw4m dHuJXMSDaN1I0YrrglEfKtwaH5NacJW4UMoyF9MW5GAoS0XoZzw2ISOOOPCOphhQdc0T9SfG5pSP TvvPMXOZm9KFR99c+jiAwT4mjJut52Mu7b5I4nsUDKQBnOnDFt4fDv2DOSI+yVbdC0swX0bZXSD3 82GX4+ValNf6Yjz8a1SGtabkv5/PTlMxaHUwqqesqjMVYpnQ1J7bZxlzmfBLfk5A1hpSG8kBNM/Z FUsqRNz+8nOORUvsNrbQLkIEjfduCOUza630ON3ivpE= ) ; Key ID = 37042 matoken.xyz. 300 IN RRSIG ( DNSKEY 8 2 300 20200103152616 20191212152616 37042 matoken.xyz. Xj83SMXDIzqdiWufKMmGjH1nuteUKFJd9dkhftXqakWtHTI5wUR7Xz8ymuoTYndkJ6+J/4tdVxIY fB7a9BbBEmtB4yDVWEHCgpal7OHx/+UtMse2E7MTVjO4XPIcqeha/HBlZzHBZKFiTv6ivNUsUZ16 VzKApIUsCuSReMzBT0v3ICFtm0jzFpaXSNwmNLytjUzDyMv5HT4MzLfTBl2vDIus26i71PimQeKB Iiv0TP3oRVEDwSUMsG8jAZCYmV8wcV88s9QSGbt12MjdqL3dJR4x4uqy60bzVhZFPiaLsUUgNEk0 aJJmoVkJLF1ck8h+V5Qyt11HdIfLNabrdZt0lQ== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 512 ;; option:
	Found 3 DNSKEY records for matoken.xyz
	`matoken.xyz. 300 IN DNSKEY ( 256 3 8 AwEAAZf1t5PoS6AjkqovYtgsDIpfKJrCjvE1JN9m/iQ99IbUkHfbZqTL0tDe+23jd6dTiNyEnnwX Axt3arF1yYAWWQkGp4NWz2HJffR/lJOgS0bS3P0gXBHlFSb2KcVTE5kCast/4SO8KY1BD2UNXiqP VjcPNq1beyX1f6ac2EspbP1B ) ; Key ID = 14359`
	`matoken.xyz. 300 IN DNSKEY ( 256 3 8 AwEAAbT/vpM29muRqOEtMbgOfsGukpfzDbDTzAaBHXmF/BBWO9akcLO+5vrJWbr9jcPdYYfZdSPQ pOwMUosR21t0Sdtule+0nZX5BBtuWl4Rm6Ysrf/6r/pNDSotRqKBFxcia4ExaBPqtZwwYs7cRMQN UbCQf2r/Owh8vpRMVIJ6LwR3 ) ; Key ID = 62940`
	`matoken.xyz. 300 IN DNSKEY ( 257 3 8 AwEAAaUPT5a7Ch5cTVkcgDVrf9FCMxCMA+7McAz2x4933N8dFqqC+9OH4yAwoQW+VjXzLF4pbw4m dHuJXMSDaN1I0YrrglEfKtwaH5NacJW4UMoyF9MW5GAoS0XoZzw2ISOOOPCOphhQdc0T9SfG5pSP TvvPMXOZm9KFR99c+jiAwT4mjJut52Mu7b5I4nsUDKQBnOnDFt4fDv2DOSI+yVbdC0swX0bZXSD3 82GX4+ValNf6Yjz8a1SGtabkv5/PTlMxaHUwqqesqjMVYpnQ1J7bZxlzmfBLfk5A1hpSG8kBNM/Z FUsqRNz+8nOORUvsNrbQLkIEjfduCOUza630ON3ivpE= ) ; Key ID = 37042`
	DNSKEY=37042/SEP is now in the chain-of-trust
	DS=37042/SHA-256 verifies DNSKEY=37042/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`matoken.xyz. 300 IN RRSIG ( DNSKEY 8 2 300 20200103152616 20191212152616 37042 matoken.xyz. Xj83SMXDIzqdiWufKMmGjH1nuteUKFJd9dkhftXqakWtHTI5wUR7Xz8ymuoTYndkJ6+J/4tdVxIY fB7a9BbBEmtB4yDVWEHCgpal7OHx/+UtMse2E7MTVjO4XPIcqeha/HBlZzHBZKFiTv6ivNUsUZ16 VzKApIUsCuSReMzBT0v3ICFtm0jzFpaXSNwmNLytjUzDyMv5HT4MzLfTBl2vDIus26i71PimQeKB Iiv0TP3oRVEDwSUMsG8jAZCYmV8wcV88s9QSGbt12MjdqL3dJR4x4uqy60bzVhZFPiaLsUUgNEk0 aJJmoVkJLF1ck8h+V5Qyt11HdIfLNabrdZt0lQ== )`
	RRSIG=37042 and DNSKEY=37042/SEP verifies the DNSKEY RRset
	DNSKEY=14359 is now in the chain-of-trust
	DNSKEY=62940 is now in the chain-of-trust
	Query to ns-cloud-d2.googledomains.com for matoken.xyz/A
	Error querying ns-cloud-d2.googledomains.com/2001:4860:4802:34:0:0:0:6d for matoken.xyz/A: 'IPv6 transport disabled'
	Received 564 bytes from 216.239.34.109
	;; Answer received from 216.239.34.109 (564 bytes) ;; HEADER SECTION ;; id = 64496 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 4 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 512 ;; option: ;; QUESTION SECTION (1 record) ;; matoken.xyz. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (4 records) matoken.xyz. 300 IN SOA ( ns-cloud-d1.googledomains.com. cloud-dns-hostmaster.google.com. 1 ;serial 21600 ;refresh 3600 ;retry 259200 ;expire 300 ;minimum ) matoken.xyz. 300 IN RRSIG ( SOA 8 2 21600 20200103152616 20191212152616 62940 matoken.xyz. ZK8gnQWa1bRQfS8CojSa60ZgM4C4cPNsIMiK2wEnpNeRLyEerecv7sKcnyjBCouK41yqYCmCL2nT /mNxC/LXxgFPu9DbLSuupyhSMLRDQJKGoKUhHZG2C+hdO1TAZNwJoEBSvztxeqL2L4v4kN6GxlCZ oCp/Kc5Q1mP61LuQm7s= ) r8u7h0kpjdkv8tlp07e79fvascqsdbl2.matoken.xyz. 300 IN NSEC3 ( 1 0 1 ee858bcc8f122b54 63jqplod82380fj255ko0oq27dc4aud2 NS SOA RRSIG DNSKEY NSEC3PARAM CDS ) r8u7h0kpjdkv8tlp07e79fvascqsdbl2.matoken.xyz. 300 IN RRSIG ( NSEC3 8 3 300 20200103152616 20191212152616 62940 matoken.xyz. f9aiMonXaVapRMOYI24hi63w0sv2+CqA+NFgpPZ4w0twXMy6/n6ekjpwSs2VKRP/p4P7tUDYrom2 vT2+eo9Q8S3ODUE5NoZKWdI4nBGnSPY5RWlT/KIU5o4SZiwbWTyiNPsUaNr6IOC+6W/gvq3qNtGU nkYhrYAJqam01EEVvt8= ) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 512 ;; option:
	matoken.xyz is authoritative for matoken.xyz
	Found RRSIG signed by matoken.xyz zone
	Query to ns-cloud-d3.googledomains.com for matoken.xyz/SOA
	Received 567 bytes from 216.239.36.109
	;; Answer received from 216.239.36.109 (567 bytes) ;; HEADER SECTION ;; id = 32698 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 5 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 512 ;; option: ;; QUESTION SECTION (1 record) ;; matoken.xyz. IN SOA ;; ANSWER SECTION (2 records) matoken.xyz. 21600 IN SOA ( ns-cloud-d1.googledomains.com. cloud-dns-hostmaster.google.com. 1 ;serial 21600 ;refresh 3600 ;retry 259200 ;expire 300 ;minimum ) matoken.xyz. 21600 IN RRSIG ( SOA 8 2 21600 20200103152616 20191212152616 62940 matoken.xyz. ZK8gnQWa1bRQfS8CojSa60ZgM4C4cPNsIMiK2wEnpNeRLyEerecv7sKcnyjBCouK41yqYCmCL2nT /mNxC/LXxgFPu9DbLSuupyhSMLRDQJKGoKUhHZG2C+hdO1TAZNwJoEBSvztxeqL2L4v4kN6GxlCZ oCp/Kc5Q1mP61LuQm7s= ) ;; AUTHORITY SECTION (5 records) matoken.xyz. 21600 IN NS ns-cloud-d1.googledomains.com. matoken.xyz. 21600 IN NS ns-cloud-d2.googledomains.com. matoken.xyz. 21600 IN NS ns-cloud-d3.googledomains.com. matoken.xyz. 21600 IN NS ns-cloud-d4.googledomains.com. matoken.xyz. 21600 IN RRSIG ( NS 8 2 21600 20200103152616 20191212152616 62940 matoken.xyz. qVN4DLoL/fXSqpulb/javbJIzHfEiXDr+2fBS8OxLcf5WCp42vHp78Wp9ZLZtNjd0UrRApjRUz6T Rc3KEpGfbiW7wFs2H48sbrFrYqIQ+HCpDt17R5Ecv4QWjGg2jNx/Ejpf1Qy14tGiPgAoMWcCgJFn FiWLfbEYxzef211hie4= ) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 512 ;; option:
	Query to ns-cloud-d1.googledomains.com for matoken.xyz/SOA
	Received 567 bytes from 216.239.32.109
	;; Answer received from 216.239.32.109 (567 bytes) ;; HEADER SECTION ;; id = 55897 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 5 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 512 ;; option: ;; QUESTION SECTION (1 record) ;; matoken.xyz. IN SOA ;; ANSWER SECTION (2 records) matoken.xyz. 21600 IN SOA ( ns-cloud-d1.googledomains.com. cloud-dns-hostmaster.google.com. 1 ;serial 21600 ;refresh 3600 ;retry 259200 ;expire 300 ;minimum ) matoken.xyz. 21600 IN RRSIG ( SOA 8 2 21600 20200103152616 20191212152616 62940 matoken.xyz. ZK8gnQWa1bRQfS8CojSa60ZgM4C4cPNsIMiK2wEnpNeRLyEerecv7sKcnyjBCouK41yqYCmCL2nT /mNxC/LXxgFPu9DbLSuupyhSMLRDQJKGoKUhHZG2C+hdO1TAZNwJoEBSvztxeqL2L4v4kN6GxlCZ oCp/Kc5Q1mP61LuQm7s= ) ;; AUTHORITY SECTION (5 records) matoken.xyz. 21600 IN NS ns-cloud-d1.googledomains.com. matoken.xyz. 21600 IN NS ns-cloud-d2.googledomains.com. matoken.xyz. 21600 IN NS ns-cloud-d3.googledomains.com. matoken.xyz. 21600 IN NS ns-cloud-d4.googledomains.com. matoken.xyz. 21600 IN RRSIG ( NS 8 2 21600 20200103152616 20191212152616 62940 matoken.xyz. qVN4DLoL/fXSqpulb/javbJIzHfEiXDr+2fBS8OxLcf5WCp42vHp78Wp9ZLZtNjd0UrRApjRUz6T Rc3KEpGfbiW7wFs2H48sbrFrYqIQ+HCpDt17R5Ecv4QWjGg2jNx/Ejpf1Qy14tGiPgAoMWcCgJFn FiWLfbEYxzef211hie4= ) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 512 ;; option:
	Query to ns-cloud-d4.googledomains.com for matoken.xyz/SOA
	Error querying ns-cloud-d4.googledomains.com/2001:4860:4802:38:0:0:0:6d for matoken.xyz/SOA: 'IPv6 transport disabled'
	Received 567 bytes from 216.239.38.109
	;; Answer received from 216.239.38.109 (567 bytes) ;; HEADER SECTION ;; id = 54921 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 5 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 512 ;; option: ;; QUESTION SECTION (1 record) ;; matoken.xyz. IN SOA ;; ANSWER SECTION (2 records) matoken.xyz. 21600 IN SOA ( ns-cloud-d1.googledomains.com. cloud-dns-hostmaster.google.com. 1 ;serial 21600 ;refresh 3600 ;retry 259200 ;expire 300 ;minimum ) matoken.xyz. 21600 IN RRSIG ( SOA 8 2 21600 20200103152616 20191212152616 62940 matoken.xyz. ZK8gnQWa1bRQfS8CojSa60ZgM4C4cPNsIMiK2wEnpNeRLyEerecv7sKcnyjBCouK41yqYCmCL2nT /mNxC/LXxgFPu9DbLSuupyhSMLRDQJKGoKUhHZG2C+hdO1TAZNwJoEBSvztxeqL2L4v4kN6GxlCZ oCp/Kc5Q1mP61LuQm7s= ) ;; AUTHORITY SECTION (5 records) matoken.xyz. 21600 IN NS ns-cloud-d1.googledomains.com. matoken.xyz. 21600 IN NS ns-cloud-d2.googledomains.com. matoken.xyz. 21600 IN NS ns-cloud-d3.googledomains.com. matoken.xyz. 21600 IN NS ns-cloud-d4.googledomains.com. matoken.xyz. 21600 IN RRSIG ( NS 8 2 21600 20200103152616 20191212152616 62940 matoken.xyz. qVN4DLoL/fXSqpulb/javbJIzHfEiXDr+2fBS8OxLcf5WCp42vHp78Wp9ZLZtNjd0UrRApjRUz6T Rc3KEpGfbiW7wFs2H48sbrFrYqIQ+HCpDt17R5Ecv4QWjGg2jNx/Ejpf1Qy14tGiPgAoMWcCgJFn FiWLfbEYxzef211hie4= ) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 512 ;; option:
	Query to ns-cloud-d2.googledomains.com for matoken.xyz/SOA
	Error querying ns-cloud-d2.googledomains.com/2001:4860:4802:34:0:0:0:6d for matoken.xyz/SOA: 'IPv6 transport disabled'
	Received 567 bytes from 216.239.34.109
	;; Answer received from 216.239.34.109 (567 bytes) ;; HEADER SECTION ;; id = 4934 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 5 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 512 ;; option: ;; QUESTION SECTION (1 record) ;; matoken.xyz. IN SOA ;; ANSWER SECTION (2 records) matoken.xyz. 21600 IN SOA ( ns-cloud-d1.googledomains.com. cloud-dns-hostmaster.google.com. 1 ;serial 21600 ;refresh 3600 ;retry 259200 ;expire 300 ;minimum ) matoken.xyz. 21600 IN RRSIG ( SOA 8 2 21600 20200103152616 20191212152616 62940 matoken.xyz. ZK8gnQWa1bRQfS8CojSa60ZgM4C4cPNsIMiK2wEnpNeRLyEerecv7sKcnyjBCouK41yqYCmCL2nT /mNxC/LXxgFPu9DbLSuupyhSMLRDQJKGoKUhHZG2C+hdO1TAZNwJoEBSvztxeqL2L4v4kN6GxlCZ oCp/Kc5Q1mP61LuQm7s= ) ;; AUTHORITY SECTION (5 records) matoken.xyz. 21600 IN NS ns-cloud-d1.googledomains.com. matoken.xyz. 21600 IN NS ns-cloud-d2.googledomains.com. matoken.xyz. 21600 IN NS ns-cloud-d3.googledomains.com. matoken.xyz. 21600 IN NS ns-cloud-d4.googledomains.com. matoken.xyz. 21600 IN RRSIG ( NS 8 2 21600 20200103152616 20191212152616 62940 matoken.xyz. qVN4DLoL/fXSqpulb/javbJIzHfEiXDr+2fBS8OxLcf5WCp42vHp78Wp9ZLZtNjd0UrRApjRUz6T Rc3KEpGfbiW7wFs2H48sbrFrYqIQ+HCpDt17R5Ecv4QWjGg2jNx/Ejpf1Qy14tGiPgAoMWcCgJFn FiWLfbEYxzef211hie4= ) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 512 ;; option:
	Query to ns-cloud-d2.googledomains.com for matoken.xyz/A
	Received 564 bytes from 216.239.34.109
	;; Answer received from 216.239.34.109 (564 bytes) ;; HEADER SECTION ;; id = 1034 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 4 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 512 ;; option: ;; QUESTION SECTION (1 record) ;; matoken.xyz. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (4 records) matoken.xyz. 300 IN SOA ( ns-cloud-d1.googledomains.com. cloud-dns-hostmaster.google.com. 1 ;serial 21600 ;refresh 3600 ;retry 259200 ;expire 300 ;minimum ) matoken.xyz. 300 IN RRSIG ( SOA 8 2 21600 20200103152616 20191212152616 62940 matoken.xyz. ZK8gnQWa1bRQfS8CojSa60ZgM4C4cPNsIMiK2wEnpNeRLyEerecv7sKcnyjBCouK41yqYCmCL2nT /mNxC/LXxgFPu9DbLSuupyhSMLRDQJKGoKUhHZG2C+hdO1TAZNwJoEBSvztxeqL2L4v4kN6GxlCZ oCp/Kc5Q1mP61LuQm7s= ) r8u7h0kpjdkv8tlp07e79fvascqsdbl2.matoken.xyz. 300 IN NSEC3 ( 1 0 1 ee858bcc8f122b54 63jqplod82380fj255ko0oq27dc4aud2 NS SOA RRSIG DNSKEY NSEC3PARAM CDS ) r8u7h0kpjdkv8tlp07e79fvascqsdbl2.matoken.xyz. 300 IN RRSIG ( NSEC3 8 3 300 20200103152616 20191212152616 62940 matoken.xyz. f9aiMonXaVapRMOYI24hi63w0sv2+CqA+NFgpPZ4w0twXMy6/n6ekjpwSs2VKRP/p4P7tUDYrom2 vT2+eo9Q8S3ODUE5NoZKWdI4nBGnSPY5RWlT/KIU5o4SZiwbWTyiNPsUaNr6IOC+6W/gvq3qNtGU nkYhrYAJqam01EEVvt8= ) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 512 ;; option:
	NSEC3 validation not implemented yet
	Found 1 RRSIGs over SOA RRset
	`matoken.xyz. 300 IN RRSIG ( SOA 8 2 21600 20200103152616 20191212152616 62940 matoken.xyz. ZK8gnQWa1bRQfS8CojSa60ZgM4C4cPNsIMiK2wEnpNeRLyEerecv7sKcnyjBCouK41yqYCmCL2nT /mNxC/LXxgFPu9DbLSuupyhSMLRDQJKGoKUhHZG2C+hdO1TAZNwJoEBSvztxeqL2L4v4kN6GxlCZ oCp/Kc5Q1mP61LuQm7s= )`
	RRSIG=62940 and DNSKEY=62940 verifies the SOA RRset

Move your mouse over any or symbols for remediation hints.

Want a second opinion? Test matoken.xyz at dnsviz.net.

DNSSEC Analyzer

↓ Advanced options ↑ Advanced options

Trust Anchor:
Name Servers: