DNSSEC Debugger - mg101.cc

Domain Name:

Time: 2025-11-06 16:09:34 UTC

Analyzing DNSSEC problems for mg101.cc

DS=20326/SHA-256 is now in the chain-of-trust

	Checking DS between Trust Anchor and .
	`. IN DS ( 20326 8 2 e06d44b80b8f1d39a95c0b0d7c65d08458e880409bbc683457104237c7f8ec8d )`
	Query to b.root-servers.net for ./DNSKEY
	Received 1139 bytes from 170.247.170.2
	;; Response received from [170.247.170.2] 1139 octets ;; HEADER SECTION ;; id = 64038 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 4 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; . IN DNSKEY ;; ANSWER SECTION (4 records) . 172800 IN DNSKEY ( 256 3 8 AwEAAeuS7hMRZ7muj1c/ew2DoavxkBw3jUG5R79pKVDI39fxvlD1HfJYGJERnXuV4SrQfUPzWw/l t5Axb0EqXL/sQ2ZyntVmwQwoSXi2l9smlIKh2UrkTmmozRCPe7GS4fZTE4Ew7AV4YprTLgVmxiGP 4unRuXkYOgQJXCIBpVCmEdUli6X2sm0i5ZilU/Q+rX3RDw+eYPP7K0cJnJ+ZnvQDy14+BFtreWl9 enNQljgGpBp26lEp1z7AbvUfzkQNVCVGaM8jEaCSALXiROlwCQMOdj+tpLXFf99kdJnTQw2cpEr1 uGs/yENAJpoGhbjZAoIkXzDUBSlfFeYz7FWzH6gIe7M= ) ; keytag 61809 . 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; keytag 20326 . 172800 IN DNSKEY ( 257 3 8 AwEAAa96jeuknZlaeSrvyAJj6ZHv28hhOKkx3rLGXVaC6rXTsDc449/cidltpkyGwCJNnOAlFNKF 2jBosZBU5eeHspaQWOmOElZsjICMQMC3aeHbGiShvZsx4wMYSjH8e7Vrhbu6irwCzVBApESjbUdp WWmEnhathWu1jo+siFUiRAAxm9qyJNg/wOZqqzL/dL/q8PkcRU5oUKEpUge71M3ej2/7CPqpdVwu MoTvoB+ZOT4YeGyxMvHmbrxlFzGOHOijtzN+u1TQNatX2XBuzZNQ1K+s2CXkPIZo7s6JgZyvaBev YtxPvYLw4z9mR7K2vaF18UYH9Z9GNUUeayffKC73PYc= ) ; keytag 38696 . 172800 IN RRSIG ( DNSKEY 8 0 172800 20251121000000 20251031000000 20326 . qnzPUNeV8plQe0Se5Fa0uHS0Ygf4DSnEekaMeH7GQRbNhk6ntkneJFKUN+EBJQfd/JoaY//18qf4 G6YrWE/a+FwJ5oefafEhuJWhITrXMle9e4oy4Z7sjb7e1ajwGSKlcfp0Rsulv/aPlLLfl+4jUijr zzZUvUJA10LzOwswvjI16xA3HMG9rEh0mKY0RywLI+R5NkYgDzY0QGL9BMaUHWNV+eTFBmMpmg3j jKGnIg8jmFhqcypUqLXW7md/oO+k0A8QG39nGvhx7rVDUoaQd7atJH2jtzGeXW8n/XI/ncI9fSoX rLXu6NvJY5bX6dXI9ypg+sFnkF7Fd4TdZ8AasA== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 3 DNSKEY records for .
	`. 172800 IN DNSKEY ( 256 3 8 AwEAAeuS7hMRZ7muj1c/ew2DoavxkBw3jUG5R79pKVDI39fxvlD1HfJYGJERnXuV4SrQfUPzWw/l t5Axb0EqXL/sQ2ZyntVmwQwoSXi2l9smlIKh2UrkTmmozRCPe7GS4fZTE4Ew7AV4YprTLgVmxiGP 4unRuXkYOgQJXCIBpVCmEdUli6X2sm0i5ZilU/Q+rX3RDw+eYPP7K0cJnJ+ZnvQDy14+BFtreWl9 enNQljgGpBp26lEp1z7AbvUfzkQNVCVGaM8jEaCSALXiROlwCQMOdj+tpLXFf99kdJnTQw2cpEr1 uGs/yENAJpoGhbjZAoIkXzDUBSlfFeYz7FWzH6gIe7M= ) ; keytag 61809`
	`. 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; keytag 20326`
	`. 172800 IN DNSKEY ( 257 3 8 AwEAAa96jeuknZlaeSrvyAJj6ZHv28hhOKkx3rLGXVaC6rXTsDc449/cidltpkyGwCJNnOAlFNKF 2jBosZBU5eeHspaQWOmOElZsjICMQMC3aeHbGiShvZsx4wMYSjH8e7Vrhbu6irwCzVBApESjbUdp WWmEnhathWu1jo+siFUiRAAxm9qyJNg/wOZqqzL/dL/q8PkcRU5oUKEpUge71M3ej2/7CPqpdVwu MoTvoB+ZOT4YeGyxMvHmbrxlFzGOHOijtzN+u1TQNatX2XBuzZNQ1K+s2CXkPIZo7s6JgZyvaBev YtxPvYLw4z9mR7K2vaF18UYH9Z9GNUUeayffKC73PYc= ) ; keytag 38696`
	DNSKEY=20326/SEP is now in the chain-of-trust
	DS=20326/SHA-256 verifies DNSKEY=20326/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`. 172800 IN RRSIG ( DNSKEY 8 0 172800 20251121000000 20251031000000 20326 . qnzPUNeV8plQe0Se5Fa0uHS0Ygf4DSnEekaMeH7GQRbNhk6ntkneJFKUN+EBJQfd/JoaY//18qf4 G6YrWE/a+FwJ5oefafEhuJWhITrXMle9e4oy4Z7sjb7e1ajwGSKlcfp0Rsulv/aPlLLfl+4jUijr zzZUvUJA10LzOwswvjI16xA3HMG9rEh0mKY0RywLI+R5NkYgDzY0QGL9BMaUHWNV+eTFBmMpmg3j jKGnIg8jmFhqcypUqLXW7md/oO+k0A8QG39nGvhx7rVDUoaQd7atJH2jtzGeXW8n/XI/ncI9fSoX rLXu6NvJY5bX6dXI9ypg+sFnkF7Fd4TdZ8AasA== )`
	RRSIG=20326 and DNSKEY=20326/SEP verifies the DNSKEY RRset
	DNSKEY=61809 is now in the chain-of-trust
	DNSKEY=38696/SEP is now in the chain-of-trust
	Query to f.root-servers.net for mg101.cc/A
	Received 629 bytes from 192.5.5.241
	;; Response received from [192.5.5.241] 629 octets ;; HEADER SECTION ;; id = 40874 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 6 arcount = 9 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1472, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; mg101.cc. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (6 records) cc. 172800 IN NS ac1.nstld.com. cc. 172800 IN NS ac2.nstld.com. cc. 172800 IN NS ac3.nstld.com. cc. 172800 IN NS ac4.nstld.com. cc. 86400 IN DS ( 519 8 2 e1ec6495abd34562e6f433dee201e6c6a52cb10af69c04d675da692d2d566897 ) cc. 86400 IN RRSIG ( DS 8 1 86400 20251119050000 20251106040000 61809 . HHhsZ91RobvvBHXjWsQz0XOo5kqM+GWbnq5hQPslkeN3rCIW50+OQmxneqvKZ/nh2wQ6XJReDJcF 91kJIKbAwJthIhodwgZBF1kxYAKn8DO7CJ+eX9kX8/z6oEzymJUH6dU+P1SlKIFBSiJkUZA/erz+ He4zlsjoeAjIZjPowjd/ovfT9OL5G8xsOKSV4lQgJk+vSHigzKrW/HNoODtW+3CAn0P4pvuOKk1J xsU610Gb9kmlRYhTlGDa7so1Y8CP++yWMMy0rF+eIfEMTHdUjz7QITnX9snP9OVDCKCDz/hQmIma gR6Bu9Y0P4pJrJ00abM+HDZ7qOZQqRlURH8W9Q== ) ;; ADDITIONAL SECTION (9 records) ac1.nstld.com. 172800 IN A 192.42.173.30 ac1.nstld.com. 172800 IN AAAA 2001:500:120::30 ac2.nstld.com. 172800 IN A 192.42.174.30 ac2.nstld.com. 172800 IN AAAA 2001:500:121::30 ac3.nstld.com. 172800 IN A 192.42.175.30 ac3.nstld.com. 172800 IN AAAA 2001:500:122::30 ac4.nstld.com. 172800 IN A 192.42.176.30 ac4.nstld.com. 172800 IN AAAA 2001:500:123::30 ;; { "EDNS-VERSION": 0 }
	Query to g.root-servers.net for cc/DNSKEY
	Received 623 bytes from 192.112.36.4
	;; Response received from [192.112.36.4] 623 octets ;; HEADER SECTION ;; id = 47645 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 6 arcount = 9 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; cc. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (6 records) cc. 172800 IN NS ac3.nstld.com. cc. 172800 IN NS ac1.nstld.com. cc. 172800 IN NS ac2.nstld.com. cc. 172800 IN NS ac4.nstld.com. cc. 86400 IN DS ( 519 8 2 e1ec6495abd34562e6f433dee201e6c6a52cb10af69c04d675da692d2d566897 ) cc. 86400 IN RRSIG ( DS 8 1 86400 20251119050000 20251106040000 61809 . HHhsZ91RobvvBHXjWsQz0XOo5kqM+GWbnq5hQPslkeN3rCIW50+OQmxneqvKZ/nh2wQ6XJReDJcF 91kJIKbAwJthIhodwgZBF1kxYAKn8DO7CJ+eX9kX8/z6oEzymJUH6dU+P1SlKIFBSiJkUZA/erz+ He4zlsjoeAjIZjPowjd/ovfT9OL5G8xsOKSV4lQgJk+vSHigzKrW/HNoODtW+3CAn0P4pvuOKk1J xsU610Gb9kmlRYhTlGDa7so1Y8CP++yWMMy0rF+eIfEMTHdUjz7QITnX9snP9OVDCKCDz/hQmIma gR6Bu9Y0P4pJrJ00abM+HDZ7qOZQqRlURH8W9Q== ) ;; ADDITIONAL SECTION (9 records) ac4.nstld.com. 172800 IN A 192.42.176.30 ac3.nstld.com. 172800 IN A 192.42.175.30 ac2.nstld.com. 172800 IN A 192.42.174.30 ac1.nstld.com. 172800 IN A 192.42.173.30 ac4.nstld.com. 172800 IN AAAA 2001:500:123::30 ac3.nstld.com. 172800 IN AAAA 2001:500:122::30 ac2.nstld.com. 172800 IN AAAA 2001:500:121::30 ac1.nstld.com. 172800 IN AAAA 2001:500:120::30 ;; { "EDNS-VERSION": 0 }
	Found child zone cc

	Checking DS between . and cc
	Query to b.root-servers.net for cc/DS
	Received 366 bytes from 170.247.170.2
	;; Response received from [170.247.170.2] 366 octets ;; HEADER SECTION ;; id = 30213 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; cc. IN DS ;; ANSWER SECTION (2 records) cc. 86400 IN DS ( 519 8 2 e1ec6495abd34562e6f433dee201e6c6a52cb10af69c04d675da692d2d566897 ) cc. 86400 IN RRSIG ( DS 8 1 86400 20251119050000 20251106040000 61809 . HHhsZ91RobvvBHXjWsQz0XOo5kqM+GWbnq5hQPslkeN3rCIW50+OQmxneqvKZ/nh2wQ6XJReDJcF 91kJIKbAwJthIhodwgZBF1kxYAKn8DO7CJ+eX9kX8/z6oEzymJUH6dU+P1SlKIFBSiJkUZA/erz+ He4zlsjoeAjIZjPowjd/ovfT9OL5G8xsOKSV4lQgJk+vSHigzKrW/HNoODtW+3CAn0P4pvuOKk1J xsU610Gb9kmlRYhTlGDa7so1Y8CP++yWMMy0rF+eIfEMTHdUjz7QITnX9snP9OVDCKCDz/hQmIma gR6Bu9Y0P4pJrJ00abM+HDZ7qOZQqRlURH8W9Q== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 1 DS records for cc in the . zone
	DS=519/SHA-256 has algorithm RSASHA256
	Found 1 RRSIGs over DS RRset
	`cc. 86400 IN RRSIG ( DS 8 1 86400 20251119050000 20251106040000 61809 . HHhsZ91RobvvBHXjWsQz0XOo5kqM+GWbnq5hQPslkeN3rCIW50+OQmxneqvKZ/nh2wQ6XJReDJcF 91kJIKbAwJthIhodwgZBF1kxYAKn8DO7CJ+eX9kX8/z6oEzymJUH6dU+P1SlKIFBSiJkUZA/erz+ He4zlsjoeAjIZjPowjd/ovfT9OL5G8xsOKSV4lQgJk+vSHigzKrW/HNoODtW+3CAn0P4pvuOKk1J xsU610Gb9kmlRYhTlGDa7so1Y8CP++yWMMy0rF+eIfEMTHdUjz7QITnX9snP9OVDCKCDz/hQmIma gR6Bu9Y0P4pJrJ00abM+HDZ7qOZQqRlURH8W9Q== )`
	RRSIG=61809 and DNSKEY=61809 verifies the DS RRset
	DS=519/SHA-256 is now in the chain-of-trust
	`cc. 86400 IN DS ( 519 8 2 e1ec6495abd34562e6f433dee201e6c6a52cb10af69c04d675da692d2d566897 )`
	Query to ac3.nstld.com for cc/DNSKEY
	Received 775 bytes from 192.42.175.30
	;; Response received from [192.42.175.30] 775 octets ;; HEADER SECTION ;; id = 13860 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 3 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; cc. IN DNSKEY ;; ANSWER SECTION (3 records) cc. 86400 IN DNSKEY ( 257 3 8 AQPpexyFq/cE7G+Kh1V9tl7nccHwSH3KRpsm6Rqj3LHdI1LhaZpqfl/yg9elcY/I0G3o7Cc+BV3R pFpSZXSt1FCH7/gm8VG9ei5QxQoCcrhIV/EIDzW8E+oVKE//FtCP9WnZ7am4J+tErndII+mtJdpp uAYjXk7ub0tgWfebl3zLHwZSxSIJ4ZWAEDvzV4nvBU1AxdNwBYnacWGqM38REh5nsTOkysX3TuH9 VIz5lT3caMrFXyiq8aLBXo9KYmfwTs/wr2qtdvD3gFqspO22rDyEFPsrZIDBQtBx/hJFHAzvhaQG s3zH+Vzu1hrji9GZEvZC4dhhzMEl18ZRDpOebsaZ ) ; keytag 519 cc. 86400 IN DNSKEY ( 256 3 8 AwEAAdJEn5UeoGE3MkLIP10krhLxWPH0eQvIlPmdFG1RT1qcqM37Q1L6pW87P9eI6VPl0waVqTYn Mz2YCh3nkZ/ten+cvFXqwhI+hTeYPISI9UCkMtIEIY3xiQbSlkdYfTFTaWmQ6T421roOSkmX0HgB iqOBOJ1PNtaC8fV58SWLEpSTA/3j3Bo5dC6CiDcp2vhSXHTmhmnBo+2TgC+68+PMEgE= ) ; keytag 9645 cc. 86400 IN RRSIG ( DNSKEY 8 1 86400 20251114143408 20251030142908 519 cc. OrSzlbniK2cvjBoiMmHdj//1pgoRq9kz5o1lZwejHS5isonLV5RsWHdSZjmp4tRQwRjuuMaYYjUq Rfc/ap/G/YQ0EPvxz2ONB6BSVNPns2EHVkcKSVeo/a/bku4BTRuSevvIevt20ZdkCsixVkbVcioC yK1mu55ecNpNthg9Vib335DzSeWUnvxe+MZQjHQN3WKaTpYosEesIrsciqPkA4UdiJBZZaApj4So GPfJ0QcMwsKDTzMi7lcnGxsrGnowIO7J8x23OyiYtsU4Jw2zBE4nzaqLWexHBycbC8XX3KXdh3JG c8dGRE+Wxq705UVI3jImuP3zBSAQjY3e/Ozeew== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 2 DNSKEY records for cc
	`cc. 86400 IN DNSKEY ( 257 3 8 AQPpexyFq/cE7G+Kh1V9tl7nccHwSH3KRpsm6Rqj3LHdI1LhaZpqfl/yg9elcY/I0G3o7Cc+BV3R pFpSZXSt1FCH7/gm8VG9ei5QxQoCcrhIV/EIDzW8E+oVKE//FtCP9WnZ7am4J+tErndII+mtJdpp uAYjXk7ub0tgWfebl3zLHwZSxSIJ4ZWAEDvzV4nvBU1AxdNwBYnacWGqM38REh5nsTOkysX3TuH9 VIz5lT3caMrFXyiq8aLBXo9KYmfwTs/wr2qtdvD3gFqspO22rDyEFPsrZIDBQtBx/hJFHAzvhaQG s3zH+Vzu1hrji9GZEvZC4dhhzMEl18ZRDpOebsaZ ) ; keytag 519`
	`cc. 86400 IN DNSKEY ( 256 3 8 AwEAAdJEn5UeoGE3MkLIP10krhLxWPH0eQvIlPmdFG1RT1qcqM37Q1L6pW87P9eI6VPl0waVqTYn Mz2YCh3nkZ/ten+cvFXqwhI+hTeYPISI9UCkMtIEIY3xiQbSlkdYfTFTaWmQ6T421roOSkmX0HgB iqOBOJ1PNtaC8fV58SWLEpSTA/3j3Bo5dC6CiDcp2vhSXHTmhmnBo+2TgC+68+PMEgE= ) ; keytag 9645`
	DNSKEY=519/SEP is now in the chain-of-trust
	DS=519/SHA-256 verifies DNSKEY=519/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`cc. 86400 IN RRSIG ( DNSKEY 8 1 86400 20251114143408 20251030142908 519 cc. OrSzlbniK2cvjBoiMmHdj//1pgoRq9kz5o1lZwejHS5isonLV5RsWHdSZjmp4tRQwRjuuMaYYjUq Rfc/ap/G/YQ0EPvxz2ONB6BSVNPns2EHVkcKSVeo/a/bku4BTRuSevvIevt20ZdkCsixVkbVcioC yK1mu55ecNpNthg9Vib335DzSeWUnvxe+MZQjHQN3WKaTpYosEesIrsciqPkA4UdiJBZZaApj4So GPfJ0QcMwsKDTzMi7lcnGxsrGnowIO7J8x23OyiYtsU4Jw2zBE4nzaqLWexHBycbC8XX3KXdh3JG c8dGRE+Wxq705UVI3jImuP3zBSAQjY3e/Ozeew== )`
	RRSIG=519 and DNSKEY=519/SEP verifies the DNSKEY RRset
	DNSKEY=9645 is now in the chain-of-trust
	Query to ac3.nstld.com for mg101.cc/A
	Received 644 bytes from 192.42.175.30
	;; Response received from [192.42.175.30] 644 octets ;; HEADER SECTION ;; id = 56983 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 6 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; mg101.cc. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (6 records) mg101.cc. 172800 IN NS fattouche.ns.cloudflare.com. mg101.cc. 172800 IN NS veda.ns.cloudflare.com. RQGAP5UF6Q1NGVCKFNO8RANVDN5ILRIN.cc. 86400 IN NSEC3 ( 1 1 0 - rqgtprsave3h26d99nps8lr2hvrnisas NS SOA RRSIG DNSKEY NSEC3PARAM ) RQGAP5UF6Q1NGVCKFNO8RANVDN5ILRIN.cc. 86400 IN RRSIG ( NSEC3 8 2 86400 20251112022100 20251105022100 9645 cc. eu8Px620nMsZTPJlXgUzSofMWNE8XkUgZzn4Bm8jTqW7spTfpeMkS8WYNtoR1UWhDLQSlw6OclYB CBgoxmubwFMRfsSMxaCApc3H7fGDbBnIJdVFHYpFQduKlg1zZrTiZg0NSy/Aen2rfg3v+BDXkoHo /0rftfqenYNsQQIRj45trMsAL9jXiu3c8WPpmD7MejniVjPpZs2qUWi3ZOjROg== ) O0GQSTIJ5TCKVDK7P9GPHVTQ0PTCH0OG.cc. 86400 IN NSEC3 ( 1 1 0 - o0hg5mdtc3l06v2igpft3flqa8bon0vt NS DS RRSIG ) O0GQSTIJ5TCKVDK7P9GPHVTQ0PTCH0OG.cc. 86400 IN RRSIG ( NSEC3 8 2 86400 20251112162025 20251105162025 9645 cc. qIbHGUJ+ewjr+C1Z4yXBS85inKCPZK2wdFBJ8P82KlGje/yLHRCgUwYDNRL5dTFHLmgbdj2WW+VH ZYFlZkDYVV1aLy4py1V4zW7kw6znxFMj8uzkBkizKevEbEnSfn7bw0fPRonso+XaTRpN7/+e6QWQ 201pjIN6qViP9p0mh7E1pZRCzfeZKokX/9cjuz2YhPEkRd5zwuvGONPu487yeQ== ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Query to ac3.nstld.com for mg101.cc/DNSKEY
	Received 644 bytes from 192.42.175.30
	;; Response received from [192.42.175.30] 644 octets ;; HEADER SECTION ;; id = 4601 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 6 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; mg101.cc. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (6 records) mg101.cc. 172800 IN NS veda.ns.cloudflare.com. mg101.cc. 172800 IN NS fattouche.ns.cloudflare.com. RQGAP5UF6Q1NGVCKFNO8RANVDN5ILRIN.cc. 86400 IN NSEC3 ( 1 1 0 - rqgtprsave3h26d99nps8lr2hvrnisas NS SOA RRSIG DNSKEY NSEC3PARAM ) RQGAP5UF6Q1NGVCKFNO8RANVDN5ILRIN.cc. 86400 IN RRSIG ( NSEC3 8 2 86400 20251112022100 20251105022100 9645 cc. eu8Px620nMsZTPJlXgUzSofMWNE8XkUgZzn4Bm8jTqW7spTfpeMkS8WYNtoR1UWhDLQSlw6OclYB CBgoxmubwFMRfsSMxaCApc3H7fGDbBnIJdVFHYpFQduKlg1zZrTiZg0NSy/Aen2rfg3v+BDXkoHo /0rftfqenYNsQQIRj45trMsAL9jXiu3c8WPpmD7MejniVjPpZs2qUWi3ZOjROg== ) O0GQSTIJ5TCKVDK7P9GPHVTQ0PTCH0OG.cc. 86400 IN NSEC3 ( 1 1 0 - o0hg5mdtc3l06v2igpft3flqa8bon0vt NS DS RRSIG ) O0GQSTIJ5TCKVDK7P9GPHVTQ0PTCH0OG.cc. 86400 IN RRSIG ( NSEC3 8 2 86400 20251112162025 20251105162025 9645 cc. qIbHGUJ+ewjr+C1Z4yXBS85inKCPZK2wdFBJ8P82KlGje/yLHRCgUwYDNRL5dTFHLmgbdj2WW+VH ZYFlZkDYVV1aLy4py1V4zW7kw6znxFMj8uzkBkizKevEbEnSfn7bw0fPRonso+XaTRpN7/+e6QWQ 201pjIN6qViP9p0mh7E1pZRCzfeZKokX/9cjuz2YhPEkRd5zwuvGONPu487yeQ== ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found child zone mg101.cc

mg101.cc

	Checking DS between cc and mg101.cc
	Query to ac3.nstld.com for mg101.cc/DS
	Received 845 bytes from 192.42.175.30
	;; Response received from [192.42.175.30] 845 octets ;; HEADER SECTION ;; id = 14328 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 6 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; mg101.cc. IN DS ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (6 records) cc. 86400 IN SOA ( ac1.nstld.com. info.verisign-grs.com. 1762445357 ;serial 1800 ;refresh 900 ;retry 604800 ;expire 86400 ;minimum ) cc. 86400 IN RRSIG ( SOA 8 1 86400 20251113135917 20251106135917 9645 cc. egIIhRBL53a07I9qxfJ7TpYmnYAVvCKau/5PhQs8r+ho7+/YGBR9EAHd19erA9Ym596EUYd+8miH KqszbGbFo2DLeI8Bn2P1Is8BigH9iQrCGXACkhQYFVzhia9lENr0LOqQDqwySUUpXTk0ALM4L7O/ pugJ3OrHHZ3UJwbZ/+Nwscd0S0O2mVc3cq8x+jf3XOzxrBWPZFa2ZVebNYM5aA== ) RQGAP5UF6Q1NGVCKFNO8RANVDN5ILRIN.cc. 86400 IN NSEC3 ( 1 1 0 - rqgtprsave3h26d99nps8lr2hvrnisas NS SOA RRSIG DNSKEY NSEC3PARAM ) RQGAP5UF6Q1NGVCKFNO8RANVDN5ILRIN.cc. 86400 IN RRSIG ( NSEC3 8 2 86400 20251112022100 20251105022100 9645 cc. eu8Px620nMsZTPJlXgUzSofMWNE8XkUgZzn4Bm8jTqW7spTfpeMkS8WYNtoR1UWhDLQSlw6OclYB CBgoxmubwFMRfsSMxaCApc3H7fGDbBnIJdVFHYpFQduKlg1zZrTiZg0NSy/Aen2rfg3v+BDXkoHo /0rftfqenYNsQQIRj45trMsAL9jXiu3c8WPpmD7MejniVjPpZs2qUWi3ZOjROg== ) O0GQSTIJ5TCKVDK7P9GPHVTQ0PTCH0OG.cc. 86400 IN NSEC3 ( 1 1 0 - o0hg5mdtc3l06v2igpft3flqa8bon0vt NS DS RRSIG ) O0GQSTIJ5TCKVDK7P9GPHVTQ0PTCH0OG.cc. 86400 IN RRSIG ( NSEC3 8 2 86400 20251112162025 20251105162025 9645 cc. qIbHGUJ+ewjr+C1Z4yXBS85inKCPZK2wdFBJ8P82KlGje/yLHRCgUwYDNRL5dTFHLmgbdj2WW+VH ZYFlZkDYVV1aLy4py1V4zW7kw6znxFMj8uzkBkizKevEbEnSfn7bw0fPRonso+XaTRpN7/+e6QWQ 201pjIN6qViP9p0mh7E1pZRCzfeZKokX/9cjuz2YhPEkRd5zwuvGONPu487yeQ== ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	No DS records found for mg101.cc in the cc zone
	Query to veda.ns.cloudflare.com for mg101.cc/DNSKEY
	Received 104 bytes from 108.162.194.147
	;; Response received from [108.162.194.147] 104 octets ;; HEADER SECTION ;; id = 24153 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 1 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; mg101.cc. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (1 record) mg101.cc. 1800 IN SOA ( fattouche.ns.cloudflare.com. dns.cloudflare.com. 2385880335 ;serial 10000 ;refresh 2400 ;retry 604800 ;expire 1800 ;minimum ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	No DNSKEY records found
	Query to veda.ns.cloudflare.com for mg101.cc/A
	Received 69 bytes from 162.159.38.147
	;; Response received from [162.159.38.147] 69 octets ;; HEADER SECTION ;; id = 55811 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; mg101.cc. IN A ;; ANSWER SECTION (2 records) mg101.cc. 300 IN A 172.67.192.158 mg101.cc. 300 IN A 104.21.11.203 ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	veda.ns.cloudflare.com is authoritative for mg101.cc
	Query to fattouche.ns.cloudflare.com for mg101.cc/SOA
	Received 104 bytes from 172.64.35.48
	;; Response received from [172.64.35.48] 104 octets ;; HEADER SECTION ;; id = 13161 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 1 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; mg101.cc. IN SOA ;; ANSWER SECTION (1 record) mg101.cc. 1800 IN SOA ( fattouche.ns.cloudflare.com. dns.cloudflare.com. 2385880335 ;serial 10000 ;refresh 2400 ;retry 604800 ;expire 1800 ;minimum ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Query to veda.ns.cloudflare.com for mg101.cc/A
	Received 69 bytes from 172.64.34.147
	;; Response received from [172.64.34.147] 69 octets ;; HEADER SECTION ;; id = 9785 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; mg101.cc. IN A ;; ANSWER SECTION (2 records) mg101.cc. 300 IN A 104.21.11.203 mg101.cc. 300 IN A 172.67.192.158 ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	mg101.cc A RR has value 104.21.11.203
	mg101.cc A RR has value 172.67.192.158
	No RRSIGs found

mg101.cc

	Query to fattouche.ns.cloudflare.com for mg101.cc/A
	Received 69 bytes from 108.162.195.48
	;; Response received from [108.162.195.48] 69 octets ;; HEADER SECTION ;; id = 12078 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; mg101.cc. IN A ;; ANSWER SECTION (2 records) mg101.cc. 300 IN A 104.21.11.203 mg101.cc. 300 IN A 172.67.192.158 ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	fattouche.ns.cloudflare.com is authoritative for mg101.cc
	Query to fattouche.ns.cloudflare.com for mg101.cc/A
	Received 69 bytes from 172.64.35.48
	;; Response received from [172.64.35.48] 69 octets ;; HEADER SECTION ;; id = 56697 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; mg101.cc. IN A ;; ANSWER SECTION (2 records) mg101.cc. 300 IN A 104.21.11.203 mg101.cc. 300 IN A 172.67.192.158 ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	mg101.cc A RR has value 104.21.11.203
	mg101.cc A RR has value 172.67.192.158
	No RRSIGs found

Move your mouse over any or symbols for remediation hints.

Want a second opinion? Test mg101.cc at dnsviz.net.

DNSSEC Debugger

↓ Advanced options ↑ Advanced options

Trust Anchor:
Name Servers: