DNSSEC Debugger - tonup.us

Domain Name:

Time: 2024-11-26 00:45:04 UTC

Analyzing DNSSEC problems for tonup.us

DS=20326/SHA-256 is now in the chain-of-trust

	Checking DS between Trust Anchor and .
	`. IN DS ( 20326 8 2 e06d44b80b8f1d39a95c0b0d7c65d08458e880409bbc683457104237c7f8ec8d )`
	Query to f.root-servers.net for ./DNSKEY
	Received 864 bytes from 192.5.5.241
	;; Response received from [192.5.5.241] 864 octets ;; HEADER SECTION ;; id = 42955 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 3 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1472, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; . IN DNSKEY ;; ANSWER SECTION (3 records) . 172800 IN DNSKEY ( 256 3 8 AwEAAc0SunbHdS0KFEyZbYII/+tzsrNzIwurKxmJA+0fhAYlTPA/5LrMGkGEqvvufzM0w/CaVtdm 5eWkZYQcsoSKT5bycx0C4jxnLEb3ZiZUQSqu1rWcKGF1fj/GyDWLkOu7a5h3el+gPmglj/4l4V31 ugNYfqYq84vCB+3D6Sodrd+85KyonnzWJ8cS7aZ57x0d0sGqsAKA+6tRnIXjVNVe7Ro5xJuz8IR7 rOxdzfuRLriN+Z00EL3U5E7s9SISU/hDh7Q7N70W1mLMc1o2+tCRGjEWrw4wmCWMzc1kegbLES/d UOWFvPjJz0+AEeWDhd2GqtXk02BzAhdfeIAEIv68FTs= ) ; keytag 61050 . 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; keytag 20326 . 172800 IN RRSIG ( DNSKEY 8 0 172800 20241211000000 20241120000000 20326 . rHkeh+xkmliumsXauoWZKkik68pYa7SRMItqPyBibSnyK2FIhPPWgR0oDKiS+6RR74/Eu1q/L1NG t3phSSuUF9Y1XV1gbdlv3CwTd6CnOFyYZr1hG6YP3oNcKCZsVZG9+nEC71LywlG2ZVzl+6mJNOQm P4f6RGqXq97vwFMy1S8pCmDMcVX57Y5Kdp9BfqvP//YgZ4rtqkif8H1ENRsEtQVINRWpWftq1jdc Z/N7wyLlkeNa17VS+/2WNMsaNusX+TmCdTJG1Xd2LRRxfK5dORku9f0Pq6rhXUkKY7coGF8wI4EV mW37lBAsPdnI50x9UmGvlx6mOdSnVrxseLA5+A== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 2 DNSKEY records for .
	`. 172800 IN DNSKEY ( 256 3 8 AwEAAc0SunbHdS0KFEyZbYII/+tzsrNzIwurKxmJA+0fhAYlTPA/5LrMGkGEqvvufzM0w/CaVtdm 5eWkZYQcsoSKT5bycx0C4jxnLEb3ZiZUQSqu1rWcKGF1fj/GyDWLkOu7a5h3el+gPmglj/4l4V31 ugNYfqYq84vCB+3D6Sodrd+85KyonnzWJ8cS7aZ57x0d0sGqsAKA+6tRnIXjVNVe7Ro5xJuz8IR7 rOxdzfuRLriN+Z00EL3U5E7s9SISU/hDh7Q7N70W1mLMc1o2+tCRGjEWrw4wmCWMzc1kegbLES/d UOWFvPjJz0+AEeWDhd2GqtXk02BzAhdfeIAEIv68FTs= ) ; keytag 61050`
	`. 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; keytag 20326`
	DNSKEY=20326/SEP is now in the chain-of-trust
	DS=20326/SHA-256 verifies DNSKEY=20326/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`. 172800 IN RRSIG ( DNSKEY 8 0 172800 20241211000000 20241120000000 20326 . rHkeh+xkmliumsXauoWZKkik68pYa7SRMItqPyBibSnyK2FIhPPWgR0oDKiS+6RR74/Eu1q/L1NG t3phSSuUF9Y1XV1gbdlv3CwTd6CnOFyYZr1hG6YP3oNcKCZsVZG9+nEC71LywlG2ZVzl+6mJNOQm P4f6RGqXq97vwFMy1S8pCmDMcVX57Y5Kdp9BfqvP//YgZ4rtqkif8H1ENRsEtQVINRWpWftq1jdc Z/N7wyLlkeNa17VS+/2WNMsaNusX+TmCdTJG1Xd2LRRxfK5dORku9f0Pq6rhXUkKY7coGF8wI4EV mW37lBAsPdnI50x9UmGvlx6mOdSnVrxseLA5+A== )`
	RRSIG=20326 and DNSKEY=20326/SEP verifies the DNSKEY RRset
	DNSKEY=61050 is now in the chain-of-trust
	Query to k.root-servers.net for tonup.us/A
	Received 858 bytes from 193.0.14.129
	;; Response received from [193.0.14.129] 858 octets ;; HEADER SECTION ;; id = 46804 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 10 arcount = 17 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; tonup.us. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (10 records) us. 172800 IN NS b.cctld.us. us. 172800 IN NS f.cctld.us. us. 172800 IN NS k.cctld.us. us. 172800 IN NS m.cctld.us. us. 172800 IN NS n.cctld.us. us. 172800 IN NS w.cctld.us. us. 172800 IN NS x.cctld.us. us. 172800 IN NS y.cctld.us. us. 86400 IN DS ( 59017 8 2 7daf469d42b5d8e5537fd4dd4b6057710e9a61f72c32eb7fb6526f52277ec2b0 ) us. 86400 IN RRSIG ( DS 8 1 86400 20241208220000 20241125210000 61050 . kbRAVDbA0ah/ngJkz9BO0zyXEa66vMCXxC1vtTpI2nIzlrLJpaNYh/hUYhDPqIReaAgIo9LaZl1q dgOMmHLDiNz2h4T8BlCdMH+OKeAzrpLFBomGgTn7HTi8aRGe7ZGROhOoh7F5ZNDrwAnUbqIM++09 1WOLS33H3wusRmmht4cM8hzcrvNr2v6Qu8PSoNW5pf3Fu8JZGpeHw/hgQLU+0kfA5+/Xq0UmPbSq tzAx+QVY1PzFqMSzrViHU5uZU1RwaLteBgtyuXpsiAGo0ako4O+foBVXJ1gjQ9jK1udGfCbNdw99 p5ymgj6Ae/JHfahogomEj/x+rephSvLI9osNkA== ) ;; ADDITIONAL SECTION (17 records) b.cctld.us. 172800 IN A 156.154.125.70 f.cctld.us. 172800 IN A 209.173.58.70 k.cctld.us. 172800 IN A 156.154.128.70 m.cctld.us. 172800 IN A 204.74.105.1 n.cctld.us. 172800 IN A 204.74.107.1 w.cctld.us. 172800 IN A 37.209.192.15 x.cctld.us. 172800 IN A 37.209.194.15 y.cctld.us. 172800 IN A 37.209.196.15 b.cctld.us. 172800 IN AAAA 2001:502:ad09::29 f.cctld.us. 172800 IN AAAA 2001:500:3682::11 k.cctld.us. 172800 IN AAAA 2001:503:e239::3:1 m.cctld.us. 172800 IN AAAA 2610:a1:3180::53 n.cctld.us. 172800 IN AAAA 2610:a1:3280::53 w.cctld.us. 172800 IN AAAA 2001:dcd:1::15 x.cctld.us. 172800 IN AAAA 2001:dcd:2::15 y.cctld.us. 172800 IN AAAA 2001:dcd:3::15 ;; { "EDNS-VERSION": 0 }
	Query to a.root-servers.net for us/DNSKEY
	Received 852 bytes from 198.41.0.4
	;; Response received from [198.41.0.4] 852 octets ;; HEADER SECTION ;; id = 56319 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 10 arcount = 17 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; us. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (10 records) us. 172800 IN NS m.cctld.us. us. 172800 IN NS k.cctld.us. us. 172800 IN NS b.cctld.us. us. 172800 IN NS x.cctld.us. us. 172800 IN NS n.cctld.us. us. 172800 IN NS f.cctld.us. us. 172800 IN NS w.cctld.us. us. 172800 IN NS y.cctld.us. us. 86400 IN DS ( 59017 8 2 7daf469d42b5d8e5537fd4dd4b6057710e9a61f72c32eb7fb6526f52277ec2b0 ) us. 86400 IN RRSIG ( DS 8 1 86400 20241208220000 20241125210000 61050 . kbRAVDbA0ah/ngJkz9BO0zyXEa66vMCXxC1vtTpI2nIzlrLJpaNYh/hUYhDPqIReaAgIo9LaZl1q dgOMmHLDiNz2h4T8BlCdMH+OKeAzrpLFBomGgTn7HTi8aRGe7ZGROhOoh7F5ZNDrwAnUbqIM++09 1WOLS33H3wusRmmht4cM8hzcrvNr2v6Qu8PSoNW5pf3Fu8JZGpeHw/hgQLU+0kfA5+/Xq0UmPbSq tzAx+QVY1PzFqMSzrViHU5uZU1RwaLteBgtyuXpsiAGo0ako4O+foBVXJ1gjQ9jK1udGfCbNdw99 p5ymgj6Ae/JHfahogomEj/x+rephSvLI9osNkA== ) ;; ADDITIONAL SECTION (17 records) m.cctld.us. 172800 IN A 204.74.105.1 m.cctld.us. 172800 IN AAAA 2610:a1:3180::53 k.cctld.us. 172800 IN A 156.154.128.70 k.cctld.us. 172800 IN AAAA 2001:503:e239::3:1 b.cctld.us. 172800 IN A 156.154.125.70 b.cctld.us. 172800 IN AAAA 2001:502:ad09::29 x.cctld.us. 172800 IN A 37.209.194.15 x.cctld.us. 172800 IN AAAA 2001:dcd:2::15 n.cctld.us. 172800 IN A 204.74.107.1 n.cctld.us. 172800 IN AAAA 2610:a1:3280::53 f.cctld.us. 172800 IN A 209.173.58.70 f.cctld.us. 172800 IN AAAA 2001:500:3682::11 w.cctld.us. 172800 IN A 37.209.192.15 w.cctld.us. 172800 IN AAAA 2001:dcd:1::15 y.cctld.us. 172800 IN A 37.209.196.15 y.cctld.us. 172800 IN AAAA 2001:dcd:3::15 ;; { "EDNS-VERSION": 0 }
	Found child zone us

	Checking DS between . and us
	Query to g.root-servers.net for us/DS
	Received 366 bytes from 192.112.36.4
	;; Response received from [192.112.36.4] 366 octets ;; HEADER SECTION ;; id = 1193 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; us. IN DS ;; ANSWER SECTION (2 records) us. 86400 IN DS ( 59017 8 2 7daf469d42b5d8e5537fd4dd4b6057710e9a61f72c32eb7fb6526f52277ec2b0 ) us. 86400 IN RRSIG ( DS 8 1 86400 20241208220000 20241125210000 61050 . kbRAVDbA0ah/ngJkz9BO0zyXEa66vMCXxC1vtTpI2nIzlrLJpaNYh/hUYhDPqIReaAgIo9LaZl1q dgOMmHLDiNz2h4T8BlCdMH+OKeAzrpLFBomGgTn7HTi8aRGe7ZGROhOoh7F5ZNDrwAnUbqIM++09 1WOLS33H3wusRmmht4cM8hzcrvNr2v6Qu8PSoNW5pf3Fu8JZGpeHw/hgQLU+0kfA5+/Xq0UmPbSq tzAx+QVY1PzFqMSzrViHU5uZU1RwaLteBgtyuXpsiAGo0ako4O+foBVXJ1gjQ9jK1udGfCbNdw99 p5ymgj6Ae/JHfahogomEj/x+rephSvLI9osNkA== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 1 DS records for us in the . zone
	DS=59017/SHA-256 has algorithm RSASHA256
	Found 1 RRSIGs over DS RRset
	`us. 86400 IN RRSIG ( DS 8 1 86400 20241208220000 20241125210000 61050 . kbRAVDbA0ah/ngJkz9BO0zyXEa66vMCXxC1vtTpI2nIzlrLJpaNYh/hUYhDPqIReaAgIo9LaZl1q dgOMmHLDiNz2h4T8BlCdMH+OKeAzrpLFBomGgTn7HTi8aRGe7ZGROhOoh7F5ZNDrwAnUbqIM++09 1WOLS33H3wusRmmht4cM8hzcrvNr2v6Qu8PSoNW5pf3Fu8JZGpeHw/hgQLU+0kfA5+/Xq0UmPbSq tzAx+QVY1PzFqMSzrViHU5uZU1RwaLteBgtyuXpsiAGo0ako4O+foBVXJ1gjQ9jK1udGfCbNdw99 p5ymgj6Ae/JHfahogomEj/x+rephSvLI9osNkA== )`
	RRSIG=61050 and DNSKEY=61050 verifies the DS RRset
	DS=59017/SHA-256 is now in the chain-of-trust
	`us. 86400 IN DS ( 59017 8 2 7daf469d42b5d8e5537fd4dd4b6057710e9a61f72c32eb7fb6526f52277ec2b0 )`
	Query to m.cctld.us for us/DNSKEY
	Received 777 bytes from 204.74.105.1
	;; Response received from [204.74.105.1] 777 octets ;; HEADER SECTION ;; id = 49294 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 3 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; us. IN DNSKEY ;; ANSWER SECTION (3 records) us. 7200 IN DNSKEY ( 256 3 8 AwEAAatbrQTiZd0FdSVbnkRFiU5jf9ACOPc4M0CK+G+Gla4gH3ClPunwqBJhvRtMkKdhGE93lMuz jNkGakBrkFvzwHtIw9pWLxum2Idysf+JxdhfSXNNYEzKcP0lCIjWf+iY2rtXoltVLxgT2skvDgmb wq+a3Cb/7CAB/SmFRCl8tQJ4YpJlkHiHPbWXljjiPWsj3/52hv45GHKQPi4vRzPeaw0= ) ; keytag 54159 us. 7200 IN DNSKEY ( 257 3 8 AwEAAabgSGRWwpR24imYq+0K0s7OscAlXB1k7h6Tm3pFaSOKbbE5lSNQ6Cm2nIQbkQAJOyvq3P8a enAWH78rychEvtHBSqh0f9onF1Bnhsmd7YBfvzUMD56LS7Z8nIcbl48aq1XLL1WURV9TcHr6hi+d MFL2Sa//3Zoo7O0yMuaaV8J2g9bVu4deQK16au7GORazI6469rTUfXhWPFkJa6BvFi/DMcJNy+6J kbh45WuY0bxj/M5LBR+sCe6zH3+vpu205OtSQT4E4TXvUVSCOIlNn3lIw43twJO73exKmhphtjQ+ AhRwZtrgCqDXd1Brt/EEdzdmyyd/eE6pgxJK6bib8Hk= ) ; keytag 59017 us. 7200 IN RRSIG ( DNSKEY 8 1 7200 20241207012448 20241123005746 59017 us. bja+xhgXEpUfpI+LAaRx7ykkG8LzIuSFABFe0VO2mOejNBztJf1Wfw2EqTY8xJu533jggYCH5wPi zrlNh3Eb7cP8ZtahJkU1/ghCQo8nFJ1in5n0nHpX7IIG7ZmlQElUp8w8NGiBFkxEQQqPO5U8DBkM K53RhXbgriaQ8vsrmP8Ohv22v/dUneJSmNJCHK3ehX83+NJth96EIz/SQpo5MQ3qHQYuvpdSl1Mc vtyhW/qRW0Wm9ZxXRt50YH1BtmT4pL2TjApyig5swzD4m4Qj8TYX4ctH8+5b+aGArLVAQpQhgv8Z Vf3l4jfw8gZudU+74QiLttqR8kyFOv5p1VJj3Q== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 2 DNSKEY records for us
	`us. 7200 IN DNSKEY ( 256 3 8 AwEAAatbrQTiZd0FdSVbnkRFiU5jf9ACOPc4M0CK+G+Gla4gH3ClPunwqBJhvRtMkKdhGE93lMuz jNkGakBrkFvzwHtIw9pWLxum2Idysf+JxdhfSXNNYEzKcP0lCIjWf+iY2rtXoltVLxgT2skvDgmb wq+a3Cb/7CAB/SmFRCl8tQJ4YpJlkHiHPbWXljjiPWsj3/52hv45GHKQPi4vRzPeaw0= ) ; keytag 54159`
	`us. 7200 IN DNSKEY ( 257 3 8 AwEAAabgSGRWwpR24imYq+0K0s7OscAlXB1k7h6Tm3pFaSOKbbE5lSNQ6Cm2nIQbkQAJOyvq3P8a enAWH78rychEvtHBSqh0f9onF1Bnhsmd7YBfvzUMD56LS7Z8nIcbl48aq1XLL1WURV9TcHr6hi+d MFL2Sa//3Zoo7O0yMuaaV8J2g9bVu4deQK16au7GORazI6469rTUfXhWPFkJa6BvFi/DMcJNy+6J kbh45WuY0bxj/M5LBR+sCe6zH3+vpu205OtSQT4E4TXvUVSCOIlNn3lIw43twJO73exKmhphtjQ+ AhRwZtrgCqDXd1Brt/EEdzdmyyd/eE6pgxJK6bib8Hk= ) ; keytag 59017`
	DNSKEY=59017/SEP is now in the chain-of-trust
	DS=59017/SHA-256 verifies DNSKEY=59017/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`us. 7200 IN RRSIG ( DNSKEY 8 1 7200 20241207012448 20241123005746 59017 us. bja+xhgXEpUfpI+LAaRx7ykkG8LzIuSFABFe0VO2mOejNBztJf1Wfw2EqTY8xJu533jggYCH5wPi zrlNh3Eb7cP8ZtahJkU1/ghCQo8nFJ1in5n0nHpX7IIG7ZmlQElUp8w8NGiBFkxEQQqPO5U8DBkM K53RhXbgriaQ8vsrmP8Ohv22v/dUneJSmNJCHK3ehX83+NJth96EIz/SQpo5MQ3qHQYuvpdSl1Mc vtyhW/qRW0Wm9ZxXRt50YH1BtmT4pL2TjApyig5swzD4m4Qj8TYX4ctH8+5b+aGArLVAQpQhgv8Z Vf3l4jfw8gZudU+74QiLttqR8kyFOv5p1VJj3Q== )`
	RRSIG=59017 and DNSKEY=59017/SEP verifies the DNSKEY RRset
	DNSKEY=54159 is now in the chain-of-trust
	Query to m.cctld.us for tonup.us/A
	Received 675 bytes from 204.74.105.1
	;; Response received from [204.74.105.1] 675 octets ;; HEADER SECTION ;; id = 22824 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 6 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; tonup.us. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (6 records) tonup.us. 3600 IN NS heidi.ns.cloudflare.com. tonup.us. 3600 IN NS vern.ns.cloudflare.com. r0lo40lj4j76eriqpo80i3insgcmv5ns.us. 900 IN NSEC3 ( 1 1 0 - r0men30o2a9cjn3tjp2meeou3fvpig9u NS SOA RRSIG DNSKEY NSEC3PARAM CDS CDNSKEY TYPE65534 ) r0lo40lj4j76eriqpo80i3insgcmv5ns.us. 900 IN RRSIG ( NSEC3 8 2 900 20241207200231 20241123194243 54159 us. NYcvvNCZqVj5vskDa2Rr++kGlxWz3MlXhoBWo6T3NeWchVsl21bfCk7cGfDf/ps5ZcJWIYq9omWc dVfsOv7N8tMp+E/YMfdNY+h4gbeXFqu19igcNtHt4xsOMvhsm2oS8XWNA6oSek+OwE24+A8L/hIw eCR3srRiBycuyzkv17HCLt5ut9ETZphCqPyV80azkooopQf2FOzO9nh+/gPm1Q== ) 3n5slkave42jbccfvgg18irmaf5rj6r8.us. 900 IN NSEC3 ( 1 1 0 - 3n7cunorkmaabt1rkjqlmu9ma8tvac70 NS DS RRSIG ) 3n5slkave42jbccfvgg18irmaf5rj6r8.us. 900 IN RRSIG ( NSEC3 8 2 900 20241208080121 20241124075343 54159 us. Sm7VVpiqWYLs0n+vGKUZ06NOPS9IXek2HKELJnmfdM2lzqi/3vnjboYECQGiXKUbwGahSTsijak1 QJz4D/iiojSAeCmhC4AKkDHnNTVTKr6ZOkZ50ZcP8k8te83lSRnKgl2wFOC5EtU9rfYnu/yGYBZc YPfRCQ6bnyH/tBBxnhZPkFIwNbKpi5tAYITg7xIYO2CupzN336pfQhQ4QCCXdw== ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Query to k.cctld.us for tonup.us/DNSKEY
	Received 675 bytes from 156.154.128.70
	;; Response received from [156.154.128.70] 675 octets ;; HEADER SECTION ;; id = 27952 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 6 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; tonup.us. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (6 records) tonup.us. 3600 IN NS heidi.ns.cloudflare.com. tonup.us. 3600 IN NS vern.ns.cloudflare.com. r0lo40lj4j76eriqpo80i3insgcmv5ns.us. 900 IN NSEC3 ( 1 1 0 - r0men30o2a9cjn3tjp2meeou3fvpig9u NS SOA RRSIG DNSKEY NSEC3PARAM CDS CDNSKEY TYPE65534 ) r0lo40lj4j76eriqpo80i3insgcmv5ns.us. 900 IN RRSIG ( NSEC3 8 2 900 20241207200231 20241123194243 54159 us. NYcvvNCZqVj5vskDa2Rr++kGlxWz3MlXhoBWo6T3NeWchVsl21bfCk7cGfDf/ps5ZcJWIYq9omWc dVfsOv7N8tMp+E/YMfdNY+h4gbeXFqu19igcNtHt4xsOMvhsm2oS8XWNA6oSek+OwE24+A8L/hIw eCR3srRiBycuyzkv17HCLt5ut9ETZphCqPyV80azkooopQf2FOzO9nh+/gPm1Q== ) 3n5slkave42jbccfvgg18irmaf5rj6r8.us. 900 IN NSEC3 ( 1 1 0 - 3n7cunorkmaabt1rkjqlmu9ma8tvac70 NS DS RRSIG ) 3n5slkave42jbccfvgg18irmaf5rj6r8.us. 900 IN RRSIG ( NSEC3 8 2 900 20241208080121 20241124075343 54159 us. Sm7VVpiqWYLs0n+vGKUZ06NOPS9IXek2HKELJnmfdM2lzqi/3vnjboYECQGiXKUbwGahSTsijak1 QJz4D/iiojSAeCmhC4AKkDHnNTVTKr6ZOkZ50ZcP8k8te83lSRnKgl2wFOC5EtU9rfYnu/yGYBZc YPfRCQ6bnyH/tBBxnhZPkFIwNbKpi5tAYITg7xIYO2CupzN336pfQhQ4QCCXdw== ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found child zone tonup.us

tonup.us

	Checking DS between us and tonup.us
	Query to k.cctld.us for tonup.us/DS
	Received 878 bytes from 156.154.128.70
	;; Response received from [156.154.128.70] 878 octets ;; HEADER SECTION ;; id = 2094 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 6 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; tonup.us. IN DS ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (6 records) r0lo40lj4j76eriqpo80i3insgcmv5ns.us. 900 IN NSEC3 ( 1 1 0 - r0men30o2a9cjn3tjp2meeou3fvpig9u NS SOA RRSIG DNSKEY NSEC3PARAM CDS CDNSKEY TYPE65534 ) r0lo40lj4j76eriqpo80i3insgcmv5ns.us. 900 IN RRSIG ( NSEC3 8 2 900 20241207200231 20241123194243 54159 us. NYcvvNCZqVj5vskDa2Rr++kGlxWz3MlXhoBWo6T3NeWchVsl21bfCk7cGfDf/ps5ZcJWIYq9omWc dVfsOv7N8tMp+E/YMfdNY+h4gbeXFqu19igcNtHt4xsOMvhsm2oS8XWNA6oSek+OwE24+A8L/hIw eCR3srRiBycuyzkv17HCLt5ut9ETZphCqPyV80azkooopQf2FOzO9nh+/gPm1Q== ) us. 900 IN SOA ( a.cctld.us. admin.tldns.godaddy. 1732581021 ;serial 1800 ;refresh 300 ;retry 604800 ;expire 1800 ;minimum ) us. 900 IN RRSIG ( SOA 8 1 900 20241210003219 20241125233219 54159 us. Q3iUhe2kK4i/p/C7vH19baQU6YIRKwM9Y1WDON9JBLFB3CqsJQ5FTKcYaB9l+H9Klds0Vvg5SzGU pz+nQM8AdOqrI9oaNPhy7eLMyRIQjkmuKjSpfPhrHFKoieAJCeoPIxTbKwIFHz/lA2HwfFDIs3YT o6NTQdWQDLqguDikCFily/LSe7K22aN/tywCNFcEZBzBchwQOJyUCTpULY2GdQ== ) 3n5slkave42jbccfvgg18irmaf5rj6r8.us. 900 IN NSEC3 ( 1 1 0 - 3n7cunorkmaabt1rkjqlmu9ma8tvac70 NS DS RRSIG ) 3n5slkave42jbccfvgg18irmaf5rj6r8.us. 900 IN RRSIG ( NSEC3 8 2 900 20241208080121 20241124075343 54159 us. Sm7VVpiqWYLs0n+vGKUZ06NOPS9IXek2HKELJnmfdM2lzqi/3vnjboYECQGiXKUbwGahSTsijak1 QJz4D/iiojSAeCmhC4AKkDHnNTVTKr6ZOkZ50ZcP8k8te83lSRnKgl2wFOC5EtU9rfYnu/yGYBZc YPfRCQ6bnyH/tBBxnhZPkFIwNbKpi5tAYITg7xIYO2CupzN336pfQhQ4QCCXdw== ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	No DS records found for tonup.us in the us zone
	Query to heidi.ns.cloudflare.com for tonup.us/DNSKEY
	Received 100 bytes from 162.159.38.236
	;; Response received from [162.159.38.236] 100 octets ;; HEADER SECTION ;; id = 28186 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 1 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; tonup.us. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (1 record) tonup.us. 1800 IN SOA ( heidi.ns.cloudflare.com. dns.cloudflare.com. 2354820127 ;serial 10000 ;refresh 2400 ;retry 604800 ;expire 1800 ;minimum ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	No DNSKEY records found
	Query to heidi.ns.cloudflare.com for tonup.us/A
	Received 69 bytes from 172.64.34.236
	;; Response received from [172.64.34.236] 69 octets ;; HEADER SECTION ;; id = 61407 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; tonup.us. IN A ;; ANSWER SECTION (2 records) tonup.us. 300 IN A 172.67.214.216 tonup.us. 300 IN A 104.21.16.162 ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	heidi.ns.cloudflare.com is authoritative for tonup.us
	Query to vern.ns.cloudflare.com for tonup.us/SOA
	Received 100 bytes from 108.162.193.243
	;; Response received from [108.162.193.243] 100 octets ;; HEADER SECTION ;; id = 49608 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 1 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; tonup.us. IN SOA ;; ANSWER SECTION (1 record) tonup.us. 1800 IN SOA ( heidi.ns.cloudflare.com. dns.cloudflare.com. 2354820127 ;serial 10000 ;refresh 2400 ;retry 604800 ;expire 1800 ;minimum ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Query to heidi.ns.cloudflare.com for tonup.us/A
	Received 69 bytes from 162.159.38.236
	;; Response received from [162.159.38.236] 69 octets ;; HEADER SECTION ;; id = 15740 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; tonup.us. IN A ;; ANSWER SECTION (2 records) tonup.us. 300 IN A 172.67.214.216 tonup.us. 300 IN A 104.21.16.162 ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	tonup.us A RR has value 172.67.214.216
	tonup.us A RR has value 104.21.16.162
	No RRSIGs found

tonup.us

	Query to vern.ns.cloudflare.com for tonup.us/A
	Received 69 bytes from 173.245.59.243
	;; Response received from [173.245.59.243] 69 octets ;; HEADER SECTION ;; id = 51961 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; tonup.us. IN A ;; ANSWER SECTION (2 records) tonup.us. 300 IN A 104.21.16.162 tonup.us. 300 IN A 172.67.214.216 ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	vern.ns.cloudflare.com is authoritative for tonup.us
	Query to vern.ns.cloudflare.com for tonup.us/A
	Received 69 bytes from 108.162.193.243
	;; Response received from [108.162.193.243] 69 octets ;; HEADER SECTION ;; id = 1484 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; tonup.us. IN A ;; ANSWER SECTION (2 records) tonup.us. 300 IN A 104.21.16.162 tonup.us. 300 IN A 172.67.214.216 ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	tonup.us A RR has value 104.21.16.162
	tonup.us A RR has value 172.67.214.216
	No RRSIGs found

Move your mouse over any or symbols for remediation hints.

Want a second opinion? Test tonup.us at dnsviz.net.

DNSSEC Debugger

↓ Advanced options ↑ Advanced options

Trust Anchor:
Name Servers: