DNSSEC Debugger - toysshoplondon.co.uk

Back to Verisign Labs Tools

Domain Name:

Detail: more(+) / less(-)

Time: 2026-06-01 14:24:16 UTC

Analyzing DNSSEC problems for toysshoplondon.co.uk

DS=20326/SHA-256 is now in the chain-of-trust

DS=38696/SHA-256 is now in the chain-of-trust

	Checking DS between Trust Anchor and .
	`. IN DS ( 20326 8 2 e06d44b80b8f1d39a95c0b0d7c65d08458e880409bbc683457104237c7f8ec8d )`
	`. IN DS ( 38696 8 2 683d2d0acb8c9b712a1948b27f741219298d0a450d612c483af444a4c0fb2b16 )`
	Query to h.root-servers.net for ./DNSKEY
	Received 1139 bytes from 198.97.190.53
	;; Response received from [198.97.190.53] 1139 octets ;; HEADER SECTION ;; id = 27536 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 4 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; . IN DNSKEY ;; ANSWER SECTION (4 records) . 172800 IN DNSKEY ( 256 3 8 AwEAAb5dDYffpgAJ8VUGLwQtWXPlQWsjIFJtCM00/XaKU+8ln+ofah3q2KxEIjvzQg+nqdxRj+8e mtPne1mtYcbFWP4Q9E+DniOJLK09R05FuzvGbrG7DDdRDUX/cedFdV7O8pFEAYpJqYNR9BCTIAV9 73DO2biauKSA31b7I2lK/woxoR1tf5cqJ4SMbJUviuHicAEoUi2ATswloZNWd5T5thmEFZnxFx7D 5UgKCY7oflS7+GU7dNJwEtmFnWYVETHN0kHXVz6aguouaAZp706YXNIoR/iTgQhmsR7XX+wL0Z8Q M2LxQIyU6vRZ06IyuJMGRMiwkSuGElbumyBt12JZbrU= ) ; keytag 54393 . 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; keytag 20326 . 172800 IN DNSKEY ( 257 3 8 AwEAAa96jeuknZlaeSrvyAJj6ZHv28hhOKkx3rLGXVaC6rXTsDc449/cidltpkyGwCJNnOAlFNKF 2jBosZBU5eeHspaQWOmOElZsjICMQMC3aeHbGiShvZsx4wMYSjH8e7Vrhbu6irwCzVBApESjbUdp WWmEnhathWu1jo+siFUiRAAxm9qyJNg/wOZqqzL/dL/q8PkcRU5oUKEpUge71M3ej2/7CPqpdVwu MoTvoB+ZOT4YeGyxMvHmbrxlFzGOHOijtzN+u1TQNatX2XBuzZNQ1K+s2CXkPIZo7s6JgZyvaBev YtxPvYLw4z9mR7K2vaF18UYH9Z9GNUUeayffKC73PYc= ) ; keytag 38696 . 172800 IN RRSIG ( DNSKEY 8 0 172800 20260621000000 20260531000000 20326 . OWezD4y5HWy51nYFWgFkziq2yogZ1vcMf27MEGECQB1YKMoeOuNn9f61X66sWBDQr2jjOzWxUFfz ms70WjqNBAJXt+TZGyKgtI11KtmvY5E+p59hxgymu1pEPPJkiQQyCdh5w483SoWyiJZdRlUTWn7T 8EJJyPbCDvS8qHPtIXSJFIpiX8UzWp9IceunFu9x/OZpWFCzMeFiWJJqazp0rSO3KOX/4xJXb4Zo GQB9e5lyjpaX5CSgWpQekmu9o+OQzuimPCkR9lGzsrADLQ+a2pUpYykLmm0jiTbRwlmB7JQeMD3u zTKL3rYGX8mXEVVSja0FbyViXTE+xtav+RICMA== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 3 DNSKEY records for .
	`. 172800 IN DNSKEY ( 256 3 8 AwEAAb5dDYffpgAJ8VUGLwQtWXPlQWsjIFJtCM00/XaKU+8ln+ofah3q2KxEIjvzQg+nqdxRj+8e mtPne1mtYcbFWP4Q9E+DniOJLK09R05FuzvGbrG7DDdRDUX/cedFdV7O8pFEAYpJqYNR9BCTIAV9 73DO2biauKSA31b7I2lK/woxoR1tf5cqJ4SMbJUviuHicAEoUi2ATswloZNWd5T5thmEFZnxFx7D 5UgKCY7oflS7+GU7dNJwEtmFnWYVETHN0kHXVz6aguouaAZp706YXNIoR/iTgQhmsR7XX+wL0Z8Q M2LxQIyU6vRZ06IyuJMGRMiwkSuGElbumyBt12JZbrU= ) ; keytag 54393`
	`. 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; keytag 20326`
	`. 172800 IN DNSKEY ( 257 3 8 AwEAAa96jeuknZlaeSrvyAJj6ZHv28hhOKkx3rLGXVaC6rXTsDc449/cidltpkyGwCJNnOAlFNKF 2jBosZBU5eeHspaQWOmOElZsjICMQMC3aeHbGiShvZsx4wMYSjH8e7Vrhbu6irwCzVBApESjbUdp WWmEnhathWu1jo+siFUiRAAxm9qyJNg/wOZqqzL/dL/q8PkcRU5oUKEpUge71M3ej2/7CPqpdVwu MoTvoB+ZOT4YeGyxMvHmbrxlFzGOHOijtzN+u1TQNatX2XBuzZNQ1K+s2CXkPIZo7s6JgZyvaBev YtxPvYLw4z9mR7K2vaF18UYH9Z9GNUUeayffKC73PYc= ) ; keytag 38696`
	DNSKEY=20326/SEP is now in the chain-of-trust
	DS=20326/SHA-256 verifies DNSKEY=20326/SEP
	DNSKEY=38696/SEP is now in the chain-of-trust
	DS=38696/SHA-256 verifies DNSKEY=38696/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`. 172800 IN RRSIG ( DNSKEY 8 0 172800 20260621000000 20260531000000 20326 . OWezD4y5HWy51nYFWgFkziq2yogZ1vcMf27MEGECQB1YKMoeOuNn9f61X66sWBDQr2jjOzWxUFfz ms70WjqNBAJXt+TZGyKgtI11KtmvY5E+p59hxgymu1pEPPJkiQQyCdh5w483SoWyiJZdRlUTWn7T 8EJJyPbCDvS8qHPtIXSJFIpiX8UzWp9IceunFu9x/OZpWFCzMeFiWJJqazp0rSO3KOX/4xJXb4Zo GQB9e5lyjpaX5CSgWpQekmu9o+OQzuimPCkR9lGzsrADLQ+a2pUpYykLmm0jiTbRwlmB7JQeMD3u zTKL3rYGX8mXEVVSja0FbyViXTE+xtav+RICMA== )`
	RRSIG=20326 and DNSKEY=20326/SEP verifies the DNSKEY RRset
	DNSKEY=54393 is now in the chain-of-trust
	Query to i.root-servers.net for toysshoplondon.co.uk/A
	Received 888 bytes from 192.36.148.17
	;; Response received from [192.36.148.17] 888 octets ;; HEADER SECTION ;; id = 10342 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 10 arcount = 17 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; toysshoplondon.co.uk. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (10 records) uk. 172800 IN NS dns4.nic.uk. uk. 172800 IN NS nsc.nic.uk. uk. 172800 IN NS dns2.nic.uk. uk. 172800 IN NS nsd.nic.uk. uk. 172800 IN NS nsa.nic.uk. uk. 172800 IN NS nsb.nic.uk. uk. 172800 IN NS dns1.nic.uk. uk. 172800 IN NS dns3.nic.uk. uk. 86400 IN DS ( 43876 8 2 a107ed2ac1bd14d924173bc7e827a1153582072394f9272ba37e2353bc659603 ) uk. 86400 IN RRSIG ( DS 8 1 86400 20260614050000 20260601040000 54393 . WV3a7bOBtUOC1jZXf3ZFbaNAMKJFnWl1zLMKTVeG9y9PzJOW7tcio5+MQD1N+yIT43HtH4WDo9Jf ZxHAGW3DxSWKdtxWJF4H4x2d2DdqE+2EgoxGMQj06c1h/hUDT7HQOEpawDuYFuxiw55h+fJoQsif emwMUcWAlHyTuOACxluZ4/XopqkXrhj6aTpKnsmIEVTKE4MblwRFdgem/zsJ5F9XO+0yyExrtBHv IwKyQtCi3eBqmq/QP/qowbud66S+EniKfsO4vi3NajlhvT2/s8d3PycNrAeXqGLgbDGxMMoJ58rl pS2EXSZtwdcIU30eraCv6EKr8+jl3a3mTx2qCQ== ) ;; ADDITIONAL SECTION (17 records) nsa.nic.uk. 172800 IN A 156.154.100.3 nsb.nic.uk. 172800 IN A 156.154.101.3 nsc.nic.uk. 172800 IN A 156.154.102.3 nsd.nic.uk. 172800 IN A 156.154.103.3 dns1.nic.uk. 172800 IN A 213.248.216.1 dns2.nic.uk. 172800 IN A 103.49.80.1 dns3.nic.uk. 172800 IN A 213.248.220.1 dns4.nic.uk. 172800 IN A 43.230.48.1 nsa.nic.uk. 172800 IN AAAA 2001:502:ad09::3 nsb.nic.uk. 172800 IN AAAA 2001:502:2eda::3 nsc.nic.uk. 172800 IN AAAA 2610:a1:1009::3 nsd.nic.uk. 172800 IN AAAA 2610:a1:1010::3 dns1.nic.uk. 172800 IN AAAA 2a01:618:400::1 dns2.nic.uk. 172800 IN AAAA 2401:fd80:400::1 dns3.nic.uk. 172800 IN AAAA 2a01:618:404::1 dns4.nic.uk. 172800 IN AAAA 2401:fd80:404::1 ;; { "EDNS-VERSION": 0 }
	Query to c.root-servers.net for uk/DNSKEY
	Received 872 bytes from 192.33.4.12
	;; Response received from [192.33.4.12] 872 octets ;; HEADER SECTION ;; id = 29834 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 10 arcount = 17 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; uk. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (10 records) uk. 172800 IN NS dns3.nic.uk. uk. 172800 IN NS nsb.nic.uk. uk. 172800 IN NS dns1.nic.uk. uk. 172800 IN NS dns4.nic.uk. uk. 172800 IN NS nsa.nic.uk. uk. 172800 IN NS nsd.nic.uk. uk. 172800 IN NS nsc.nic.uk. uk. 172800 IN NS dns2.nic.uk. uk. 86400 IN DS ( 43876 8 2 a107ed2ac1bd14d924173bc7e827a1153582072394f9272ba37e2353bc659603 ) uk. 86400 IN RRSIG ( DS 8 1 86400 20260614050000 20260601040000 54393 . WV3a7bOBtUOC1jZXf3ZFbaNAMKJFnWl1zLMKTVeG9y9PzJOW7tcio5+MQD1N+yIT43HtH4WDo9Jf ZxHAGW3DxSWKdtxWJF4H4x2d2DdqE+2EgoxGMQj06c1h/hUDT7HQOEpawDuYFuxiw55h+fJoQsif emwMUcWAlHyTuOACxluZ4/XopqkXrhj6aTpKnsmIEVTKE4MblwRFdgem/zsJ5F9XO+0yyExrtBHv IwKyQtCi3eBqmq/QP/qowbud66S+EniKfsO4vi3NajlhvT2/s8d3PycNrAeXqGLgbDGxMMoJ58rl pS2EXSZtwdcIU30eraCv6EKr8+jl3a3mTx2qCQ== ) ;; ADDITIONAL SECTION (17 records) dns4.nic.uk. 172800 IN A 43.230.48.1 dns3.nic.uk. 172800 IN A 213.248.220.1 dns2.nic.uk. 172800 IN A 103.49.80.1 dns1.nic.uk. 172800 IN A 213.248.216.1 nsd.nic.uk. 172800 IN A 156.154.103.3 nsc.nic.uk. 172800 IN A 156.154.102.3 nsb.nic.uk. 172800 IN A 156.154.101.3 nsa.nic.uk. 172800 IN A 156.154.100.3 dns4.nic.uk. 172800 IN AAAA 2401:fd80:404::1 dns3.nic.uk. 172800 IN AAAA 2a01:618:404::1 dns2.nic.uk. 172800 IN AAAA 2401:fd80:400::1 dns1.nic.uk. 172800 IN AAAA 2a01:618:400::1 nsd.nic.uk. 172800 IN AAAA 2610:a1:1010::3 nsc.nic.uk. 172800 IN AAAA 2610:a1:1009::3 nsb.nic.uk. 172800 IN AAAA 2001:502:2eda::3 nsa.nic.uk. 172800 IN AAAA 2001:502:ad09::3 ;; { "EDNS-VERSION": 0 }
	Found child zone uk

	Checking DS between . and uk
	Query to i.root-servers.net for uk/DS
	Received 366 bytes from 192.36.148.17
	;; Response received from [192.36.148.17] 366 octets ;; HEADER SECTION ;; id = 15072 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; uk. IN DS ;; ANSWER SECTION (2 records) uk. 86400 IN DS ( 43876 8 2 a107ed2ac1bd14d924173bc7e827a1153582072394f9272ba37e2353bc659603 ) uk. 86400 IN RRSIG ( DS 8 1 86400 20260614050000 20260601040000 54393 . WV3a7bOBtUOC1jZXf3ZFbaNAMKJFnWl1zLMKTVeG9y9PzJOW7tcio5+MQD1N+yIT43HtH4WDo9Jf ZxHAGW3DxSWKdtxWJF4H4x2d2DdqE+2EgoxGMQj06c1h/hUDT7HQOEpawDuYFuxiw55h+fJoQsif emwMUcWAlHyTuOACxluZ4/XopqkXrhj6aTpKnsmIEVTKE4MblwRFdgem/zsJ5F9XO+0yyExrtBHv IwKyQtCi3eBqmq/QP/qowbud66S+EniKfsO4vi3NajlhvT2/s8d3PycNrAeXqGLgbDGxMMoJ58rl pS2EXSZtwdcIU30eraCv6EKr8+jl3a3mTx2qCQ== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 1 DS records for uk in the . zone
	DS=43876/SHA-256 has algorithm RSASHA256
	Found 1 RRSIGs over DS RRset
	`uk. 86400 IN RRSIG ( DS 8 1 86400 20260614050000 20260601040000 54393 . WV3a7bOBtUOC1jZXf3ZFbaNAMKJFnWl1zLMKTVeG9y9PzJOW7tcio5+MQD1N+yIT43HtH4WDo9Jf ZxHAGW3DxSWKdtxWJF4H4x2d2DdqE+2EgoxGMQj06c1h/hUDT7HQOEpawDuYFuxiw55h+fJoQsif emwMUcWAlHyTuOACxluZ4/XopqkXrhj6aTpKnsmIEVTKE4MblwRFdgem/zsJ5F9XO+0yyExrtBHv IwKyQtCi3eBqmq/QP/qowbud66S+EniKfsO4vi3NajlhvT2/s8d3PycNrAeXqGLgbDGxMMoJ58rl pS2EXSZtwdcIU30eraCv6EKr8+jl3a3mTx2qCQ== )`
	RRSIG=54393 and DNSKEY=54393 verifies the DS RRset
	DS=43876/SHA-256 is now in the chain-of-trust
	`uk. 86400 IN DS ( 43876 8 2 a107ed2ac1bd14d924173bc7e827a1153582072394f9272ba37e2353bc659603 )`
	Query to dns1.nic.uk for uk/DNSKEY
	Received 745 bytes from 213.248.216.1
	;; Response received from [213.248.216.1] 745 octets ;; HEADER SECTION ;; id = 19896 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 3 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; uk. IN DNSKEY ;; ANSWER SECTION (3 records) uk. 7200 IN DNSKEY ( 256 3 8 AwEAAeGOYY7fiJwowB47qBZS9G67Bas0rIb23LgGVw1du1K3Is6H2LxfWvtEYyrZ5BE5ddSwLsgz 7F8v/kIBXFhjltAkaU8o+AYSIqDDPlz4+0L1e/ofv42uJ6pcygi74WAWhJOE/QooRUeO8zwTIru7 EgmtjxFXZunQJJmCygY1l5OZ ) ; keytag 43056 uk. 7200 IN DNSKEY ( 257 3 8 AwEAAbOOWSsuXCZ8x/DBsz2tC/58YYi/qul9Mk8sJm5HyNYgQ0oyg6KIxaPvmqcHfyiwma9p+f8S jFZa/51zYQQzWK1flMFyNMl2YMHS/E+7NNa+f1DND23FyBu2VGrXf50c72KVG1s1qnlEusPbkBzh 2zdYRJtiVan+P4OrPmwRfxwfsl7blNWJQkHg2Gy+WeAmAY7PFFlHeDqfYQCJ5bqXJzcvTbh1dPzW uBPeynjXFXCbC5msJQbLcm1KJx2cMNdJJxW9raXj75MJFtotwAGYi7UL285qqia1e6MWfbZKbSmB xkrliGJNSfopBeesJ6LjWHaj+5W/rJdjyhjv3AWNMHE= ) ; keytag 43876 uk. 7200 IN RRSIG ( DNSKEY 8 1 7200 20260701224305 20260527224223 43876 uk. K7/FRVS60ZU9AFAqu1DgFvoYya1JrqQOJjP1xzdPN+8tT8gXsniCuRtbMCNvNVaoUXfwGmigH/kB 0DygkK2mDbpq9OqYyI4R79+MG2LOtoGd1XAwWW717Xp1Qgj56TtPaoBO8jhsw94r/ILOtK7kBlqA ahNyI1Kzl2lC3uEwwsgL7+Fl/9+RRxuWl07O15c6zFs5LXZbChPl6tf9ydwf1dqpp9aTVLlj+mGj 9rS+rBqVdzF/DNs6neBYASFfh9b3lIVJ7P4VdBvmPij+q1Twl3sFcCWQUI0WfCDtc4Zvylg2PvY5 Q0MmkDcbK41MNsEdzpuR+X2tDF19c99A+i92FA== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 2 DNSKEY records for uk
	`uk. 7200 IN DNSKEY ( 256 3 8 AwEAAeGOYY7fiJwowB47qBZS9G67Bas0rIb23LgGVw1du1K3Is6H2LxfWvtEYyrZ5BE5ddSwLsgz 7F8v/kIBXFhjltAkaU8o+AYSIqDDPlz4+0L1e/ofv42uJ6pcygi74WAWhJOE/QooRUeO8zwTIru7 EgmtjxFXZunQJJmCygY1l5OZ ) ; keytag 43056`
	`uk. 7200 IN DNSKEY ( 257 3 8 AwEAAbOOWSsuXCZ8x/DBsz2tC/58YYi/qul9Mk8sJm5HyNYgQ0oyg6KIxaPvmqcHfyiwma9p+f8S jFZa/51zYQQzWK1flMFyNMl2YMHS/E+7NNa+f1DND23FyBu2VGrXf50c72KVG1s1qnlEusPbkBzh 2zdYRJtiVan+P4OrPmwRfxwfsl7blNWJQkHg2Gy+WeAmAY7PFFlHeDqfYQCJ5bqXJzcvTbh1dPzW uBPeynjXFXCbC5msJQbLcm1KJx2cMNdJJxW9raXj75MJFtotwAGYi7UL285qqia1e6MWfbZKbSmB xkrliGJNSfopBeesJ6LjWHaj+5W/rJdjyhjv3AWNMHE= ) ; keytag 43876`
	DNSKEY=43876/SEP is now in the chain-of-trust
	DS=43876/SHA-256 verifies DNSKEY=43876/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`uk. 7200 IN RRSIG ( DNSKEY 8 1 7200 20260701224305 20260527224223 43876 uk. K7/FRVS60ZU9AFAqu1DgFvoYya1JrqQOJjP1xzdPN+8tT8gXsniCuRtbMCNvNVaoUXfwGmigH/kB 0DygkK2mDbpq9OqYyI4R79+MG2LOtoGd1XAwWW717Xp1Qgj56TtPaoBO8jhsw94r/ILOtK7kBlqA ahNyI1Kzl2lC3uEwwsgL7+Fl/9+RRxuWl07O15c6zFs5LXZbChPl6tf9ydwf1dqpp9aTVLlj+mGj 9rS+rBqVdzF/DNs6neBYASFfh9b3lIVJ7P4VdBvmPij+q1Twl3sFcCWQUI0WfCDtc4Zvylg2PvY5 Q0MmkDcbK41MNsEdzpuR+X2tDF19c99A+i92FA== )`
	RRSIG=43876 and DNSKEY=43876/SEP verifies the DNSKEY RRset
	DNSKEY=43056 is now in the chain-of-trust
	Query to nsd.nic.uk for toysshoplondon.co.uk/A
	Received 876 bytes from 156.154.103.3
	;; Response received from [156.154.103.3] 876 octets ;; HEADER SECTION ;; id = 10642 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 6 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; toysshoplondon.co.uk. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (6 records) toysshoplondon.co.uk. 172800 IN NS coco.bunny.net. toysshoplondon.co.uk. 172800 IN NS kiki.bunny.net. G9F1KIIHM8M9VHJK7LRVETBQCEOGJIQP.co.uk. 10800 IN NSEC3 ( 1 1 0 - g9f3nq74ntit1d6qsrkccs86r4t7h1md NS SOA RRSIG DNSKEY NSEC3PARAM CDS CDNSKEY TYPE65534 ) G9F1KIIHM8M9VHJK7LRVETBQCEOGJIQP.co.uk. 10800 IN RRSIG ( NSEC3 8 3 10800 20260701145758 20260527145241 44346 co.uk. CjJb45vpO1eAVwo1flK0Y83OV7WxfWRZXPQyO7tGjfA9iVNFTqD0a3g6+Se+QLoLkktyXR0EPzjy lukBrJgM8i+x+uKaQXLHIpYHFUrTNN1/EzetqAnu/xuer92WfseLKh6eN7I1QxzkUC5qVxhBaDxJ K/xg2Nm2umT7Ps/SmvdW5sds90OI6CPi7mnHtwGjOzQDP0I433xWAU2hlieelEtt2Tyl9xKxostY yi5CI6jFRlmKkrhQCjMgLliApU+J0KWAhdq++9ir1MmXGJ9osoi4kxzwpanUGfxDNIYSWvim442Z 8dHHbMyldp2KfJ8EOYrZAmxKQUBr9ndr8iRgFQ== ) OUNNL6NHRPEEFNT3265BMF6F0U6B317O.co.uk. 10800 IN NSEC3 ( 1 1 0 - ounof31ifmanto34sf9g7odp9nkfdtsf NS DS RRSIG ) OUNNL6NHRPEEFNT3265BMF6F0U6B317O.co.uk. 10800 IN RRSIG ( NSEC3 8 3 10800 20260701193650 20260527183824 44346 co.uk. iPVy0y72apts/cXnT2CoiZw2q+9LAO1pu/HA39+fX65Yi8vZAMncs3/H97cYp3MlZFnTcMisF/nj nRXjVzhMLcEGcRyqtglt0F2uYeU2PSXbvPG46ehazBb/0kyiT58U5D8ykofU6Nm+dM/DNsd+jtVH krZ68AO4CeGiPe/05YYaW2Xf2VPBuw9MV5uGLdSNr3vJ0pv9XrW1drxmEyhs/rjRSb5YErnjs9Nl EiGhZ+KXRS4w7p+/FM0eWq6JQFi9s6i3UAtMOtQgtN7y9p95wlHplVi+7oBxf/dyxWBTKDzZlJun Hr8QE5hsLZpXGuOXMkfFjg3G6R+d40vMV8BC/g== ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Query to dns3.nic.uk for co.uk/DNSKEY
	Received 879 bytes from 213.248.220.1
	;; Response received from [213.248.220.1] 879 octets ;; HEADER SECTION ;; id = 36191 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 3 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; co.uk. IN DNSKEY ;; ANSWER SECTION (3 records) co.uk. 7200 IN DNSKEY ( 256 3 8 AwEAAb84lK0l68KN1tW+UEU7QcVQdI0ZY3nK7uI3gbI4oxKB1qDXKAGv5Fte0fXlUETve15LEXS7 7+k1TMDbnfJvmAHqfVuVaDSnNQQoHCJaOOfXL3L44sOyjJdiiSJUeJaKuEth9o4D4mj6BBDljExh /wVHS27X10EAK4eRnSlFdj718yAAPYfump3Ol/a2xG544UJ1WVc848RA+jKdnPgLwnRM6Uhrasu6 3J1cLOqaq820kCWus4pC+Y+V1ufDqgPFVDNA+jrxTO99mdQopVT4Nfsw+BeM9KKLNszOzZfKTsPO xg7zH9ovLnYzNWXE4NUxLNN0Q+5ml7okm0hfdzWBCKc= ) ; keytag 44346 co.uk. 7200 IN DNSKEY ( 257 3 8 AwEAAdbrJwv7eTGXNPhgVglnRszOb/CWgOo38YreB1Pn9waXeT7Z6A2mHUyXvj3ZNH3bQImU49TD /k6iAQBCLrKkbXhgBlV9goKE0dENjbgb+pzwkIEJa+FszfU1Syk6NB+IQ7m61JGQD8Yi7CSeaPug P1/nab9HU8LUm8Xs3/QfbS7G8v9oG5TKo6vJiXyzkGGzEUA7qNrfUlOl1royRDz2G3OuM1RbZPhC AQGSiu9XQexR0hQ6vPOT+s67/wlYecBM6gM9dSej6Fj5ptWj0bQbBWvD9cLfbEzAyb4lWObiMcBv v+F7BECxBIbfZ33XEtQMYjOaNw2kGGhhg0AG5knWZuc= ) ; keytag 11810 co.uk. 7200 IN RRSIG ( DNSKEY 8 2 7200 20260701020111 20260527011736 11810 co.uk. L5JF2FAWprIN0AY5L4vfFeQeHuT9uFFDLrphza00iaLygSQf4IegHzLNL8+lrAIhAciSQeUUCvwp rWhU9XgsmvBGbWxIN+nV7MBRO/gWl6shjQhHOraULKTmkaqDh6tahpSl7I/qWL71n3l1/PdyYdhH DLwizyvI0D+c0SYOmwWERJH4r9kZgUgdhwCRL2m4p67PbOZPtMQaEh3Y96AyXl7vUQAtcwajQ9Il gNF2nEeE2qWJrWDGhOGOuVA7zYiOfI2kn/dUG5FZ9+0NPVH4833DeYuw7wCvXrY8V2lVeHfZj/qA iae7XDNNLKPvA5o8l1AMlREGS/RvIav0zQ3d2A== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found child zone co.uk
	Attempting to learn nameservers for co.uk
	Query to nsa.nic.uk for co.uk/NS
	Received 481 bytes from 156.154.100.3
	;; Response received from [156.154.100.3] 481 octets ;; HEADER SECTION ;; id = 24377 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 9 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; co.uk. IN NS ;; ANSWER SECTION (9 records) co.uk. 172800 IN NS nsd.nic.uk. co.uk. 172800 IN NS nsa.nic.uk. co.uk. 172800 IN NS dns2.nic.uk. co.uk. 172800 IN NS dns4.nic.uk. co.uk. 172800 IN NS nsb.nic.uk. co.uk. 172800 IN NS nsc.nic.uk. co.uk. 172800 IN NS dns1.nic.uk. co.uk. 172800 IN NS dns3.nic.uk. co.uk. 172800 IN RRSIG ( NS 8 2 172800 20260701120712 20260527120603 44346 co.uk. SbvkQ1+GLVx8wmPCv5ps7gVKCzvPGRNwkkRDmXiPL4vVpn4vpWt8bGJqDizw6APsyGdbjReS4PvA QoHNsabl5KI5QFvbl7tGrB6BX3EtaB1V7ElL50QB/XS/VqpZPl5dpm9uWJ3vtva41CMlNyQzpAak 127EGJeZcrldfEpc8QMjRwxzuFadj2DT18s3aZH6ng+Dth+kqTRmAWB8Pq0oVMnjQP0WmSQoLaCW 4p7lSd+WglmVOQXvfmpWpVyjNsni5li2FAfQEHTFHVgn5qA9ZdEsl8TqaGdnzb7J/k1gOibSnbKQ vMEa52EHHqa+jvMzp3FcRjAGMo5in4CkzBTE1Q== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found co.uk nameservers: nsd.nic.uk, nsa.nic.uk, dns2.nic.uk, dns4.nic.uk, nsb.nic.uk, nsc.nic.uk, dns1.nic.uk, dns3.nic.uk

co.uk

	Checking DS between uk and co.uk
	Query to nsd.nic.uk for co.uk/DS
	Received 244 bytes from 156.154.103.3
	;; Response received from [156.154.103.3] 244 octets ;; HEADER SECTION ;; id = 31692 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; co.uk. IN DS ;; ANSWER SECTION (2 records) co.uk. 300 IN DS ( 11810 8 2 1df4681bdacc3e6296ac7667c42ca33cb57efbc2005ce23064f15fbffa286ff5 ) co.uk. 300 IN RRSIG ( DS 8 2 300 20260705182333 20260531174028 43056 uk. dknU4TJr4MoX3vBfr4poyEtjrOsQRr41fdESsMHgi6dFfaKwBOi7fTxE5ZkZm7gOwOhaugiF9FKI rPT0XsGAbmFlgtyj7CQWQt1NHBbaD6/V6fhN41ajmwBUV0JAfoVdbr2MqAJVOiu7e93X0jZg7S7S 7NfR8hwekbL8k2U1iCo= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 1 DS records for co.uk in the uk zone
	DS=11810/SHA-256 has algorithm RSASHA256
	Found 1 RRSIGs over DS RRset
	`co.uk. 300 IN RRSIG ( DS 8 2 300 20260705182333 20260531174028 43056 uk. dknU4TJr4MoX3vBfr4poyEtjrOsQRr41fdESsMHgi6dFfaKwBOi7fTxE5ZkZm7gOwOhaugiF9FKI rPT0XsGAbmFlgtyj7CQWQt1NHBbaD6/V6fhN41ajmwBUV0JAfoVdbr2MqAJVOiu7e93X0jZg7S7S 7NfR8hwekbL8k2U1iCo= )`
	RRSIG=43056 and DNSKEY=43056 verifies the DS RRset
	DS=11810/SHA-256 is now in the chain-of-trust
	`co.uk. 300 IN DS ( 11810 8 2 1df4681bdacc3e6296ac7667c42ca33cb57efbc2005ce23064f15fbffa286ff5 )`
	Query to nsa.nic.uk for co.uk/DNSKEY
	Received 879 bytes from 156.154.100.3
	;; Response received from [156.154.100.3] 879 octets ;; HEADER SECTION ;; id = 33816 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 3 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; co.uk. IN DNSKEY ;; ANSWER SECTION (3 records) co.uk. 7200 IN DNSKEY ( 256 3 8 AwEAAb84lK0l68KN1tW+UEU7QcVQdI0ZY3nK7uI3gbI4oxKB1qDXKAGv5Fte0fXlUETve15LEXS7 7+k1TMDbnfJvmAHqfVuVaDSnNQQoHCJaOOfXL3L44sOyjJdiiSJUeJaKuEth9o4D4mj6BBDljExh /wVHS27X10EAK4eRnSlFdj718yAAPYfump3Ol/a2xG544UJ1WVc848RA+jKdnPgLwnRM6Uhrasu6 3J1cLOqaq820kCWus4pC+Y+V1ufDqgPFVDNA+jrxTO99mdQopVT4Nfsw+BeM9KKLNszOzZfKTsPO xg7zH9ovLnYzNWXE4NUxLNN0Q+5ml7okm0hfdzWBCKc= ) ; keytag 44346 co.uk. 7200 IN DNSKEY ( 257 3 8 AwEAAdbrJwv7eTGXNPhgVglnRszOb/CWgOo38YreB1Pn9waXeT7Z6A2mHUyXvj3ZNH3bQImU49TD /k6iAQBCLrKkbXhgBlV9goKE0dENjbgb+pzwkIEJa+FszfU1Syk6NB+IQ7m61JGQD8Yi7CSeaPug P1/nab9HU8LUm8Xs3/QfbS7G8v9oG5TKo6vJiXyzkGGzEUA7qNrfUlOl1royRDz2G3OuM1RbZPhC AQGSiu9XQexR0hQ6vPOT+s67/wlYecBM6gM9dSej6Fj5ptWj0bQbBWvD9cLfbEzAyb4lWObiMcBv v+F7BECxBIbfZ33XEtQMYjOaNw2kGGhhg0AG5knWZuc= ) ; keytag 11810 co.uk. 7200 IN RRSIG ( DNSKEY 8 2 7200 20260701020111 20260527011736 11810 co.uk. L5JF2FAWprIN0AY5L4vfFeQeHuT9uFFDLrphza00iaLygSQf4IegHzLNL8+lrAIhAciSQeUUCvwp rWhU9XgsmvBGbWxIN+nV7MBRO/gWl6shjQhHOraULKTmkaqDh6tahpSl7I/qWL71n3l1/PdyYdhH DLwizyvI0D+c0SYOmwWERJH4r9kZgUgdhwCRL2m4p67PbOZPtMQaEh3Y96AyXl7vUQAtcwajQ9Il gNF2nEeE2qWJrWDGhOGOuVA7zYiOfI2kn/dUG5FZ9+0NPVH4833DeYuw7wCvXrY8V2lVeHfZj/qA iae7XDNNLKPvA5o8l1AMlREGS/RvIav0zQ3d2A== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 2 DNSKEY records for co.uk
	`co.uk. 7200 IN DNSKEY ( 256 3 8 AwEAAb84lK0l68KN1tW+UEU7QcVQdI0ZY3nK7uI3gbI4oxKB1qDXKAGv5Fte0fXlUETve15LEXS7 7+k1TMDbnfJvmAHqfVuVaDSnNQQoHCJaOOfXL3L44sOyjJdiiSJUeJaKuEth9o4D4mj6BBDljExh /wVHS27X10EAK4eRnSlFdj718yAAPYfump3Ol/a2xG544UJ1WVc848RA+jKdnPgLwnRM6Uhrasu6 3J1cLOqaq820kCWus4pC+Y+V1ufDqgPFVDNA+jrxTO99mdQopVT4Nfsw+BeM9KKLNszOzZfKTsPO xg7zH9ovLnYzNWXE4NUxLNN0Q+5ml7okm0hfdzWBCKc= ) ; keytag 44346`
	`co.uk. 7200 IN DNSKEY ( 257 3 8 AwEAAdbrJwv7eTGXNPhgVglnRszOb/CWgOo38YreB1Pn9waXeT7Z6A2mHUyXvj3ZNH3bQImU49TD /k6iAQBCLrKkbXhgBlV9goKE0dENjbgb+pzwkIEJa+FszfU1Syk6NB+IQ7m61JGQD8Yi7CSeaPug P1/nab9HU8LUm8Xs3/QfbS7G8v9oG5TKo6vJiXyzkGGzEUA7qNrfUlOl1royRDz2G3OuM1RbZPhC AQGSiu9XQexR0hQ6vPOT+s67/wlYecBM6gM9dSej6Fj5ptWj0bQbBWvD9cLfbEzAyb4lWObiMcBv v+F7BECxBIbfZ33XEtQMYjOaNw2kGGhhg0AG5knWZuc= ) ; keytag 11810`
	DNSKEY=11810/SEP is now in the chain-of-trust
	DS=11810/SHA-256 verifies DNSKEY=11810/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`co.uk. 7200 IN RRSIG ( DNSKEY 8 2 7200 20260701020111 20260527011736 11810 co.uk. L5JF2FAWprIN0AY5L4vfFeQeHuT9uFFDLrphza00iaLygSQf4IegHzLNL8+lrAIhAciSQeUUCvwp rWhU9XgsmvBGbWxIN+nV7MBRO/gWl6shjQhHOraULKTmkaqDh6tahpSl7I/qWL71n3l1/PdyYdhH DLwizyvI0D+c0SYOmwWERJH4r9kZgUgdhwCRL2m4p67PbOZPtMQaEh3Y96AyXl7vUQAtcwajQ9Il gNF2nEeE2qWJrWDGhOGOuVA7zYiOfI2kn/dUG5FZ9+0NPVH4833DeYuw7wCvXrY8V2lVeHfZj/qA iae7XDNNLKPvA5o8l1AMlREGS/RvIav0zQ3d2A== )`
	RRSIG=11810 and DNSKEY=11810/SEP verifies the DNSKEY RRset
	DNSKEY=44346 is now in the chain-of-trust
	Query to dns1.nic.uk for toysshoplondon.co.uk/A
	Received 876 bytes from 213.248.216.1
	;; Response received from [213.248.216.1] 876 octets ;; HEADER SECTION ;; id = 56478 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 6 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; toysshoplondon.co.uk. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (6 records) toysshoplondon.co.uk. 172800 IN NS coco.bunny.net. toysshoplondon.co.uk. 172800 IN NS kiki.bunny.net. g9f1kiihm8m9vhjk7lrvetbqceogjiqp.co.uk. 10800 IN NSEC3 ( 1 1 0 - g9f3nq74ntit1d6qsrkccs86r4t7h1md NS SOA RRSIG DNSKEY NSEC3PARAM CDS CDNSKEY TYPE65534 ) g9f1kiihm8m9vhjk7lrvetbqceogjiqp.co.uk. 10800 IN RRSIG ( NSEC3 8 3 10800 20260701145758 20260527145241 44346 co.uk. CjJb45vpO1eAVwo1flK0Y83OV7WxfWRZXPQyO7tGjfA9iVNFTqD0a3g6+Se+QLoLkktyXR0EPzjy lukBrJgM8i+x+uKaQXLHIpYHFUrTNN1/EzetqAnu/xuer92WfseLKh6eN7I1QxzkUC5qVxhBaDxJ K/xg2Nm2umT7Ps/SmvdW5sds90OI6CPi7mnHtwGjOzQDP0I433xWAU2hlieelEtt2Tyl9xKxostY yi5CI6jFRlmKkrhQCjMgLliApU+J0KWAhdq++9ir1MmXGJ9osoi4kxzwpanUGfxDNIYSWvim442Z 8dHHbMyldp2KfJ8EOYrZAmxKQUBr9ndr8iRgFQ== ) ounnl6nhrpeefnt3265bmf6f0u6b317o.co.uk. 10800 IN NSEC3 ( 1 1 0 - ounof31ifmanto34sf9g7odp9nkfdtsf NS DS RRSIG ) ounnl6nhrpeefnt3265bmf6f0u6b317o.co.uk. 10800 IN RRSIG ( NSEC3 8 3 10800 20260701193650 20260527183824 44346 co.uk. iPVy0y72apts/cXnT2CoiZw2q+9LAO1pu/HA39+fX65Yi8vZAMncs3/H97cYp3MlZFnTcMisF/nj nRXjVzhMLcEGcRyqtglt0F2uYeU2PSXbvPG46ehazBb/0kyiT58U5D8ykofU6Nm+dM/DNsd+jtVH krZ68AO4CeGiPe/05YYaW2Xf2VPBuw9MV5uGLdSNr3vJ0pv9XrW1drxmEyhs/rjRSb5YErnjs9Nl EiGhZ+KXRS4w7p+/FM0eWq6JQFi9s6i3UAtMOtQgtN7y9p95wlHplVi+7oBxf/dyxWBTKDzZlJun Hr8QE5hsLZpXGuOXMkfFjg3G6R+d40vMV8BC/g== ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Query to dns2.nic.uk for toysshoplondon.co.uk/DNSKEY
	Received 876 bytes from 103.49.80.1
	;; Response received from [103.49.80.1] 876 octets ;; HEADER SECTION ;; id = 10639 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 6 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; toysshoplondon.co.uk. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (6 records) toysshoplondon.co.uk. 172800 IN NS coco.bunny.net. toysshoplondon.co.uk. 172800 IN NS kiki.bunny.net. g9f1kiihm8m9vhjk7lrvetbqceogjiqp.co.uk. 10800 IN NSEC3 ( 1 1 0 - g9f3nq74ntit1d6qsrkccs86r4t7h1md NS SOA RRSIG DNSKEY NSEC3PARAM CDS CDNSKEY TYPE65534 ) g9f1kiihm8m9vhjk7lrvetbqceogjiqp.co.uk. 10800 IN RRSIG ( NSEC3 8 3 10800 20260701145758 20260527145241 44346 co.uk. CjJb45vpO1eAVwo1flK0Y83OV7WxfWRZXPQyO7tGjfA9iVNFTqD0a3g6+Se+QLoLkktyXR0EPzjy lukBrJgM8i+x+uKaQXLHIpYHFUrTNN1/EzetqAnu/xuer92WfseLKh6eN7I1QxzkUC5qVxhBaDxJ K/xg2Nm2umT7Ps/SmvdW5sds90OI6CPi7mnHtwGjOzQDP0I433xWAU2hlieelEtt2Tyl9xKxostY yi5CI6jFRlmKkrhQCjMgLliApU+J0KWAhdq++9ir1MmXGJ9osoi4kxzwpanUGfxDNIYSWvim442Z 8dHHbMyldp2KfJ8EOYrZAmxKQUBr9ndr8iRgFQ== ) ounnl6nhrpeefnt3265bmf6f0u6b317o.co.uk. 10800 IN NSEC3 ( 1 1 0 - ounof31ifmanto34sf9g7odp9nkfdtsf NS DS RRSIG ) ounnl6nhrpeefnt3265bmf6f0u6b317o.co.uk. 10800 IN RRSIG ( NSEC3 8 3 10800 20260701193650 20260527183824 44346 co.uk. iPVy0y72apts/cXnT2CoiZw2q+9LAO1pu/HA39+fX65Yi8vZAMncs3/H97cYp3MlZFnTcMisF/nj nRXjVzhMLcEGcRyqtglt0F2uYeU2PSXbvPG46ehazBb/0kyiT58U5D8ykofU6Nm+dM/DNsd+jtVH krZ68AO4CeGiPe/05YYaW2Xf2VPBuw9MV5uGLdSNr3vJ0pv9XrW1drxmEyhs/rjRSb5YErnjs9Nl EiGhZ+KXRS4w7p+/FM0eWq6JQFi9s6i3UAtMOtQgtN7y9p95wlHplVi+7oBxf/dyxWBTKDzZlJun Hr8QE5hsLZpXGuOXMkfFjg3G6R+d40vMV8BC/g== ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found child zone toysshoplondon.co.uk

toysshoplondon.co.uk

	Checking DS between co.uk and toysshoplondon.co.uk
	Query to nsc.nic.uk for toysshoplondon.co.uk/DS
	Received 1194 bytes from 156.154.102.3
	;; Response received from [156.154.102.3] 1194 octets ;; HEADER SECTION ;; id = 40098 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 6 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; toysshoplondon.co.uk. IN DS ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (6 records) G9F1KIIHM8M9VHJK7LRVETBQCEOGJIQP.co.uk. 10800 IN NSEC3 ( 1 1 0 - g9f3nq74ntit1d6qsrkccs86r4t7h1md NS SOA RRSIG DNSKEY NSEC3PARAM CDS CDNSKEY TYPE65534 ) G9F1KIIHM8M9VHJK7LRVETBQCEOGJIQP.co.uk. 10800 IN RRSIG ( NSEC3 8 3 10800 20260701145758 20260527145241 44346 co.uk. CjJb45vpO1eAVwo1flK0Y83OV7WxfWRZXPQyO7tGjfA9iVNFTqD0a3g6+Se+QLoLkktyXR0EPzjy lukBrJgM8i+x+uKaQXLHIpYHFUrTNN1/EzetqAnu/xuer92WfseLKh6eN7I1QxzkUC5qVxhBaDxJ K/xg2Nm2umT7Ps/SmvdW5sds90OI6CPi7mnHtwGjOzQDP0I433xWAU2hlieelEtt2Tyl9xKxostY yi5CI6jFRlmKkrhQCjMgLliApU+J0KWAhdq++9ir1MmXGJ9osoi4kxzwpanUGfxDNIYSWvim442Z 8dHHbMyldp2KfJ8EOYrZAmxKQUBr9ndr8iRgFQ== ) co.uk. 10800 IN SOA ( dns1.nic.uk. hostmaster.nominet.org.uk. 1780323823 ;serial 900 ;refresh 300 ;retry 2419200 ;expire 10800 ;minimum ) co.uk. 10800 IN RRSIG ( SOA 8 2 172800 20260706142343 20260601132343 44346 co.uk. em7mZf8P+L7TRUE//sv/chccnYhHtRDcR1Xv2/7W37gknjXULG4bzfSwY/9uqfJQatTq3C2HCn5l qP23kY0mETsybpG82nvSPyYGsOVrzV4RUrTZchb3s3BuRDQiRvZ3NBzN+avq003Lcpr3zQ4TNg53 KHVt2VeHcll53VXXdg2N2Q6Wer+ycUGCjfN2NDMEytjd7DckezJvvxpa+wYAt1Pe35aOsE+lazoa gvfE33Tb1P/Mw9NbTsEy/oxxNRVV/UdqwYzd6xHBuOLJWnxOEzAve/NGX591DvD+9j11WFbu6z0t cGb//nbkk1QswxiHwV+4i+KB0cH96ob6Qcvrvw== ) OUNNL6NHRPEEFNT3265BMF6F0U6B317O.co.uk. 10800 IN NSEC3 ( 1 1 0 - ounof31ifmanto34sf9g7odp9nkfdtsf NS DS RRSIG ) OUNNL6NHRPEEFNT3265BMF6F0U6B317O.co.uk. 10800 IN RRSIG ( NSEC3 8 3 10800 20260701193650 20260527183824 44346 co.uk. iPVy0y72apts/cXnT2CoiZw2q+9LAO1pu/HA39+fX65Yi8vZAMncs3/H97cYp3MlZFnTcMisF/nj nRXjVzhMLcEGcRyqtglt0F2uYeU2PSXbvPG46ehazBb/0kyiT58U5D8ykofU6Nm+dM/DNsd+jtVH krZ68AO4CeGiPe/05YYaW2Xf2VPBuw9MV5uGLdSNr3vJ0pv9XrW1drxmEyhs/rjRSb5YErnjs9Nl EiGhZ+KXRS4w7p+/FM0eWq6JQFi9s6i3UAtMOtQgtN7y9p95wlHplVi+7oBxf/dyxWBTKDzZlJun Hr8QE5hsLZpXGuOXMkfFjg3G6R+d40vMV8BC/g== ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	No DS records found for toysshoplondon.co.uk in the co.uk zone
	Query to kiki.bunny.net for toysshoplondon.co.uk/DNSKEY
	Received 49 bytes from 91.200.176.1
	;; Response received from [91.200.176.1] 49 octets ;; HEADER SECTION ;; id = 37894 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; toysshoplondon.co.uk. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	No DNSKEY records found
	Query to coco.bunny.net for toysshoplondon.co.uk/A
	Received 49 bytes from 109.104.147.1
	;; Response received from [109.104.147.1] 49 octets ;; HEADER SECTION ;; id = 31972 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; toysshoplondon.co.uk. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	coco.bunny.net is authoritative for toysshoplondon.co.uk
	Query to kiki.bunny.net for toysshoplondon.co.uk/SOA
	Received 49 bytes from 91.200.176.1
	;; Response received from [91.200.176.1] 49 octets ;; HEADER SECTION ;; id = 23876 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; toysshoplondon.co.uk. IN SOA ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Query to coco.bunny.net for toysshoplondon.co.uk/A
	No NSEC records in response
	No records of type SOA for toysshoplondon.co.uk; cannot continue

toysshoplondon.co.uk

	Query to kiki.bunny.net for toysshoplondon.co.uk/A
	Received 49 bytes from 91.200.176.1
	;; Response received from [91.200.176.1] 49 octets ;; HEADER SECTION ;; id = 6407 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; toysshoplondon.co.uk. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	kiki.bunny.net is authoritative for toysshoplondon.co.uk
	Query to kiki.bunny.net for toysshoplondon.co.uk/A
	No NSEC records in response
	No records of type SOA for toysshoplondon.co.uk; cannot continue

Move your mouse over any or symbols for remediation hints.

Want a second opinion? Test toysshoplondon.co.uk at dnsviz.net.

DNSSEC Debugger

↓ Advanced options ↑ Advanced options

Trust Anchor:
Name Servers: