DNSSEC Debugger - watania.iq

Back to Verisign Labs Tools

Domain Name:

Detail: more(+) / less(-)

Time: 2026-08-12 18:20:41 UTC

Analyzing DNSSEC problems for watania.iq

DS=20326/SHA-256 is now in the chain-of-trust

DS=38696/SHA-256 is now in the chain-of-trust

	Checking DS between Trust Anchor and .
	`. IN DS ( 20326 8 2 e06d44b80b8f1d39a95c0b0d7c65d08458e880409bbc683457104237c7f8ec8d )`
	`. IN DS ( 38696 8 2 683d2d0acb8c9b712a1948b27f741219298d0a450d612c483af444a4c0fb2b16 )`
	Query to k.root-servers.net for ./DNSKEY
	Received 1139 bytes from 193.0.14.129
	;; Response received from [193.0.14.129] 1139 octets ;; HEADER SECTION ;; id = 26589 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 4 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; . IN DNSKEY ;; ANSWER SECTION (4 records) . 172800 IN DNSKEY ( 256 3 8 AwEAAeCYD6Z7WWKVLeuWgowKP+3g+Gs1cnLKq7a3CaQxQpv8bfuFVI0WnG33qaSH/Mw9IBgifrdz f4XY/DQLnyBJ9MfaOyAWuEaEmYJ+GQPiwVVfstGwSA1McfFJUttTgq2Huu74KARhtA8wPo/N3Xcy YQtNhz+qCM5NBb3ecx/naw6sYab9LxS6f2cU0q03++BP5Ks0Uef8WJCa/1izCYE+vMkwoltV+tEN a3hpXiZ7jle/xdgaZrPi5ZGmyLVI34g1XVYrNlsCCTmNvFQIfzW5STFQFsQpizczyFn9r3LzSxxP CNwdlCG84bER0BmdwqbF6Tanv+FxMOavrahkj4wIy5k= ) ; keytag 57780 . 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; keytag 20326 . 172800 IN DNSKEY ( 257 3 8 AwEAAa96jeuknZlaeSrvyAJj6ZHv28hhOKkx3rLGXVaC6rXTsDc449/cidltpkyGwCJNnOAlFNKF 2jBosZBU5eeHspaQWOmOElZsjICMQMC3aeHbGiShvZsx4wMYSjH8e7Vrhbu6irwCzVBApESjbUdp WWmEnhathWu1jo+siFUiRAAxm9qyJNg/wOZqqzL/dL/q8PkcRU5oUKEpUge71M3ej2/7CPqpdVwu MoTvoB+ZOT4YeGyxMvHmbrxlFzGOHOijtzN+u1TQNatX2XBuzZNQ1K+s2CXkPIZo7s6JgZyvaBev YtxPvYLw4z9mR7K2vaF18UYH9Z9GNUUeayffKC73PYc= ) ; keytag 38696 . 172800 IN RRSIG ( DNSKEY 8 0 172800 20260831000000 20260810000000 20326 . V78PtBnjcahYNt6ZWnzGlM+EExU9UNP4kRg5NGdsDW8OUHNRWY86PPVrQoWY3uwSbIVxs/mv9XJx oH/NdZm46Amyns74QH6IuPcCk055P1xF8f37JaSzrn+AA9vJCicqH8fnOSG7mSXs6W+or+1tJ5zL Npqjj+IuXyWOcTB0/W3loQYrPxdYIieY2DuSPRmXvpC4Z3LjMnOSvO4Q87V2ayUuPIdhO2w6Ltr3 /k6qRfSnyAcvhomTnf55nzn/Pl3urhbB/sx8VypzJZg/76nLCSxrS4XuDU8ORagQA99GeeuqFgLu fdMhNgr5m/QE6tworB9ptU8CHkhizUgIZxCd4A== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 3 DNSKEY records for .
	`. 172800 IN DNSKEY ( 256 3 8 AwEAAeCYD6Z7WWKVLeuWgowKP+3g+Gs1cnLKq7a3CaQxQpv8bfuFVI0WnG33qaSH/Mw9IBgifrdz f4XY/DQLnyBJ9MfaOyAWuEaEmYJ+GQPiwVVfstGwSA1McfFJUttTgq2Huu74KARhtA8wPo/N3Xcy YQtNhz+qCM5NBb3ecx/naw6sYab9LxS6f2cU0q03++BP5Ks0Uef8WJCa/1izCYE+vMkwoltV+tEN a3hpXiZ7jle/xdgaZrPi5ZGmyLVI34g1XVYrNlsCCTmNvFQIfzW5STFQFsQpizczyFn9r3LzSxxP CNwdlCG84bER0BmdwqbF6Tanv+FxMOavrahkj4wIy5k= ) ; keytag 57780`
	`. 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; keytag 20326`
	`. 172800 IN DNSKEY ( 257 3 8 AwEAAa96jeuknZlaeSrvyAJj6ZHv28hhOKkx3rLGXVaC6rXTsDc449/cidltpkyGwCJNnOAlFNKF 2jBosZBU5eeHspaQWOmOElZsjICMQMC3aeHbGiShvZsx4wMYSjH8e7Vrhbu6irwCzVBApESjbUdp WWmEnhathWu1jo+siFUiRAAxm9qyJNg/wOZqqzL/dL/q8PkcRU5oUKEpUge71M3ej2/7CPqpdVwu MoTvoB+ZOT4YeGyxMvHmbrxlFzGOHOijtzN+u1TQNatX2XBuzZNQ1K+s2CXkPIZo7s6JgZyvaBev YtxPvYLw4z9mR7K2vaF18UYH9Z9GNUUeayffKC73PYc= ) ; keytag 38696`
	DNSKEY=20326/SEP is now in the chain-of-trust
	DS=20326/SHA-256 verifies DNSKEY=20326/SEP
	DNSKEY=38696/SEP is now in the chain-of-trust
	DS=38696/SHA-256 verifies DNSKEY=38696/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`. 172800 IN RRSIG ( DNSKEY 8 0 172800 20260831000000 20260810000000 20326 . V78PtBnjcahYNt6ZWnzGlM+EExU9UNP4kRg5NGdsDW8OUHNRWY86PPVrQoWY3uwSbIVxs/mv9XJx oH/NdZm46Amyns74QH6IuPcCk055P1xF8f37JaSzrn+AA9vJCicqH8fnOSG7mSXs6W+or+1tJ5zL Npqjj+IuXyWOcTB0/W3loQYrPxdYIieY2DuSPRmXvpC4Z3LjMnOSvO4Q87V2ayUuPIdhO2w6Ltr3 /k6qRfSnyAcvhomTnf55nzn/Pl3urhbB/sx8VypzJZg/76nLCSxrS4XuDU8ORagQA99GeeuqFgLu fdMhNgr5m/QE6tworB9ptU8CHkhizUgIZxCd4A== )`
	RRSIG=20326 and DNSKEY=20326/SEP verifies the DNSKEY RRset
	DNSKEY=57780 is now in the chain-of-trust
	Query to c.root-servers.net for watania.iq/A
	Received 605 bytes from 192.33.4.12
	;; Response received from [192.33.4.12] 605 octets ;; HEADER SECTION ;; id = 49468 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 6 arcount = 8 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; watania.iq. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (6 records) iq. 172800 IN NS ns01.trs-dns.com. iq. 172800 IN NS ns.cmc.iq. iq. 172800 IN NS nsp-anycast.cmc.iq. iq. 172800 IN NS ns01.trs-dns.net. iq. 86400 IN NSEC ir. NS RRSIG NSEC iq. 86400 IN RRSIG ( NSEC 8 1 86400 20260825170000 20260812160000 57780 . JFzNmKFtjLjMJ2bBl7drvsIwIqqiM+1J7A6dflX6w8D35Sw7H98puEEBOCWRuIid8cCU0sVqY1Tr PodllvGFKcZ0t0KGFyEU4KONq+8kd2jiczMk+jO/RSN+r2ZmmJLBN+N+ED+/7EJ4Hs4XowfjzASt Xu1hV9FHVRvtLnXc/Fdlidb0aWWYppT5r3QYHw9ifsi/IQSw8nPnDVAAPIb/CxqNnBVxINEGImbe /igQhb3pLyWm8QD7jQALSSN9b4pnBlRSt09Wgu1gzsMHsVjf6KFf8dWv2Ni9Nlu+rA7jDBme9Ls2 a38b5z9eA2vnirV7Mb0qeKCinx8pMiQcSX8yTA== ) ;; ADDITIONAL SECTION (8 records) ns.cmc.iq. 172800 IN A 194.117.57.105 nsp-anycast.cmc.iq. 172800 IN A 194.117.58.42 ns01.trs-dns.net. 172800 IN A 64.96.2.1 ns01.trs-dns.com. 172800 IN A 64.96.1.1 nsp-anycast.cmc.iq. 172800 IN AAAA 2001:500:14:8001:ad::42 ns01.trs-dns.net. 172800 IN AAAA 2620:57:4002::1 ns01.trs-dns.com. 172800 IN AAAA 2620:57:4001::1 ;; { "EDNS-VERSION": 0 }
	Query to m.root-servers.net for iq/DNSKEY
	Received 599 bytes from 202.12.27.33
	;; Response received from [202.12.27.33] 599 octets ;; HEADER SECTION ;; id = 53733 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 6 arcount = 8 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; iq. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (6 records) iq. 172800 IN NS nsp-anycast.cmc.iq. iq. 172800 IN NS ns.cmc.iq. iq. 172800 IN NS ns01.trs-dns.com. iq. 172800 IN NS ns01.trs-dns.net. iq. 86400 IN NSEC ir. NS RRSIG NSEC iq. 86400 IN RRSIG ( NSEC 8 1 86400 20260825170000 20260812160000 57780 . JFzNmKFtjLjMJ2bBl7drvsIwIqqiM+1J7A6dflX6w8D35Sw7H98puEEBOCWRuIid8cCU0sVqY1Tr PodllvGFKcZ0t0KGFyEU4KONq+8kd2jiczMk+jO/RSN+r2ZmmJLBN+N+ED+/7EJ4Hs4XowfjzASt Xu1hV9FHVRvtLnXc/Fdlidb0aWWYppT5r3QYHw9ifsi/IQSw8nPnDVAAPIb/CxqNnBVxINEGImbe /igQhb3pLyWm8QD7jQALSSN9b4pnBlRSt09Wgu1gzsMHsVjf6KFf8dWv2Ni9Nlu+rA7jDBme9Ls2 a38b5z9eA2vnirV7Mb0qeKCinx8pMiQcSX8yTA== ) ;; ADDITIONAL SECTION (8 records) nsp-anycast.cmc.iq. 172800 IN A 194.117.58.42 ns01.trs-dns.net. 172800 IN A 64.96.2.1 ns01.trs-dns.com. 172800 IN A 64.96.1.1 ns.cmc.iq. 172800 IN A 194.117.57.105 nsp-anycast.cmc.iq. 172800 IN AAAA 2001:500:14:8001:ad::42 ns01.trs-dns.net. 172800 IN AAAA 2620:57:4002::1 ns01.trs-dns.com. 172800 IN AAAA 2620:57:4001::1 ;; { "EDNS-VERSION": 0 }
	Found child zone iq

	Checking DS between . and iq
	Query to e.root-servers.net for iq/DS
	Received 703 bytes from 192.203.230.10
	;; Response received from [192.203.230.10] 703 octets ;; HEADER SECTION ;; id = 35379 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 4 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1472, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; iq. IN DS ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (4 records) . 86400 IN SOA ( a.root-servers.net. nstld.verisign-grs.com. 2026081201 ;serial 1800 ;refresh 900 ;retry 604800 ;expire 86400 ;minimum ) . 86400 IN RRSIG ( SOA 8 0 86400 20260825170000 20260812160000 57780 . JXcy7VgKy7mQ42sIlc0IjAMej1Dq6oQ9lTP01rN8TVHdZ+7MKfGSWbtzadMSAmihgUYece1uMU/T 1YsQBJZxSfgBzNddspUmq+dH62gffT9XQW61GthRdshpqnFkuaWfW75ytWZHGwr0lIwnq4PXYAf2 iJRTImyz+pu4lXN4fYpBlhYvrVkZNM+QX36mt8/tP1RL8XDV4pCBgwFRZsuPzZRdiBji7xgqFAd0 3krdLMW6HfVoMla/3YqMeBaipWV/R114pEVgae0fNCkqZfUgmRipAxJ/8xCntyxBZPnTOiH1yyBl PMFzPPYYI6xLL/gguhqq+/KjYY9sekal8XK/4g== ) iq. 86400 IN NSEC ir. NS RRSIG NSEC iq. 86400 IN RRSIG ( NSEC 8 1 86400 20260825170000 20260812160000 57780 . JFzNmKFtjLjMJ2bBl7drvsIwIqqiM+1J7A6dflX6w8D35Sw7H98puEEBOCWRuIid8cCU0sVqY1Tr PodllvGFKcZ0t0KGFyEU4KONq+8kd2jiczMk+jO/RSN+r2ZmmJLBN+N+ED+/7EJ4Hs4XowfjzASt Xu1hV9FHVRvtLnXc/Fdlidb0aWWYppT5r3QYHw9ifsi/IQSw8nPnDVAAPIb/CxqNnBVxINEGImbe /igQhb3pLyWm8QD7jQALSSN9b4pnBlRSt09Wgu1gzsMHsVjf6KFf8dWv2Ni9Nlu+rA7jDBme9Ls2 a38b5z9eA2vnirV7Mb0qeKCinx8pMiQcSX8yTA== ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	No DS records found for iq in the . zone
	Query to ns01.trs-dns.net for iq/DNSKEY
	Received 387 bytes from 64.96.2.1
	;; Response received from [64.96.2.1] 387 octets ;; HEADER SECTION ;; id = 75 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 4 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; iq. IN DNSKEY ;; ANSWER SECTION (4 records) iq. 300 IN DNSKEY ( 257 3 13 u++706Cxp2O2y1TM76l3HZFFA4Dz66NL1TOLwKfXNrTguGPcDUxfJIiZ1/hlocIu0R+6gCPOedcE 3EImcqSVgw== ) ; keytag 21404 iq. 300 IN DNSKEY ( 256 3 13 rQy6cHC4TjeDJqD9Zpvgz6vOnOdbGfC0CYLwMWETAI903Ep+Tmm/PN4fNLWoMPnASZc/tXQNzIvb 3Dm8pylyVA== ) ; keytag 169 iq. 300 IN RRSIG ( DNSKEY 13 1 300 20260826073932 20260727205518 169 iq. 5/1k5n2kv9RqQTXmQlKv8J2gQwDErx2h7OH4fb89gkvXgE7EVYtdXFtwWGwNOUYBy7tlko9MFPtM N1MSyuY1eQ== ) iq. 300 IN RRSIG ( DNSKEY 13 1 300 20260830112921 20260802092016 21404 iq. 2aUZ2/9qPSpgsmsHV3UZ3kqnpjPRQ3HHEdpd6fsjw81q9QRsjp/PXGfJbPTHPyjrORv8zanvgi8t 0FwLGhzGFA== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 2 DNSKEY records for iq
	`iq. 300 IN DNSKEY ( 257 3 13 u++706Cxp2O2y1TM76l3HZFFA4Dz66NL1TOLwKfXNrTguGPcDUxfJIiZ1/hlocIu0R+6gCPOedcE 3EImcqSVgw== ) ; keytag 21404`
	`iq. 300 IN DNSKEY ( 256 3 13 rQy6cHC4TjeDJqD9Zpvgz6vOnOdbGfC0CYLwMWETAI903Ep+Tmm/PN4fNLWoMPnASZc/tXQNzIvb 3Dm8pylyVA== ) ; keytag 169`
	Found 2 RRSIGs over DNSKEY RRset
	`iq. 300 IN RRSIG ( DNSKEY 13 1 300 20260826073932 20260727205518 169 iq. 5/1k5n2kv9RqQTXmQlKv8J2gQwDErx2h7OH4fb89gkvXgE7EVYtdXFtwWGwNOUYBy7tlko9MFPtM N1MSyuY1eQ== )`
	`iq. 300 IN RRSIG ( DNSKEY 13 1 300 20260830112921 20260802092016 21404 iq. 2aUZ2/9qPSpgsmsHV3UZ3kqnpjPRQ3HHEdpd6fsjw81q9QRsjp/PXGfJbPTHPyjrORv8zanvgi8t 0FwLGhzGFA== )`
	RRSIG=169 and DNSKEY=169 verifies the DNSKEY RRset
	RRSIG=21404 and DNSKEY=21404/SEP verifies the DNSKEY RRset
	Query to nsp-anycast.cmc.iq for watania.iq/A
	Received 534 bytes from 194.117.58.42
	;; Response received from [194.117.58.42] 534 octets ;; HEADER SECTION ;; id = 23826 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 8 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; watania.iq. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (8 records) watania.iq. 900 IN NS ns-381.awsdns-47.com. watania.iq. 900 IN NS ns-1175.awsdns-18.org. watania.iq. 900 IN NS ns-915.awsdns-50.net. watania.iq. 900 IN NS ns-1918.awsdns-47.co.uk. vlat9oja97ca12aett7s31h9cmddnfgq.iq. 300 IN NSEC3 ( 1 1 0 - 89juus25d9cqntj9ilfc9v605hu2pllo NS SOA RRSIG DNSKEY NSEC3PARAM ) vlat9oja97ca12aett7s31h9cmddnfgq.iq. 300 IN RRSIG ( NSEC3 13 2 300 20260824152159 20260726040020 169 iq. FcjPiKt1jfigrg7bCxwcf4PuiZkw1k4l19iOUMDtKqax3ICHKu4AUmUTGYGrlGc3eTdBjRzooVwO TACiyJAtvA== ) 89juus25d9cqntj9ilfc9v605hu2pllo.iq. 300 IN NSEC3 ( 1 1 0 - rol2n6q4plvf8gb50mkpsikj677qjq5u TXT RRSIG ) 89juus25d9cqntj9ilfc9v605hu2pllo.iq. 300 IN RRSIG ( NSEC3 13 2 300 20260903215725 20260806101515 169 iq. lG+WXvNCS0z/mxYHuVomVAwWKIzPn4TYJTydB3BLL2aXsfxYBhH0fuc7tbRX/+fb1acKb11DyUZ9 z4LpqVC+pQ== ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Query to ns.cmc.iq for watania.iq/DNSKEY
	Received 534 bytes from 194.117.57.105
	;; Response received from [194.117.57.105] 534 octets ;; HEADER SECTION ;; id = 45264 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 8 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; watania.iq. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (8 records) watania.iq. 900 IN NS ns-381.awsdns-47.com. watania.iq. 900 IN NS ns-1918.awsdns-47.co.uk. watania.iq. 900 IN NS ns-1175.awsdns-18.org. watania.iq. 900 IN NS ns-915.awsdns-50.net. vlat9oja97ca12aett7s31h9cmddnfgq.iq. 300 IN NSEC3 ( 1 1 0 - 89juus25d9cqntj9ilfc9v605hu2pllo NS SOA RRSIG DNSKEY NSEC3PARAM ) vlat9oja97ca12aett7s31h9cmddnfgq.iq. 300 IN RRSIG ( NSEC3 13 2 300 20260824152159 20260726040020 169 iq. FcjPiKt1jfigrg7bCxwcf4PuiZkw1k4l19iOUMDtKqax3ICHKu4AUmUTGYGrlGc3eTdBjRzooVwO TACiyJAtvA== ) 89juus25d9cqntj9ilfc9v605hu2pllo.iq. 300 IN NSEC3 ( 1 1 0 - rol2n6q4plvf8gb50mkpsikj677qjq5u TXT RRSIG ) 89juus25d9cqntj9ilfc9v605hu2pllo.iq. 300 IN RRSIG ( NSEC3 13 2 300 20260903215725 20260806101515 169 iq. lG+WXvNCS0z/mxYHuVomVAwWKIzPn4TYJTydB3BLL2aXsfxYBhH0fuc7tbRX/+fb1acKb11DyUZ9 z4LpqVC+pQ== ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found child zone watania.iq

watania.iq

	Checking DS between iq and watania.iq
	Query to ns01.trs-dns.net for watania.iq/DS
	Received 560 bytes from 64.96.2.1
	;; Response received from [64.96.2.1] 560 octets ;; HEADER SECTION ;; id = 29690 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 6 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; watania.iq. IN DS ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (6 records) VLAT9OJA97CA12AETT7S31H9CMDDNFGQ.iq. 300 IN NSEC3 ( 1 1 0 - 89juus25d9cqntj9ilfc9v605hu2pllo NS SOA RRSIG DNSKEY NSEC3PARAM ) VLAT9OJA97CA12AETT7S31H9CMDDNFGQ.iq. 300 IN RRSIG ( NSEC3 13 2 300 20260824152159 20260726040020 169 iq. FcjPiKt1jfigrg7bCxwcf4PuiZkw1k4l19iOUMDtKqax3ICHKu4AUmUTGYGrlGc3eTdBjRzooVwO TACiyJAtvA== ) iq. 300 IN SOA ( ns.trs-dns.com. trs-ops.tucows.com. 1786558815 ;serial 1800 ;refresh 900 ;retry 604800 ;expire 300 ;minimum ) iq. 300 IN RRSIG ( SOA 13 1 300 20260910124353 20260812172015 169 iq. SqFKmkBYw15+xCjB8hptkQ7Y9PH1Wns4h1AFhbPfkwci39fCakMPiRw4RmCc5LeFHyPdcK3YDKCF Mo4I4mUzyw== ) 89JUUS25D9CQNTJ9ILFC9V605HU2PLLO.iq. 300 IN NSEC3 ( 1 1 0 - rol2n6q4plvf8gb50mkpsikj677qjq5u TXT RRSIG ) 89JUUS25D9CQNTJ9ILFC9V605HU2PLLO.iq. 300 IN RRSIG ( NSEC3 13 2 300 20260903215725 20260806101515 169 iq. lG+WXvNCS0z/mxYHuVomVAwWKIzPn4TYJTydB3BLL2aXsfxYBhH0fuc7tbRX/+fb1acKb11DyUZ9 z4LpqVC+pQ== ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	No DS records found for watania.iq in the iq zone
	Query to ns-381.awsdns-47.com for watania.iq/DNSKEY
	Received 123 bytes from 205.251.193.125
	;; Response received from [205.251.193.125] 123 octets ;; HEADER SECTION ;; id = 26025 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 1 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 1 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; watania.iq. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (1 record) watania.iq. 900 IN SOA ( ns-915.awsdns-50.net. awsdns-hostmaster.amazon.com. 1 ;serial 7200 ;refresh 900 ;retry 1209600 ;expire 86400 ;minimum ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	No DNSKEY records found
	Query to ns-915.awsdns-50.net for watania.iq/A
	Received 123 bytes from 205.251.195.147
	;; Response received from [205.251.195.147] 123 octets ;; HEADER SECTION ;; id = 37224 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 1 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 1 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; watania.iq. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (1 record) watania.iq. 900 IN SOA ( ns-915.awsdns-50.net. awsdns-hostmaster.amazon.com. 1 ;serial 7200 ;refresh 900 ;retry 1209600 ;expire 86400 ;minimum ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	ns-915.awsdns-50.net is authoritative for watania.iq
	Query to ns-381.awsdns-47.com for watania.iq/SOA
	Received 240 bytes from 205.251.193.125
	;; Response received from [205.251.193.125] 240 octets ;; HEADER SECTION ;; id = 9782 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 1 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 1 ;; nscount = 4 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; watania.iq. IN SOA ;; ANSWER SECTION (1 record) watania.iq. 900 IN SOA ( ns-915.awsdns-50.net. awsdns-hostmaster.amazon.com. 1 ;serial 7200 ;refresh 900 ;retry 1209600 ;expire 86400 ;minimum ) ;; AUTHORITY SECTION (4 records) watania.iq. 172800 IN NS ns-1175.awsdns-18.org. watania.iq. 172800 IN NS ns-1918.awsdns-47.co.uk. watania.iq. 172800 IN NS ns-381.awsdns-47.com. watania.iq. 172800 IN NS ns-915.awsdns-50.net. ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Query to ns-1175.awsdns-18.org for watania.iq/SOA
	Received 240 bytes from 205.251.196.151
	;; Response received from [205.251.196.151] 240 octets ;; HEADER SECTION ;; id = 34983 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 1 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 1 ;; nscount = 4 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; watania.iq. IN SOA ;; ANSWER SECTION (1 record) watania.iq. 900 IN SOA ( ns-915.awsdns-50.net. awsdns-hostmaster.amazon.com. 1 ;serial 7200 ;refresh 900 ;retry 1209600 ;expire 86400 ;minimum ) ;; AUTHORITY SECTION (4 records) watania.iq. 172800 IN NS ns-1175.awsdns-18.org. watania.iq. 172800 IN NS ns-1918.awsdns-47.co.uk. watania.iq. 172800 IN NS ns-381.awsdns-47.com. watania.iq. 172800 IN NS ns-915.awsdns-50.net. ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Query to ns-1918.awsdns-47.co.uk for watania.iq/SOA
	Received 240 bytes from 205.251.199.126
	;; Response received from [205.251.199.126] 240 octets ;; HEADER SECTION ;; id = 39839 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 1 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 1 ;; nscount = 4 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; watania.iq. IN SOA ;; ANSWER SECTION (1 record) watania.iq. 900 IN SOA ( ns-915.awsdns-50.net. awsdns-hostmaster.amazon.com. 1 ;serial 7200 ;refresh 900 ;retry 1209600 ;expire 86400 ;minimum ) ;; AUTHORITY SECTION (4 records) watania.iq. 172800 IN NS ns-1175.awsdns-18.org. watania.iq. 172800 IN NS ns-1918.awsdns-47.co.uk. watania.iq. 172800 IN NS ns-381.awsdns-47.com. watania.iq. 172800 IN NS ns-915.awsdns-50.net. ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Query to ns-915.awsdns-50.net for watania.iq/A
	No NSEC records in response
	No RRSIGs found

watania.iq

	Query to ns-1918.awsdns-47.co.uk for watania.iq/A
	Received 123 bytes from 205.251.199.126
	;; Response received from [205.251.199.126] 123 octets ;; HEADER SECTION ;; id = 13802 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 1 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 1 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; watania.iq. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (1 record) watania.iq. 900 IN SOA ( ns-915.awsdns-50.net. awsdns-hostmaster.amazon.com. 1 ;serial 7200 ;refresh 900 ;retry 1209600 ;expire 86400 ;minimum ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	ns-1918.awsdns-47.co.uk is authoritative for watania.iq
	Query to ns-1918.awsdns-47.co.uk for watania.iq/A
	No NSEC records in response
	No RRSIGs found

watania.iq

	Query to ns-381.awsdns-47.com for watania.iq/A
	Received 123 bytes from 205.251.193.125
	;; Response received from [205.251.193.125] 123 octets ;; HEADER SECTION ;; id = 42993 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 1 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 1 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; watania.iq. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (1 record) watania.iq. 900 IN SOA ( ns-915.awsdns-50.net. awsdns-hostmaster.amazon.com. 1 ;serial 7200 ;refresh 900 ;retry 1209600 ;expire 86400 ;minimum ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	ns-381.awsdns-47.com is authoritative for watania.iq
	Query to ns-381.awsdns-47.com for watania.iq/A
	No NSEC records in response
	No RRSIGs found

watania.iq

	Query to ns-1175.awsdns-18.org for watania.iq/A
	Received 123 bytes from 205.251.196.151
	;; Response received from [205.251.196.151] 123 octets ;; HEADER SECTION ;; id = 28306 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 1 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 1 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; watania.iq. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (1 record) watania.iq. 900 IN SOA ( ns-915.awsdns-50.net. awsdns-hostmaster.amazon.com. 1 ;serial 7200 ;refresh 900 ;retry 1209600 ;expire 86400 ;minimum ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	ns-1175.awsdns-18.org is authoritative for watania.iq
	Query to ns-1175.awsdns-18.org for watania.iq/A
	No NSEC records in response
	No RRSIGs found

Move your mouse over any or symbols for remediation hints.

Want a second opinion? Test watania.iq at dnsviz.net.

DNSSEC Debugger

↓ Advanced options ↑ Advanced options

Trust Anchor:
Name Servers: