DNSSEC Debugger - www.smartlivingspaces.nz

Back to Verisign Labs Tools

Domain Name:

Detail: more(+) / less(-)

Time: 2026-04-17 10:05:30 UTC

Analyzing DNSSEC problems for www.smartlivingspaces.nz

DS=20326/SHA-256 is now in the chain-of-trust

DS=38696/SHA-256 is now in the chain-of-trust

	Checking DS between Trust Anchor and .
	`. IN DS ( 20326 8 2 e06d44b80b8f1d39a95c0b0d7c65d08458e880409bbc683457104237c7f8ec8d )`
	`. IN DS ( 38696 8 2 683d2d0acb8c9b712a1948b27f741219298d0a450d612c483af444a4c0fb2b16 )`
	Query to h.root-servers.net for ./DNSKEY
	Received 1139 bytes from 198.97.190.53
	;; Response received from [198.97.190.53] 1139 octets ;; HEADER SECTION ;; id = 34543 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 4 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; . IN DNSKEY ;; ANSWER SECTION (4 records) . 172800 IN DNSKEY ( 256 3 8 AwEAAb5dDYffpgAJ8VUGLwQtWXPlQWsjIFJtCM00/XaKU+8ln+ofah3q2KxEIjvzQg+nqdxRj+8e mtPne1mtYcbFWP4Q9E+DniOJLK09R05FuzvGbrG7DDdRDUX/cedFdV7O8pFEAYpJqYNR9BCTIAV9 73DO2biauKSA31b7I2lK/woxoR1tf5cqJ4SMbJUviuHicAEoUi2ATswloZNWd5T5thmEFZnxFx7D 5UgKCY7oflS7+GU7dNJwEtmFnWYVETHN0kHXVz6aguouaAZp706YXNIoR/iTgQhmsR7XX+wL0Z8Q M2LxQIyU6vRZ06IyuJMGRMiwkSuGElbumyBt12JZbrU= ) ; keytag 54393 . 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; keytag 20326 . 172800 IN DNSKEY ( 257 3 8 AwEAAa96jeuknZlaeSrvyAJj6ZHv28hhOKkx3rLGXVaC6rXTsDc449/cidltpkyGwCJNnOAlFNKF 2jBosZBU5eeHspaQWOmOElZsjICMQMC3aeHbGiShvZsx4wMYSjH8e7Vrhbu6irwCzVBApESjbUdp WWmEnhathWu1jo+siFUiRAAxm9qyJNg/wOZqqzL/dL/q8PkcRU5oUKEpUge71M3ej2/7CPqpdVwu MoTvoB+ZOT4YeGyxMvHmbrxlFzGOHOijtzN+u1TQNatX2XBuzZNQ1K+s2CXkPIZo7s6JgZyvaBev YtxPvYLw4z9mR7K2vaF18UYH9Z9GNUUeayffKC73PYc= ) ; keytag 38696 . 172800 IN RRSIG ( DNSKEY 8 0 172800 20260502000000 20260411000000 20326 . ldfPZ7Q9Ca8GfxnsJcPAMMy9Dt1qfL2guvByLtN9kRcMMn8g3ukazjrv5Bj/KOLEXV++Zp8g8UpL /80NUKP4ZA1Yq3gmEE2hyEG7M964fUrTaB9w9leATi8UK176zklnB7trP81yL6TIZmaCImUMWVkU n8uGeIJUaVz2XpboM5PGo2gEQH2mVAavFammRoDbj4gnMJvXgOMIZtLIIGcOaxuY5sFQo1MDQnoQ OYMAHVqdUu4Ld+Jq29ktutAXUK6hobUBss0me2y+xlu3fmZ5JiKSJOPDiBQBqjUAhueBKEZpamt/ gr8NtHLe0QLKs2h3XhsGNHE7Ksr3WwiCCFHP0A== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 3 DNSKEY records for .
	`. 172800 IN DNSKEY ( 256 3 8 AwEAAb5dDYffpgAJ8VUGLwQtWXPlQWsjIFJtCM00/XaKU+8ln+ofah3q2KxEIjvzQg+nqdxRj+8e mtPne1mtYcbFWP4Q9E+DniOJLK09R05FuzvGbrG7DDdRDUX/cedFdV7O8pFEAYpJqYNR9BCTIAV9 73DO2biauKSA31b7I2lK/woxoR1tf5cqJ4SMbJUviuHicAEoUi2ATswloZNWd5T5thmEFZnxFx7D 5UgKCY7oflS7+GU7dNJwEtmFnWYVETHN0kHXVz6aguouaAZp706YXNIoR/iTgQhmsR7XX+wL0Z8Q M2LxQIyU6vRZ06IyuJMGRMiwkSuGElbumyBt12JZbrU= ) ; keytag 54393`
	`. 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; keytag 20326`
	`. 172800 IN DNSKEY ( 257 3 8 AwEAAa96jeuknZlaeSrvyAJj6ZHv28hhOKkx3rLGXVaC6rXTsDc449/cidltpkyGwCJNnOAlFNKF 2jBosZBU5eeHspaQWOmOElZsjICMQMC3aeHbGiShvZsx4wMYSjH8e7Vrhbu6irwCzVBApESjbUdp WWmEnhathWu1jo+siFUiRAAxm9qyJNg/wOZqqzL/dL/q8PkcRU5oUKEpUge71M3ej2/7CPqpdVwu MoTvoB+ZOT4YeGyxMvHmbrxlFzGOHOijtzN+u1TQNatX2XBuzZNQ1K+s2CXkPIZo7s6JgZyvaBev YtxPvYLw4z9mR7K2vaF18UYH9Z9GNUUeayffKC73PYc= ) ; keytag 38696`
	DNSKEY=20326/SEP is now in the chain-of-trust
	DS=20326/SHA-256 verifies DNSKEY=20326/SEP
	DNSKEY=38696/SEP is now in the chain-of-trust
	DS=38696/SHA-256 verifies DNSKEY=38696/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`. 172800 IN RRSIG ( DNSKEY 8 0 172800 20260502000000 20260411000000 20326 . ldfPZ7Q9Ca8GfxnsJcPAMMy9Dt1qfL2guvByLtN9kRcMMn8g3ukazjrv5Bj/KOLEXV++Zp8g8UpL /80NUKP4ZA1Yq3gmEE2hyEG7M964fUrTaB9w9leATi8UK176zklnB7trP81yL6TIZmaCImUMWVkU n8uGeIJUaVz2XpboM5PGo2gEQH2mVAavFammRoDbj4gnMJvXgOMIZtLIIGcOaxuY5sFQo1MDQnoQ OYMAHVqdUu4Ld+Jq29ktutAXUK6hobUBss0me2y+xlu3fmZ5JiKSJOPDiBQBqjUAhueBKEZpamt/ gr8NtHLe0QLKs2h3XhsGNHE7Ksr3WwiCCFHP0A== )`
	RRSIG=20326 and DNSKEY=20326/SEP verifies the DNSKEY RRset
	DNSKEY=54393 is now in the chain-of-trust
	Query to i.root-servers.net for www.smartlivingspaces.nz/A
	Received 878 bytes from 192.36.148.17
	;; Response received from [192.36.148.17] 878 octets ;; HEADER SECTION ;; id = 11018 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 10 arcount = 15 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; www.smartlivingspaces.nz. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (10 records) nz. 172800 IN NS ns4.dns.net.nz. nz. 172800 IN NS ns7.dns.net.nz. nz. 172800 IN NS ns1.dns.net.nz. nz. 172800 IN NS ns5.dns.net.nz. nz. 172800 IN NS ns2.dns.net.nz. nz. 172800 IN NS ns3.dns.net.nz. nz. 172800 IN NS ns6.dns.net.nz. nz. 86400 IN DS ( 61067 8 2 a58b0396a16fd169b9e3467b5308879b23227adc7c8a5fbab2e830b25503377a ) nz. 86400 IN DS ( 62081 8 2 5e2a5c07daf18fe02e2609a2f630250159f7507c2d0d08de691100151be2f544 ) nz. 86400 IN RRSIG ( DS 8 1 86400 20260430050000 20260417040000 54393 . G/iHL7L/HNLkzlGkL4hrAnhn18q5RlMxWvKhJfDSeV19GECIDQW4jjC7gGgek7j82qTmInjBfKUh cnXqgk9yr9OZ/KNed/EywUn6bt256zSxJPLUvSwP7XhxFqxX2KNSEL/30r767lXZC7Xkkt1A41ab wnHS1RPumHmlAojod1oSR1vI3hzfnAlaMC1G0HedIwgqo4TtwytglPIZM1CODIRQL3mc4jRY0QW4 lunsUAcc5DxrLnt7qQNcmYEvQtZvRpDGJ04kvAl82GfB4pQdObITbW84hhfp7t/C3FFTmvqz85bS 96zUnkonM8xdQHKjBwVwe3lXELCPPbkyHkLGeg== ) ;; ADDITIONAL SECTION (15 records) ns1.dns.net.nz. 172800 IN A 202.46.190.130 ns2.dns.net.nz. 172800 IN A 202.46.187.130 ns3.dns.net.nz. 172800 IN A 202.46.188.130 ns4.dns.net.nz. 172800 IN A 202.46.189.130 ns5.dns.net.nz. 172800 IN A 185.159.197.130 ns6.dns.net.nz. 172800 IN A 185.159.198.130 ns7.dns.net.nz. 172800 IN A 194.146.106.54 ns1.dns.net.nz. 172800 IN AAAA 2001:dce:2000:2::130 ns2.dns.net.nz. 172800 IN AAAA 2001:dce:7000:2::130 ns3.dns.net.nz. 172800 IN AAAA 2001:dce:d453::53 ns4.dns.net.nz. 172800 IN AAAA 2001:dce:d454::53 ns5.dns.net.nz. 172800 IN AAAA 2620:10a:80aa::130 ns6.dns.net.nz. 172800 IN AAAA 2620:10a:80ab::130 ns7.dns.net.nz. 172800 IN AAAA 2001:67c:1010:13::53 ;; { "EDNS-VERSION": 0 }
	Query to j.root-servers.net for nz/DNSKEY
	Received 856 bytes from 192.58.128.30
	;; Response received from [192.58.128.30] 856 octets ;; HEADER SECTION ;; id = 46457 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 10 arcount = 15 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1472, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; nz. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (10 records) nz. 172800 IN NS ns1.dns.net.nz. nz. 172800 IN NS ns2.dns.net.nz. nz. 172800 IN NS ns3.dns.net.nz. nz. 172800 IN NS ns4.dns.net.nz. nz. 172800 IN NS ns5.dns.net.nz. nz. 172800 IN NS ns6.dns.net.nz. nz. 172800 IN NS ns7.dns.net.nz. nz. 86400 IN DS ( 61067 8 2 a58b0396a16fd169b9e3467b5308879b23227adc7c8a5fbab2e830b25503377a ) nz. 86400 IN DS ( 62081 8 2 5e2a5c07daf18fe02e2609a2f630250159f7507c2d0d08de691100151be2f544 ) nz. 86400 IN RRSIG ( DS 8 1 86400 20260430050000 20260417040000 54393 . G/iHL7L/HNLkzlGkL4hrAnhn18q5RlMxWvKhJfDSeV19GECIDQW4jjC7gGgek7j82qTmInjBfKUh cnXqgk9yr9OZ/KNed/EywUn6bt256zSxJPLUvSwP7XhxFqxX2KNSEL/30r767lXZC7Xkkt1A41ab wnHS1RPumHmlAojod1oSR1vI3hzfnAlaMC1G0HedIwgqo4TtwytglPIZM1CODIRQL3mc4jRY0QW4 lunsUAcc5DxrLnt7qQNcmYEvQtZvRpDGJ04kvAl82GfB4pQdObITbW84hhfp7t/C3FFTmvqz85bS 96zUnkonM8xdQHKjBwVwe3lXELCPPbkyHkLGeg== ) ;; ADDITIONAL SECTION (15 records) ns1.dns.net.nz. 172800 IN A 202.46.190.130 ns1.dns.net.nz. 172800 IN AAAA 2001:dce:2000:2::130 ns2.dns.net.nz. 172800 IN A 202.46.187.130 ns2.dns.net.nz. 172800 IN AAAA 2001:dce:7000:2::130 ns3.dns.net.nz. 172800 IN A 202.46.188.130 ns3.dns.net.nz. 172800 IN AAAA 2001:dce:d453::53 ns4.dns.net.nz. 172800 IN A 202.46.189.130 ns4.dns.net.nz. 172800 IN AAAA 2001:dce:d454::53 ns5.dns.net.nz. 172800 IN A 185.159.197.130 ns5.dns.net.nz. 172800 IN AAAA 2620:10a:80aa::130 ns6.dns.net.nz. 172800 IN A 185.159.198.130 ns6.dns.net.nz. 172800 IN AAAA 2620:10a:80ab::130 ns7.dns.net.nz. 172800 IN A 194.146.106.54 ns7.dns.net.nz. 172800 IN AAAA 2001:67c:1010:13::53 ;; { "EDNS-VERSION": 0 }
	Found child zone nz

	Checking DS between . and nz
	Query to l.root-servers.net for nz/DS
	Received 414 bytes from 199.7.83.42
	;; Response received from [199.7.83.42] 414 octets ;; HEADER SECTION ;; id = 62588 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 3 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; nz. IN DS ;; ANSWER SECTION (3 records) nz. 86400 IN DS ( 61067 8 2 a58b0396a16fd169b9e3467b5308879b23227adc7c8a5fbab2e830b25503377a ) nz. 86400 IN DS ( 62081 8 2 5e2a5c07daf18fe02e2609a2f630250159f7507c2d0d08de691100151be2f544 ) nz. 86400 IN RRSIG ( DS 8 1 86400 20260430050000 20260417040000 54393 . G/iHL7L/HNLkzlGkL4hrAnhn18q5RlMxWvKhJfDSeV19GECIDQW4jjC7gGgek7j82qTmInjBfKUh cnXqgk9yr9OZ/KNed/EywUn6bt256zSxJPLUvSwP7XhxFqxX2KNSEL/30r767lXZC7Xkkt1A41ab wnHS1RPumHmlAojod1oSR1vI3hzfnAlaMC1G0HedIwgqo4TtwytglPIZM1CODIRQL3mc4jRY0QW4 lunsUAcc5DxrLnt7qQNcmYEvQtZvRpDGJ04kvAl82GfB4pQdObITbW84hhfp7t/C3FFTmvqz85bS 96zUnkonM8xdQHKjBwVwe3lXELCPPbkyHkLGeg== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 2 DS records for nz in the . zone
	DS=61067/SHA-256 has algorithm RSASHA256
	DS=62081/SHA-256 has algorithm RSASHA256
	Found 1 RRSIGs over DS RRset
	`nz. 86400 IN RRSIG ( DS 8 1 86400 20260430050000 20260417040000 54393 . G/iHL7L/HNLkzlGkL4hrAnhn18q5RlMxWvKhJfDSeV19GECIDQW4jjC7gGgek7j82qTmInjBfKUh cnXqgk9yr9OZ/KNed/EywUn6bt256zSxJPLUvSwP7XhxFqxX2KNSEL/30r767lXZC7Xkkt1A41ab wnHS1RPumHmlAojod1oSR1vI3hzfnAlaMC1G0HedIwgqo4TtwytglPIZM1CODIRQL3mc4jRY0QW4 lunsUAcc5DxrLnt7qQNcmYEvQtZvRpDGJ04kvAl82GfB4pQdObITbW84hhfp7t/C3FFTmvqz85bS 96zUnkonM8xdQHKjBwVwe3lXELCPPbkyHkLGeg== )`
	RRSIG=54393 and DNSKEY=54393 verifies the DS RRset
	DS=61067/SHA-256 is now in the chain-of-trust
	DS=62081/SHA-256 is now in the chain-of-trust
	`nz. 86400 IN DS ( 61067 8 2 a58b0396a16fd169b9e3467b5308879b23227adc7c8a5fbab2e830b25503377a )`
	`nz. 86400 IN DS ( 62081 8 2 5e2a5c07daf18fe02e2609a2f630250159f7507c2d0d08de691100151be2f544 )`
	Query to ns7.dns.net.nz for nz/DNSKEY
	Received 1169 bytes from 194.146.106.54
	;; Response received from [194.146.106.54] 1169 octets ;; HEADER SECTION ;; id = 30551 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 5 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; nz. IN DNSKEY ;; ANSWER SECTION (5 records) nz. 3600 IN DNSKEY ( 256 3 8 AwEAAa+NghU2jS4HeE/VDzjr7t8CaWw5Wa65Iig+TYuq75W8JTKHWiCF40Pd+MbAh44JXaBa4Z17 PTGN2EohzvnV7IXRxWN13WAj7B08sZFLi130ds/QIDSeinrRy87MqgVSoZLFtmADvlTIVLS5D3m9 8sq9OOQNWPfV0Xp24MMxjr2r ) ; keytag 51235 nz. 3600 IN DNSKEY ( 256 3 8 AwEAAbCo3m53aV1/Lf+fKLRgeZDPLJTZ3KoNQmT4g6XzKBWuNMVV6iHpey2khxiff5OkP0A9ZbXP uOMG/kNdnKaS5dCdU9YvexnKjf7rAacC/Lthc8MQiLnykZ+aBPyBN8rLi/BqZtM6jCCHx79iBwJu +UzAAUJyDqN9tmtwY2lhPwbR ) ; keytag 28323 nz. 3600 IN DNSKEY ( 257 3 8 AwEAAbv++i3IxBtDAdZziipNLhOa2mA3JWzkT/yJg1WBgUPH9q7+tjLhyTn71q0852lo/g7eZPJR AMq2AHyN8xisJK5yeMU/jGptLiR1ODE2ht9Tby1/xzjHTX/Wbs+fXj0ydRWXB+6KcXUjv+gXzwvV ExX1kMI55U22QKZ2hMRbVyX1LK82bQxw1uoNiL3LCzT5x+diI5++U9G5cYOTdzwuct3eog9d0rI0 uj36zEbjwXrB7dl8dgh7XEgFxFncRlpd3dpzW5RKx9fOEqUsDjjdJY9YZiCmeEQwmmPw1LuzRIu8 LdWcUNvbXgaPA2dbPDhNPyuwmxqp83tB8zXg8LlDbDc= ) ; keytag 62081 nz. 3600 IN DNSKEY ( 257 3 8 AwEAAcG6OWb3pkYcHhn37dmz4TQQglLLf4fVUlm5ynKTRsdp4JCGLB3dSfi5bKY3uBV0XbCXQh0K DELc/hLwEkScJywhBbSKql85JzmFxlOisuTISVE/8vSJtGPVpFGO9qkPFpeJ4sER2D0mM7l/0ZXR RTgH7IneMslWafBHCQLW0zT0QxgY7xzQHdsUXeEGEUgIsbCqrzmWSXyzs31lWn404wcZdNq4+5ZX mB59XznvUaPOaWJg+nIMLAGyOlAvx1SsWEeaBj4KVPHIRZl+Dd0f+zgIirnhxxVajE85hCUbWHNH ymygCN2OQC5E2XPzh1qNeUySt/BxhSXegi5S60aal8s= ) ; keytag 61067 nz. 3600 IN RRSIG ( DNSKEY 8 1 3600 20260502012041 20260416161432 62081 nz. B+Q7vUXc7m4SuW5xjDGxpuEi3WEeUo6G3vNpOL4ke4EKHsZX5RjtVUpAptw8/0smzQxtEworb31n LKsCpphqJnm8Bk3RHGoncauorZJF1WjgQcDSVu/x4wrIk66+RW3IS8CB0KblREpzh/eYOVVWqEpd 85mWZ60orNRaQHjwHfkBlylQFELeyOYm3mVtuHiHzAx6oRq25kNsVW9VoX1kxTsw8BiRnHJ0EK5a Wp6rlccRsKy+YjYxbKytnrrMujY9+vL8+bXHhmrOF/tCRT9c4woVkzWO2z4+ljA8Sx7UIyMxdyIX rQxNqvRIQXmD9gNwq5LHDV1Sj7R92mxKp1T3Hw== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 4 DNSKEY records for nz
	`nz. 3600 IN DNSKEY ( 256 3 8 AwEAAa+NghU2jS4HeE/VDzjr7t8CaWw5Wa65Iig+TYuq75W8JTKHWiCF40Pd+MbAh44JXaBa4Z17 PTGN2EohzvnV7IXRxWN13WAj7B08sZFLi130ds/QIDSeinrRy87MqgVSoZLFtmADvlTIVLS5D3m9 8sq9OOQNWPfV0Xp24MMxjr2r ) ; keytag 51235`
	`nz. 3600 IN DNSKEY ( 256 3 8 AwEAAbCo3m53aV1/Lf+fKLRgeZDPLJTZ3KoNQmT4g6XzKBWuNMVV6iHpey2khxiff5OkP0A9ZbXP uOMG/kNdnKaS5dCdU9YvexnKjf7rAacC/Lthc8MQiLnykZ+aBPyBN8rLi/BqZtM6jCCHx79iBwJu +UzAAUJyDqN9tmtwY2lhPwbR ) ; keytag 28323`
	`nz. 3600 IN DNSKEY ( 257 3 8 AwEAAbv++i3IxBtDAdZziipNLhOa2mA3JWzkT/yJg1WBgUPH9q7+tjLhyTn71q0852lo/g7eZPJR AMq2AHyN8xisJK5yeMU/jGptLiR1ODE2ht9Tby1/xzjHTX/Wbs+fXj0ydRWXB+6KcXUjv+gXzwvV ExX1kMI55U22QKZ2hMRbVyX1LK82bQxw1uoNiL3LCzT5x+diI5++U9G5cYOTdzwuct3eog9d0rI0 uj36zEbjwXrB7dl8dgh7XEgFxFncRlpd3dpzW5RKx9fOEqUsDjjdJY9YZiCmeEQwmmPw1LuzRIu8 LdWcUNvbXgaPA2dbPDhNPyuwmxqp83tB8zXg8LlDbDc= ) ; keytag 62081`
	`nz. 3600 IN DNSKEY ( 257 3 8 AwEAAcG6OWb3pkYcHhn37dmz4TQQglLLf4fVUlm5ynKTRsdp4JCGLB3dSfi5bKY3uBV0XbCXQh0K DELc/hLwEkScJywhBbSKql85JzmFxlOisuTISVE/8vSJtGPVpFGO9qkPFpeJ4sER2D0mM7l/0ZXR RTgH7IneMslWafBHCQLW0zT0QxgY7xzQHdsUXeEGEUgIsbCqrzmWSXyzs31lWn404wcZdNq4+5ZX mB59XznvUaPOaWJg+nIMLAGyOlAvx1SsWEeaBj4KVPHIRZl+Dd0f+zgIirnhxxVajE85hCUbWHNH ymygCN2OQC5E2XPzh1qNeUySt/BxhSXegi5S60aal8s= ) ; keytag 61067`
	DNSKEY=62081/SEP is now in the chain-of-trust
	DS=62081/SHA-256 verifies DNSKEY=62081/SEP
	DNSKEY=61067/SEP is now in the chain-of-trust
	DS=61067/SHA-256 verifies DNSKEY=61067/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`nz. 3600 IN RRSIG ( DNSKEY 8 1 3600 20260502012041 20260416161432 62081 nz. B+Q7vUXc7m4SuW5xjDGxpuEi3WEeUo6G3vNpOL4ke4EKHsZX5RjtVUpAptw8/0smzQxtEworb31n LKsCpphqJnm8Bk3RHGoncauorZJF1WjgQcDSVu/x4wrIk66+RW3IS8CB0KblREpzh/eYOVVWqEpd 85mWZ60orNRaQHjwHfkBlylQFELeyOYm3mVtuHiHzAx6oRq25kNsVW9VoX1kxTsw8BiRnHJ0EK5a Wp6rlccRsKy+YjYxbKytnrrMujY9+vL8+bXHhmrOF/tCRT9c4woVkzWO2z4+ljA8Sx7UIyMxdyIX rQxNqvRIQXmD9gNwq5LHDV1Sj7R92mxKp1T3Hw== )`
	RRSIG=62081 and DNSKEY=62081/SEP verifies the DNSKEY RRset
	DNSKEY=51235 is now in the chain-of-trust
	DNSKEY=28323 is now in the chain-of-trust
	Query to ns4.dns.net.nz for www.smartlivingspaces.nz/A
	Received 590 bytes from 202.46.189.130
	;; Response received from [202.46.189.130] 590 octets ;; HEADER SECTION ;; id = 23951 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 6 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; www.smartlivingspaces.nz. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (6 records) smartlivingspaces.nz. 86400 IN NS ns2.crazydomains.com. smartlivingspaces.nz. 86400 IN NS ns1.crazydomains.com. og0ag3sotji48e678ob8os8tq9c31ak9.nz. 3600 IN NSEC3 ( 1 1 0 - ogr4v2i2r8nof34ek8de5chelf7sr99i NS SOA RRSIG DNSKEY NSEC3PARAM ) og0ag3sotji48e678ob8os8tq9c31ak9.nz. 3600 IN RRSIG ( NSEC3 8 2 3600 20260424142414 20260416062923 28323 nz. A8y129lZ0eqkIlzuuMGDNWtVy/9PIxXbekWeTSMXHTvoi+tpJzAjkmXoXtuo/yHh/Y6w1pV2VOtA DDPKjxjTHboiXNPvO5F/NArTME4pNuFMJ08cOUSrfFun0x/PQFLZIYnH/G8jFBPYJdklvNuQkPor BFCvr9zVdH5SChfImvA= ) 5hvi3g4is22c10b8lcr1ffdirsfv111q.nz. 3600 IN NSEC3 ( 1 1 0 - 5idr9pjbhsjuirke4i1160rhm1ifjfn8 NS DS RRSIG ) 5hvi3g4is22c10b8lcr1ffdirsfv111q.nz. 3600 IN RRSIG ( NSEC3 8 2 3600 20260423004607 20260416121427 28323 nz. PZhwfGEIZxPPkB8hmb7D3gzRMm02ftOpksVad64urZuUmhquAp8wE/K7wskvq2xcu26ScFcsr5wm VplsHt/yyzXqzo0RFyfEvSkq7n4sM5iJPCjJU00hLpef8Qvc313uMOW+OPNVQNaz2BCWM6o6jNn1 /1WW1C8lHiVVuBtcQAg= ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Query to ns3.dns.net.nz for smartlivingspaces.nz/DNSKEY
	Received 584 bytes from 202.46.188.130
	;; Response received from [202.46.188.130] 584 octets ;; HEADER SECTION ;; id = 12649 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 6 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; smartlivingspaces.nz. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (6 records) smartlivingspaces.nz. 86400 IN NS ns1.crazydomains.com. smartlivingspaces.nz. 86400 IN NS ns2.crazydomains.com. og0ag3sotji48e678ob8os8tq9c31ak9.nz. 3600 IN NSEC3 ( 1 1 0 - ogr4v2i2r8nof34ek8de5chelf7sr99i NS SOA RRSIG DNSKEY NSEC3PARAM ) og0ag3sotji48e678ob8os8tq9c31ak9.nz. 3600 IN RRSIG ( NSEC3 8 2 3600 20260424142414 20260416062923 28323 nz. A8y129lZ0eqkIlzuuMGDNWtVy/9PIxXbekWeTSMXHTvoi+tpJzAjkmXoXtuo/yHh/Y6w1pV2VOtA DDPKjxjTHboiXNPvO5F/NArTME4pNuFMJ08cOUSrfFun0x/PQFLZIYnH/G8jFBPYJdklvNuQkPor BFCvr9zVdH5SChfImvA= ) 5hvi3g4is22c10b8lcr1ffdirsfv111q.nz. 3600 IN NSEC3 ( 1 1 0 - 5idr9pjbhsjuirke4i1160rhm1ifjfn8 NS DS RRSIG ) 5hvi3g4is22c10b8lcr1ffdirsfv111q.nz. 3600 IN RRSIG ( NSEC3 8 2 3600 20260423004607 20260416121427 28323 nz. PZhwfGEIZxPPkB8hmb7D3gzRMm02ftOpksVad64urZuUmhquAp8wE/K7wskvq2xcu26ScFcsr5wm VplsHt/yyzXqzo0RFyfEvSkq7n4sM5iJPCjJU00hLpef8Qvc313uMOW+OPNVQNaz2BCWM6o6jNn1 /1WW1C8lHiVVuBtcQAg= ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found child zone smartlivingspaces.nz

smartlivingspaces.nz

	Checking DS between nz and smartlivingspaces.nz
	Query to ns5.dns.net.nz for smartlivingspaces.nz/DS
	Received 756 bytes from 185.159.197.130
	;; Response received from [185.159.197.130] 756 octets ;; HEADER SECTION ;; id = 54299 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 6 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; smartlivingspaces.nz. IN DS ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (6 records) nz. 3600 IN SOA ( loopback.dns.net.nz. soa.nzrs.net.nz. 2604171001 ;serial 900 ;refresh 300 ;retry 604800 ;expire 3600 ;minimum ) og0ag3sotji48e678ob8os8tq9c31ak9.nz. 3600 IN NSEC3 ( 1 1 0 - ogr4v2i2r8nof34ek8de5chelf7sr99i NS SOA RRSIG DNSKEY NSEC3PARAM ) 5hvi3g4is22c10b8lcr1ffdirsfv111q.nz. 3600 IN NSEC3 ( 1 1 0 - 5idr9pjbhsjuirke4i1160rhm1ifjfn8 NS DS RRSIG ) nz. 3600 IN RRSIG ( SOA 8 1 86400 20260501160006 20260417094433 28323 nz. p0rX/IFQrUNu8pI34Lgd1ycJYrTdNF/F/ajhyv6JIa0ESHvIXEd8Vrch0wB7QNdibSyH+bRNJdtj hCqz+CyjtY+ztNfcRPDD7S+DKoDSpoc9vkp8aOIFJ6lHxmJsL9yoOsBLNQ9JM/FIFR3MNY6+jY/+ WLBIQ9nH4vqMDx3j8xY= ) og0ag3sotji48e678ob8os8tq9c31ak9.nz. 3600 IN RRSIG ( NSEC3 8 2 3600 20260424142414 20260416062923 28323 nz. A8y129lZ0eqkIlzuuMGDNWtVy/9PIxXbekWeTSMXHTvoi+tpJzAjkmXoXtuo/yHh/Y6w1pV2VOtA DDPKjxjTHboiXNPvO5F/NArTME4pNuFMJ08cOUSrfFun0x/PQFLZIYnH/G8jFBPYJdklvNuQkPor BFCvr9zVdH5SChfImvA= ) 5hvi3g4is22c10b8lcr1ffdirsfv111q.nz. 3600 IN RRSIG ( NSEC3 8 2 3600 20260423004607 20260416121427 28323 nz. PZhwfGEIZxPPkB8hmb7D3gzRMm02ftOpksVad64urZuUmhquAp8wE/K7wskvq2xcu26ScFcsr5wm VplsHt/yyzXqzo0RFyfEvSkq7n4sM5iJPCjJU00hLpef8Qvc313uMOW+OPNVQNaz2BCWM6o6jNn1 /1WW1C8lHiVVuBtcQAg= ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	No DS records found for smartlivingspaces.nz in the nz zone
	Query to ns1.crazydomains.com for smartlivingspaces.nz/DNSKEY
	Received 120 bytes from 27.124.125.7
	;; Response received from [27.124.125.7] 120 octets ;; HEADER SECTION ;; id = 1825 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 1 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; smartlivingspaces.nz. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (1 record) smartlivingspaces.nz. 3600 IN SOA ( ns1.crazydomains.com. admin.syrahost.com. 1775514260 ;serial 3600 ;refresh 7200 ;retry 3600000 ;expire 3600 ;minimum ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	No DNSKEY records found
	Query to ns2.crazydomains.com for www.smartlivingspaces.nz/A
	Received 91 bytes from 27.124.125.8
	;; Response received from [27.124.125.8] 91 octets ;; HEADER SECTION ;; id = 24767 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 1 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; www.smartlivingspaces.nz. IN A ;; ANSWER SECTION (1 record) www.smartlivingspaces.nz. 300 IN CNAME ext-cust.squarespace.com. ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	ns2.crazydomains.com is authoritative for www.smartlivingspaces.nz
	Query to ns2.crazydomains.com for www.smartlivingspaces.nz/DNSKEY
	Received 91 bytes from 27.124.125.8
	;; Response received from [27.124.125.8] 91 octets ;; HEADER SECTION ;; id = 9088 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 1 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; www.smartlivingspaces.nz. IN DNSKEY ;; ANSWER SECTION (1 record) www.smartlivingspaces.nz. 300 IN CNAME ext-cust.squarespace.com. ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	www.smartlivingspaces.nz is a CNAME to ext-cust.squarespace.com
	No RRSIGs found

	Query to e.root-servers.net for ext-cust.squarespace.com/A
	Received 1184 bytes from 192.203.230.10
	;; Response received from [192.203.230.10] 1184 octets ;; HEADER SECTION ;; id = 16500 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 15 arcount = 27 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1472, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; ext-cust.squarespace.com. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (15 records) com. 172800 IN NS a.gtld-servers.net. com. 172800 IN NS b.gtld-servers.net. com. 172800 IN NS c.gtld-servers.net. com. 172800 IN NS d.gtld-servers.net. com. 172800 IN NS e.gtld-servers.net. com. 172800 IN NS f.gtld-servers.net. com. 172800 IN NS g.gtld-servers.net. com. 172800 IN NS h.gtld-servers.net. com. 172800 IN NS i.gtld-servers.net. com. 172800 IN NS j.gtld-servers.net. com. 172800 IN NS k.gtld-servers.net. com. 172800 IN NS l.gtld-servers.net. com. 172800 IN NS m.gtld-servers.net. com. 86400 IN DS ( 19718 13 2 8acbb0cd28f41250a80a491389424d341522d946b0da0c0291f2d3d771d7805a ) com. 86400 IN RRSIG ( DS 8 1 86400 20260430050000 20260417040000 54393 . Tmw7lRx9jHBYL1KK8CRzr3nDa4jiDmHpnyz2iVDkLRHRYlbErF6cIXQJFEW1AsCxV2N32grmlsY9 Edu52MTSE5bVo/B9sqt2PnDfg1aN4WZT3nSiq7g4+l2eFKG2IOX3zSooBtgyT3xtnk62SFunn3D7 MAn6VS7Q/VIk1rnWmHxsjS9Td7wo1LRh6xBJ3ziGj6rRP7iknG+1IeIIBIOV6QVMrNOOX/z3P/Ol 7DZun8P2puasBKh3Cpyxzx9DtRBFlfnNbnUEeH6yrgktWRej1JoXXtsartaeCOzNSiQcQXcwfm05 yqm1Qe76mbqb2eb6Ltfoo5NqyCV91NIKfzIo3Q== ) ;; ADDITIONAL SECTION (27 records) a.gtld-servers.net. 172800 IN A 192.5.6.30 a.gtld-servers.net. 172800 IN AAAA 2001:503:a83e::2:30 b.gtld-servers.net. 172800 IN A 192.33.14.30 b.gtld-servers.net. 172800 IN AAAA 2001:503:231d::2:30 c.gtld-servers.net. 172800 IN A 192.26.92.30 c.gtld-servers.net. 172800 IN AAAA 2001:503:83eb::30 d.gtld-servers.net. 172800 IN A 192.31.80.30 d.gtld-servers.net. 172800 IN AAAA 2001:500:856e::30 e.gtld-servers.net. 172800 IN A 192.12.94.30 e.gtld-servers.net. 172800 IN AAAA 2001:502:1ca1::30 f.gtld-servers.net. 172800 IN A 192.35.51.30 f.gtld-servers.net. 172800 IN AAAA 2001:503:d414::30 g.gtld-servers.net. 172800 IN A 192.42.93.30 g.gtld-servers.net. 172800 IN AAAA 2001:503:eea3::30 h.gtld-servers.net. 172800 IN A 192.54.112.30 h.gtld-servers.net. 172800 IN AAAA 2001:502:8cc::30 i.gtld-servers.net. 172800 IN A 192.43.172.30 i.gtld-servers.net. 172800 IN AAAA 2001:503:39c1::30 j.gtld-servers.net. 172800 IN A 192.48.79.30 j.gtld-servers.net. 172800 IN AAAA 2001:502:7094::30 k.gtld-servers.net. 172800 IN A 192.52.178.30 k.gtld-servers.net. 172800 IN AAAA 2001:503:d2d::30 l.gtld-servers.net. 172800 IN A 192.41.162.30 l.gtld-servers.net. 172800 IN AAAA 2001:500:d937::30 m.gtld-servers.net. 172800 IN A 192.55.83.30 m.gtld-servers.net. 172800 IN AAAA 2001:501:b1f9::30 ;; { "EDNS-VERSION": 0 }
	Query to g.root-servers.net for com/DNSKEY
	Received 1163 bytes from 192.112.36.4
	;; Response received from [192.112.36.4] 1163 octets ;; HEADER SECTION ;; id = 48011 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 15 arcount = 27 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; com. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (15 records) com. 172800 IN NS d.gtld-servers.net. com. 172800 IN NS c.gtld-servers.net. com. 172800 IN NS l.gtld-servers.net. com. 172800 IN NS g.gtld-servers.net. com. 172800 IN NS b.gtld-servers.net. com. 172800 IN NS a.gtld-servers.net. com. 172800 IN NS m.gtld-servers.net. com. 172800 IN NS i.gtld-servers.net. com. 172800 IN NS e.gtld-servers.net. com. 172800 IN NS k.gtld-servers.net. com. 172800 IN NS h.gtld-servers.net. com. 172800 IN NS f.gtld-servers.net. com. 172800 IN NS j.gtld-servers.net. com. 86400 IN DS ( 19718 13 2 8acbb0cd28f41250a80a491389424d341522d946b0da0c0291f2d3d771d7805a ) com. 86400 IN RRSIG ( DS 8 1 86400 20260430050000 20260417040000 54393 . Tmw7lRx9jHBYL1KK8CRzr3nDa4jiDmHpnyz2iVDkLRHRYlbErF6cIXQJFEW1AsCxV2N32grmlsY9 Edu52MTSE5bVo/B9sqt2PnDfg1aN4WZT3nSiq7g4+l2eFKG2IOX3zSooBtgyT3xtnk62SFunn3D7 MAn6VS7Q/VIk1rnWmHxsjS9Td7wo1LRh6xBJ3ziGj6rRP7iknG+1IeIIBIOV6QVMrNOOX/z3P/Ol 7DZun8P2puasBKh3Cpyxzx9DtRBFlfnNbnUEeH6yrgktWRej1JoXXtsartaeCOzNSiQcQXcwfm05 yqm1Qe76mbqb2eb6Ltfoo5NqyCV91NIKfzIo3Q== ) ;; ADDITIONAL SECTION (27 records) m.gtld-servers.net. 172800 IN A 192.55.83.30 l.gtld-servers.net. 172800 IN A 192.41.162.30 k.gtld-servers.net. 172800 IN A 192.52.178.30 j.gtld-servers.net. 172800 IN A 192.48.79.30 i.gtld-servers.net. 172800 IN A 192.43.172.30 h.gtld-servers.net. 172800 IN A 192.54.112.30 g.gtld-servers.net. 172800 IN A 192.42.93.30 f.gtld-servers.net. 172800 IN A 192.35.51.30 e.gtld-servers.net. 172800 IN A 192.12.94.30 d.gtld-servers.net. 172800 IN A 192.31.80.30 c.gtld-servers.net. 172800 IN A 192.26.92.30 b.gtld-servers.net. 172800 IN A 192.33.14.30 a.gtld-servers.net. 172800 IN A 192.5.6.30 m.gtld-servers.net. 172800 IN AAAA 2001:501:b1f9::30 l.gtld-servers.net. 172800 IN AAAA 2001:500:d937::30 k.gtld-servers.net. 172800 IN AAAA 2001:503:d2d::30 j.gtld-servers.net. 172800 IN AAAA 2001:502:7094::30 i.gtld-servers.net. 172800 IN AAAA 2001:503:39c1::30 h.gtld-servers.net. 172800 IN AAAA 2001:502:8cc::30 g.gtld-servers.net. 172800 IN AAAA 2001:503:eea3::30 f.gtld-servers.net. 172800 IN AAAA 2001:503:d414::30 e.gtld-servers.net. 172800 IN AAAA 2001:502:1ca1::30 d.gtld-servers.net. 172800 IN AAAA 2001:500:856e::30 c.gtld-servers.net. 172800 IN AAAA 2001:503:83eb::30 b.gtld-servers.net. 172800 IN AAAA 2001:503:231d::2:30 a.gtld-servers.net. 172800 IN AAAA 2001:503:a83e::2:30 ;; { "EDNS-VERSION": 0 }
	Found child zone com

com

	Checking DS between . and com
	Query to a.root-servers.net for com/DS
	Received 367 bytes from 198.41.0.4
	;; Response received from [198.41.0.4] 367 octets ;; HEADER SECTION ;; id = 27854 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; com. IN DS ;; ANSWER SECTION (2 records) com. 86400 IN DS ( 19718 13 2 8acbb0cd28f41250a80a491389424d341522d946b0da0c0291f2d3d771d7805a ) com. 86400 IN RRSIG ( DS 8 1 86400 20260430050000 20260417040000 54393 . Tmw7lRx9jHBYL1KK8CRzr3nDa4jiDmHpnyz2iVDkLRHRYlbErF6cIXQJFEW1AsCxV2N32grmlsY9 Edu52MTSE5bVo/B9sqt2PnDfg1aN4WZT3nSiq7g4+l2eFKG2IOX3zSooBtgyT3xtnk62SFunn3D7 MAn6VS7Q/VIk1rnWmHxsjS9Td7wo1LRh6xBJ3ziGj6rRP7iknG+1IeIIBIOV6QVMrNOOX/z3P/Ol 7DZun8P2puasBKh3Cpyxzx9DtRBFlfnNbnUEeH6yrgktWRej1JoXXtsartaeCOzNSiQcQXcwfm05 yqm1Qe76mbqb2eb6Ltfoo5NqyCV91NIKfzIo3Q== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 1 DS records for com in the . zone
	DS=19718/SHA-256 has algorithm ECDSAP256SHA256
	Found 1 RRSIGs over DS RRset
	`com. 86400 IN RRSIG ( DS 8 1 86400 20260430050000 20260417040000 54393 . Tmw7lRx9jHBYL1KK8CRzr3nDa4jiDmHpnyz2iVDkLRHRYlbErF6cIXQJFEW1AsCxV2N32grmlsY9 Edu52MTSE5bVo/B9sqt2PnDfg1aN4WZT3nSiq7g4+l2eFKG2IOX3zSooBtgyT3xtnk62SFunn3D7 MAn6VS7Q/VIk1rnWmHxsjS9Td7wo1LRh6xBJ3ziGj6rRP7iknG+1IeIIBIOV6QVMrNOOX/z3P/Ol 7DZun8P2puasBKh3Cpyxzx9DtRBFlfnNbnUEeH6yrgktWRej1JoXXtsartaeCOzNSiQcQXcwfm05 yqm1Qe76mbqb2eb6Ltfoo5NqyCV91NIKfzIo3Q== )`
	RRSIG=54393 and DNSKEY=54393 verifies the DS RRset
	DS=19718/SHA-256 is now in the chain-of-trust
	`com. 86400 IN DS ( 19718 13 2 8acbb0cd28f41250a80a491389424d341522d946b0da0c0291f2d3d771d7805a )`
	Query to d.gtld-servers.net for com/DNSKEY
	Received 371 bytes from 192.31.80.30
	;; Response received from [192.31.80.30] 371 octets ;; HEADER SECTION ;; id = 27251 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 4 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; com. IN DNSKEY ;; ANSWER SECTION (4 records) com. 86400 IN DNSKEY ( 256 3 13 5eHMITHLlTLKXKAZh1/ghH7lZOfDap0HVvPtxX0a6YE+6+EQ/D8MP66HLVaihA5Bq1uhy0mQ3bVf 6aUtuqtD0A== ) ; keytag 27677 com. 86400 IN DNSKEY ( 257 3 13 tx8EZRAd2+K/DJRV0S+hbBzaRPS/G6JVNBitHzqpsGlz8huE61Ms9ANe6NSDLKJtiTBqfTJWDAyw Ep1FCsEINQ== ) ; keytag 19718 com. 86400 IN DNSKEY ( 256 3 13 i529KPLz+9AkrHsuDUvozFxk/jAcCaku7WNyRKVlEubhh2x9Vimdi//ANLbNk/JW1uZ53RNASSNv opgemNL9kw== ) ; keytag 35511 com. 86400 IN RRSIG ( DNSKEY 13 1 86400 20260422140235 20260407135735 19718 com. S65Kk6xDZLy3bc+TZso5c/yA+49Ltwl2zJp0jxlFSNJk12t/0xur/DMTjw/zZiYqOcV7yEFd0Z5v rlEH6FDf5w== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 3 DNSKEY records for com
	`com. 86400 IN DNSKEY ( 256 3 13 5eHMITHLlTLKXKAZh1/ghH7lZOfDap0HVvPtxX0a6YE+6+EQ/D8MP66HLVaihA5Bq1uhy0mQ3bVf 6aUtuqtD0A== ) ; keytag 27677`
	`com. 86400 IN DNSKEY ( 257 3 13 tx8EZRAd2+K/DJRV0S+hbBzaRPS/G6JVNBitHzqpsGlz8huE61Ms9ANe6NSDLKJtiTBqfTJWDAyw Ep1FCsEINQ== ) ; keytag 19718`
	`com. 86400 IN DNSKEY ( 256 3 13 i529KPLz+9AkrHsuDUvozFxk/jAcCaku7WNyRKVlEubhh2x9Vimdi//ANLbNk/JW1uZ53RNASSNv opgemNL9kw== ) ; keytag 35511`
	DNSKEY=19718/SEP is now in the chain-of-trust
	DS=19718/SHA-256 verifies DNSKEY=19718/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`com. 86400 IN RRSIG ( DNSKEY 13 1 86400 20260422140235 20260407135735 19718 com. S65Kk6xDZLy3bc+TZso5c/yA+49Ltwl2zJp0jxlFSNJk12t/0xur/DMTjw/zZiYqOcV7yEFd0Z5v rlEH6FDf5w== )`
	RRSIG=19718 and DNSKEY=19718/SEP verifies the DNSKEY RRset
	DNSKEY=27677 is now in the chain-of-trust
	DNSKEY=35511 is now in the chain-of-trust
	Query to g.gtld-servers.net for ext-cust.squarespace.com/A
	Received 654 bytes from 192.42.93.30
	;; Response received from [192.42.93.30] 654 octets ;; HEADER SECTION ;; id = 56031 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 12 arcount = 5 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; ext-cust.squarespace.com. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (12 records) squarespace.com. 172800 IN NS dns1.p03.nsone.net. squarespace.com. 172800 IN NS dns2.p03.nsone.net. squarespace.com. 172800 IN NS dns3.p03.nsone.net. squarespace.com. 172800 IN NS dns4.p03.nsone.net. squarespace.com. 172800 IN NS ns01.squarespacedns.com. squarespace.com. 172800 IN NS ns02.squarespacedns.com. squarespace.com. 172800 IN NS ns03.squarespacedns.com. squarespace.com. 172800 IN NS ns04.squarespacedns.com. CK0POJMG874LJREF7EFN8430QVIT8BSM.com. 900 IN NSEC3 ( 1 1 0 - ck0q3udg8cekkae7rukpgct1dvssh8ll NS SOA RRSIG DNSKEY NSEC3PARAM ) CK0POJMG874LJREF7EFN8430QVIT8BSM.com. 900 IN RRSIG ( NSEC3 13 2 900 20260424002641 20260416231641 27677 com. 6+GfjX4EknY8MypEcN9D/qm7m/NC9+S31G/wEu8ZZ+lFEXlKVTXHdwVeFhe40WCJpepBm4IqQMCA +BVbFCgnag== ) JI3MU6INA1VCKA163QPN216J708EDPAC.com. 900 IN NSEC3 ( 1 1 0 - ji3n63pga3r1gpc26h3g8ru3fn6boaaq NS DS RRSIG ) JI3MU6INA1VCKA163QPN216J708EDPAC.com. 900 IN RRSIG ( NSEC3 13 2 900 20260423021004 20260416010004 27677 com. WHih4lgdEnCYFdxmVq0HM4cUhgCrGqFUphLt5iZjcqrxb7pbo6rMXnXaV9M169eNQ0KPEHRkLWcZ Cr1lIK4ZZw== ) ;; ADDITIONAL SECTION (5 records) ns01.squarespacedns.com. 172800 IN A 45.54.22.1 ns02.squarespacedns.com. 172800 IN A 45.54.22.65 ns03.squarespacedns.com. 172800 IN A 45.54.22.129 ns04.squarespacedns.com. 172800 IN A 45.54.22.193 ;; { "EDNS-VERSION": 0 }
	Query to k.gtld-servers.net for squarespace.com/DNSKEY
	Received 645 bytes from 192.52.178.30
	;; Response received from [192.52.178.30] 645 octets ;; HEADER SECTION ;; id = 55863 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 12 arcount = 5 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; squarespace.com. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (12 records) squarespace.com. 172800 IN NS dns1.p03.nsone.net. squarespace.com. 172800 IN NS dns2.p03.nsone.net. squarespace.com. 172800 IN NS dns3.p03.nsone.net. squarespace.com. 172800 IN NS dns4.p03.nsone.net. squarespace.com. 172800 IN NS ns01.squarespacedns.com. squarespace.com. 172800 IN NS ns02.squarespacedns.com. squarespace.com. 172800 IN NS ns03.squarespacedns.com. squarespace.com. 172800 IN NS ns04.squarespacedns.com. CK0POJMG874LJREF7EFN8430QVIT8BSM.com. 900 IN NSEC3 ( 1 1 0 - ck0q3udg8cekkae7rukpgct1dvssh8ll NS SOA RRSIG DNSKEY NSEC3PARAM ) CK0POJMG874LJREF7EFN8430QVIT8BSM.com. 900 IN RRSIG ( NSEC3 13 2 900 20260424002641 20260416231641 27677 com. 6+GfjX4EknY8MypEcN9D/qm7m/NC9+S31G/wEu8ZZ+lFEXlKVTXHdwVeFhe40WCJpepBm4IqQMCA +BVbFCgnag== ) JI3MU6INA1VCKA163QPN216J708EDPAC.com. 900 IN NSEC3 ( 1 1 0 - ji3n63pga3r1gpc26h3g8ru3fn6boaaq NS DS RRSIG ) JI3MU6INA1VCKA163QPN216J708EDPAC.com. 900 IN RRSIG ( NSEC3 13 2 900 20260423021004 20260416010004 27677 com. WHih4lgdEnCYFdxmVq0HM4cUhgCrGqFUphLt5iZjcqrxb7pbo6rMXnXaV9M169eNQ0KPEHRkLWcZ Cr1lIK4ZZw== ) ;; ADDITIONAL SECTION (5 records) ns01.squarespacedns.com. 172800 IN A 45.54.22.1 ns02.squarespacedns.com. 172800 IN A 45.54.22.65 ns03.squarespacedns.com. 172800 IN A 45.54.22.129 ns04.squarespacedns.com. 172800 IN A 45.54.22.193 ;; { "EDNS-VERSION": 0 }
	Found child zone squarespace.com

squarespace.com

	Checking DS between com and squarespace.com
	Query to g.gtld-servers.net for squarespace.com/DS
	Received 573 bytes from 192.42.93.30
	;; Response received from [192.42.93.30] 573 octets ;; HEADER SECTION ;; id = 48831 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 6 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; squarespace.com. IN DS ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (6 records) CK0POJMG874LJREF7EFN8430QVIT8BSM.com. 900 IN NSEC3 ( 1 1 0 - ck0q3udg8cekkae7rukpgct1dvssh8ll NS SOA RRSIG DNSKEY NSEC3PARAM ) CK0POJMG874LJREF7EFN8430QVIT8BSM.com. 900 IN RRSIG ( NSEC3 13 2 900 20260424002641 20260416231641 27677 com. 6+GfjX4EknY8MypEcN9D/qm7m/NC9+S31G/wEu8ZZ+lFEXlKVTXHdwVeFhe40WCJpepBm4IqQMCA +BVbFCgnag== ) com. 900 IN SOA ( a.gtld-servers.net. nstld.verisign-grs.com. 1776420302 ;serial 1800 ;refresh 900 ;retry 604800 ;expire 900 ;minimum ) com. 900 IN RRSIG ( SOA 13 1 900 20260424100502 20260417085502 27677 com. 7fF8+u3m6o7s06NfLE2bpsMy9kHMVupexkCNOc7FM+aGjyb5EN4kjLnk5qEoQ1MmbwJBgjISbGsX SwDwxx/Paw== ) JI3MU6INA1VCKA163QPN216J708EDPAC.com. 900 IN NSEC3 ( 1 1 0 - ji3n63pga3r1gpc26h3g8ru3fn6boaaq NS DS RRSIG ) JI3MU6INA1VCKA163QPN216J708EDPAC.com. 900 IN RRSIG ( NSEC3 13 2 900 20260423021004 20260416010004 27677 com. WHih4lgdEnCYFdxmVq0HM4cUhgCrGqFUphLt5iZjcqrxb7pbo6rMXnXaV9M169eNQ0KPEHRkLWcZ Cr1lIK4ZZw== ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	No DS records found for squarespace.com in the com zone
	Query to ns02.squarespacedns.com for squarespace.com/DNSKEY
	Received 108 bytes from 45.54.22.65
	;; Response received from [45.54.22.65] 108 octets ;; HEADER SECTION ;; id = 19081 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 1 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; squarespace.com. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (1 record) squarespace.com. 900 IN SOA ( dns1.p06.nsone.net. dns-admin.squarespace.com. 1663787404 ;serial 3600 ;refresh 600 ;retry 604800 ;expire 900 ;minimum ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	No DNSKEY records found
	Query to dns4.p03.nsone.net for ext-cust.squarespace.com/A
	Received 117 bytes from 198.51.45.67
	;; Response received from [198.51.45.67] 117 octets ;; HEADER SECTION ;; id = 61380 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 4 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; ext-cust.squarespace.com. IN A ;; ANSWER SECTION (4 records) ext-cust.squarespace.com. 300 IN A 198.185.159.144 ext-cust.squarespace.com. 300 IN A 198.49.23.144 ext-cust.squarespace.com. 300 IN A 198.49.23.145 ext-cust.squarespace.com. 300 IN A 198.185.159.145 ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	dns4.p03.nsone.net is authoritative for ext-cust.squarespace.com
	Query to dns1.p03.nsone.net for ext-cust.squarespace.com/DNSKEY
	Received 117 bytes from 198.51.44.3
	;; Response received from [198.51.44.3] 117 octets ;; HEADER SECTION ;; id = 15636 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 1 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; ext-cust.squarespace.com. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (1 record) squarespace.com. 900 IN SOA ( dns1.p06.nsone.net. dns-admin.squarespace.com. 1663787404 ;serial 3600 ;refresh 600 ;retry 604800 ;expire 900 ;minimum ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Query to ns01.squarespacedns.com for squarespace.com/SOA
	Received 108 bytes from 45.54.22.1
	;; Response received from [45.54.22.1] 108 octets ;; HEADER SECTION ;; id = 57220 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 1 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; squarespace.com. IN SOA ;; ANSWER SECTION (1 record) squarespace.com. 1800 IN SOA ( dns1.p06.nsone.net. dns-admin.squarespace.com. 1663787404 ;serial 3600 ;refresh 600 ;retry 604800 ;expire 900 ;minimum ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Query to dns3.p03.nsone.net for squarespace.com/SOA
	Received 108 bytes from 198.51.44.67
	;; Response received from [198.51.44.67] 108 octets ;; HEADER SECTION ;; id = 53134 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 1 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; squarespace.com. IN SOA ;; ANSWER SECTION (1 record) squarespace.com. 1800 IN SOA ( dns1.p06.nsone.net. dns-admin.squarespace.com. 1663787404 ;serial 3600 ;refresh 600 ;retry 604800 ;expire 900 ;minimum ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Query to dns2.p03.nsone.net for squarespace.com/SOA
	Received 108 bytes from 198.51.45.3
	;; Response received from [198.51.45.3] 108 octets ;; HEADER SECTION ;; id = 13763 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 1 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; squarespace.com. IN SOA ;; ANSWER SECTION (1 record) squarespace.com. 1800 IN SOA ( dns1.p06.nsone.net. dns-admin.squarespace.com. 1663787404 ;serial 3600 ;refresh 600 ;retry 604800 ;expire 900 ;minimum ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Query to ns02.squarespacedns.com for squarespace.com/SOA
	Received 108 bytes from 45.54.22.65
	;; Response received from [45.54.22.65] 108 octets ;; HEADER SECTION ;; id = 46079 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 1 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; squarespace.com. IN SOA ;; ANSWER SECTION (1 record) squarespace.com. 1800 IN SOA ( dns1.p06.nsone.net. dns-admin.squarespace.com. 1663787404 ;serial 3600 ;refresh 600 ;retry 604800 ;expire 900 ;minimum ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Query to ns03.squarespacedns.com for squarespace.com/SOA
	Received 108 bytes from 45.54.22.129
	;; Response received from [45.54.22.129] 108 octets ;; HEADER SECTION ;; id = 28103 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 1 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; squarespace.com. IN SOA ;; ANSWER SECTION (1 record) squarespace.com. 1800 IN SOA ( dns1.p06.nsone.net. dns-admin.squarespace.com. 1663787404 ;serial 3600 ;refresh 600 ;retry 604800 ;expire 900 ;minimum ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Query to dns1.p03.nsone.net for squarespace.com/SOA
	Received 108 bytes from 198.51.44.3
	;; Response received from [198.51.44.3] 108 octets ;; HEADER SECTION ;; id = 1849 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 1 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; squarespace.com. IN SOA ;; ANSWER SECTION (1 record) squarespace.com. 1800 IN SOA ( dns1.p06.nsone.net. dns-admin.squarespace.com. 1663787404 ;serial 3600 ;refresh 600 ;retry 604800 ;expire 900 ;minimum ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Query to ns04.squarespacedns.com for squarespace.com/SOA
	Received 108 bytes from 45.54.22.193
	;; Response received from [45.54.22.193] 108 octets ;; HEADER SECTION ;; id = 29593 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 1 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; squarespace.com. IN SOA ;; ANSWER SECTION (1 record) squarespace.com. 1800 IN SOA ( dns1.p06.nsone.net. dns-admin.squarespace.com. 1663787404 ;serial 3600 ;refresh 600 ;retry 604800 ;expire 900 ;minimum ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Query to dns4.p03.nsone.net for ext-cust.squarespace.com/A
	ext-cust.squarespace.com A RR has value 198.185.159.144
	ext-cust.squarespace.com A RR has value 198.49.23.144
	ext-cust.squarespace.com A RR has value 198.49.23.145
	ext-cust.squarespace.com A RR has value 198.185.159.145
	No RRSIGs found

squarespace.com

	Query to dns3.p03.nsone.net for ext-cust.squarespace.com/A
	Received 117 bytes from 198.51.44.67
	;; Response received from [198.51.44.67] 117 octets ;; HEADER SECTION ;; id = 26347 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 4 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; ext-cust.squarespace.com. IN A ;; ANSWER SECTION (4 records) ext-cust.squarespace.com. 300 IN A 198.185.159.144 ext-cust.squarespace.com. 300 IN A 198.49.23.144 ext-cust.squarespace.com. 300 IN A 198.49.23.145 ext-cust.squarespace.com. 300 IN A 198.185.159.145 ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	dns3.p03.nsone.net is authoritative for ext-cust.squarespace.com
	Query to dns3.p03.nsone.net for ext-cust.squarespace.com/DNSKEY
	Received 117 bytes from 198.51.44.67
	;; Response received from [198.51.44.67] 117 octets ;; HEADER SECTION ;; id = 25890 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 1 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; ext-cust.squarespace.com. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (1 record) squarespace.com. 900 IN SOA ( dns1.p06.nsone.net. dns-admin.squarespace.com. 1663787404 ;serial 3600 ;refresh 600 ;retry 604800 ;expire 900 ;minimum ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Query to dns3.p03.nsone.net for ext-cust.squarespace.com/A
	ext-cust.squarespace.com A RR has value 198.185.159.144
	ext-cust.squarespace.com A RR has value 198.49.23.144
	ext-cust.squarespace.com A RR has value 198.49.23.145
	ext-cust.squarespace.com A RR has value 198.185.159.145
	No RRSIGs found

squarespace.com

	Query to dns2.p03.nsone.net for ext-cust.squarespace.com/A
	Received 117 bytes from 198.51.45.3
	;; Response received from [198.51.45.3] 117 octets ;; HEADER SECTION ;; id = 30308 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 4 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; ext-cust.squarespace.com. IN A ;; ANSWER SECTION (4 records) ext-cust.squarespace.com. 300 IN A 198.185.159.144 ext-cust.squarespace.com. 300 IN A 198.49.23.144 ext-cust.squarespace.com. 300 IN A 198.49.23.145 ext-cust.squarespace.com. 300 IN A 198.185.159.145 ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	dns2.p03.nsone.net is authoritative for ext-cust.squarespace.com
	Query to ns01.squarespacedns.com for ext-cust.squarespace.com/DNSKEY
	Received 117 bytes from 45.54.22.1
	;; Response received from [45.54.22.1] 117 octets ;; HEADER SECTION ;; id = 62524 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 1 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; ext-cust.squarespace.com. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (1 record) squarespace.com. 900 IN SOA ( dns1.p06.nsone.net. dns-admin.squarespace.com. 1663787404 ;serial 3600 ;refresh 600 ;retry 604800 ;expire 900 ;minimum ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Query to dns2.p03.nsone.net for ext-cust.squarespace.com/A
	ext-cust.squarespace.com A RR has value 198.185.159.144
	ext-cust.squarespace.com A RR has value 198.49.23.144
	ext-cust.squarespace.com A RR has value 198.49.23.145
	ext-cust.squarespace.com A RR has value 198.185.159.145
	No RRSIGs found

squarespace.com

	Query to ns04.squarespacedns.com for ext-cust.squarespace.com/A
	Received 117 bytes from 45.54.22.193
	;; Response received from [45.54.22.193] 117 octets ;; HEADER SECTION ;; id = 44971 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 4 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; ext-cust.squarespace.com. IN A ;; ANSWER SECTION (4 records) ext-cust.squarespace.com. 300 IN A 198.185.159.144 ext-cust.squarespace.com. 300 IN A 198.49.23.144 ext-cust.squarespace.com. 300 IN A 198.49.23.145 ext-cust.squarespace.com. 300 IN A 198.185.159.145 ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	ns04.squarespacedns.com is authoritative for ext-cust.squarespace.com
	Query to ns04.squarespacedns.com for ext-cust.squarespace.com/DNSKEY
	Received 117 bytes from 45.54.22.193
	;; Response received from [45.54.22.193] 117 octets ;; HEADER SECTION ;; id = 31278 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 1 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; ext-cust.squarespace.com. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (1 record) squarespace.com. 900 IN SOA ( dns1.p06.nsone.net. dns-admin.squarespace.com. 1663787404 ;serial 3600 ;refresh 600 ;retry 604800 ;expire 900 ;minimum ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Query to ns04.squarespacedns.com for ext-cust.squarespace.com/A
	ext-cust.squarespace.com A RR has value 198.185.159.144
	ext-cust.squarespace.com A RR has value 198.49.23.144
	ext-cust.squarespace.com A RR has value 198.49.23.145
	ext-cust.squarespace.com A RR has value 198.185.159.145
	No RRSIGs found

squarespace.com

	Query to ns01.squarespacedns.com for ext-cust.squarespace.com/A
	Received 117 bytes from 45.54.22.1
	;; Response received from [45.54.22.1] 117 octets ;; HEADER SECTION ;; id = 36639 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 4 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; ext-cust.squarespace.com. IN A ;; ANSWER SECTION (4 records) ext-cust.squarespace.com. 300 IN A 198.185.159.144 ext-cust.squarespace.com. 300 IN A 198.49.23.144 ext-cust.squarespace.com. 300 IN A 198.49.23.145 ext-cust.squarespace.com. 300 IN A 198.185.159.145 ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	ns01.squarespacedns.com is authoritative for ext-cust.squarespace.com
	Query to ns02.squarespacedns.com for ext-cust.squarespace.com/DNSKEY
	Received 117 bytes from 45.54.22.65
	;; Response received from [45.54.22.65] 117 octets ;; HEADER SECTION ;; id = 20788 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 1 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; ext-cust.squarespace.com. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (1 record) squarespace.com. 900 IN SOA ( dns1.p06.nsone.net. dns-admin.squarespace.com. 1663787404 ;serial 3600 ;refresh 600 ;retry 604800 ;expire 900 ;minimum ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Query to ns01.squarespacedns.com for ext-cust.squarespace.com/A
	ext-cust.squarespace.com A RR has value 198.185.159.144
	ext-cust.squarespace.com A RR has value 198.49.23.144
	ext-cust.squarespace.com A RR has value 198.49.23.145
	ext-cust.squarespace.com A RR has value 198.185.159.145
	No RRSIGs found

squarespace.com

	Query to ns02.squarespacedns.com for ext-cust.squarespace.com/A
	Received 117 bytes from 45.54.22.65
	;; Response received from [45.54.22.65] 117 octets ;; HEADER SECTION ;; id = 54932 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 4 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; ext-cust.squarespace.com. IN A ;; ANSWER SECTION (4 records) ext-cust.squarespace.com. 300 IN A 198.185.159.144 ext-cust.squarespace.com. 300 IN A 198.49.23.144 ext-cust.squarespace.com. 300 IN A 198.49.23.145 ext-cust.squarespace.com. 300 IN A 198.185.159.145 ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	ns02.squarespacedns.com is authoritative for ext-cust.squarespace.com
	Query to ns03.squarespacedns.com for ext-cust.squarespace.com/DNSKEY
	Received 117 bytes from 45.54.22.129
	;; Response received from [45.54.22.129] 117 octets ;; HEADER SECTION ;; id = 58862 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 1 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; ext-cust.squarespace.com. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (1 record) squarespace.com. 900 IN SOA ( dns1.p06.nsone.net. dns-admin.squarespace.com. 1663787404 ;serial 3600 ;refresh 600 ;retry 604800 ;expire 900 ;minimum ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Query to ns02.squarespacedns.com for ext-cust.squarespace.com/A
	ext-cust.squarespace.com A RR has value 198.185.159.144
	ext-cust.squarespace.com A RR has value 198.49.23.144
	ext-cust.squarespace.com A RR has value 198.49.23.145
	ext-cust.squarespace.com A RR has value 198.185.159.145
	No RRSIGs found

squarespace.com

	Query to ns03.squarespacedns.com for ext-cust.squarespace.com/A
	Received 117 bytes from 45.54.22.129
	;; Response received from [45.54.22.129] 117 octets ;; HEADER SECTION ;; id = 54719 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 4 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; ext-cust.squarespace.com. IN A ;; ANSWER SECTION (4 records) ext-cust.squarespace.com. 300 IN A 198.185.159.144 ext-cust.squarespace.com. 300 IN A 198.49.23.144 ext-cust.squarespace.com. 300 IN A 198.49.23.145 ext-cust.squarespace.com. 300 IN A 198.185.159.145 ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	ns03.squarespacedns.com is authoritative for ext-cust.squarespace.com
	Query to ns03.squarespacedns.com for ext-cust.squarespace.com/DNSKEY
	Query to ns03.squarespacedns.com for ext-cust.squarespace.com/A
	ext-cust.squarespace.com A RR has value 198.185.159.144
	ext-cust.squarespace.com A RR has value 198.49.23.144
	ext-cust.squarespace.com A RR has value 198.49.23.145
	ext-cust.squarespace.com A RR has value 198.185.159.145
	No RRSIGs found

squarespace.com

	Query to dns1.p03.nsone.net for ext-cust.squarespace.com/A
	Received 117 bytes from 198.51.44.3
	;; Response received from [198.51.44.3] 117 octets ;; HEADER SECTION ;; id = 53414 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 4 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; ext-cust.squarespace.com. IN A ;; ANSWER SECTION (4 records) ext-cust.squarespace.com. 300 IN A 198.185.159.144 ext-cust.squarespace.com. 300 IN A 198.49.23.144 ext-cust.squarespace.com. 300 IN A 198.49.23.145 ext-cust.squarespace.com. 300 IN A 198.185.159.145 ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	dns1.p03.nsone.net is authoritative for ext-cust.squarespace.com
	Query to dns1.p03.nsone.net for ext-cust.squarespace.com/DNSKEY
	Query to dns1.p03.nsone.net for ext-cust.squarespace.com/A
	ext-cust.squarespace.com A RR has value 198.185.159.144
	ext-cust.squarespace.com A RR has value 198.49.23.144
	ext-cust.squarespace.com A RR has value 198.49.23.145
	ext-cust.squarespace.com A RR has value 198.185.159.145
	No RRSIGs found

Move your mouse over any or symbols for remediation hints.

Want a second opinion? Test www.smartlivingspaces.nz at dnsviz.net.

DNSSEC Debugger

↓ Advanced options ↑ Advanced options

Trust Anchor:
Name Servers: