Is DNS safe again?

[briandfoy]

Verisign restored the DNS on Feb 2, but various servers may have cached values or may have sinkholed it.

I want to know if there are parts of the world that are still seeing different answers.

• Thumbs up if you see the right results
• Comment if you can see something different. Tell me where you are, roughly. Show me the result of dig whoami.akamai.net +short.

Here's the good DNS, with addresses in 151.101/16:

$ dig perl.com

; <<>> DiG 9.10.6 <<>> perl.com
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 9525
;; flags: qr rd ra; QUERY: 1, ANSWER: 4, AUTHORITY: 0, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 1232
;; QUESTION SECTION:
;perl.com.			IN	A

;; ANSWER SECTION:
perl.com.		294	IN	A	151.101.194.132
perl.com.		294	IN	A	151.101.66.132
perl.com.		294	IN	A	151.101.130.132
perl.com.		294	IN	A	151.101.2.132

;; Query time: 50 msec
;; SERVER: 1.1.1.1#53(1.1.1.1)
;; WHEN: Thu Feb 04 18:38:53 EST 2021
;; MSG SIZE  rcvd: 101

And here's the good WHOIS with name servers in *.BITNAMES.COM. It's back with Network Solutions now (Feb 5):

$ whois perl.com
   Domain Name: PERL.COM
   Registry Domain ID: 432086_DOMAIN_COM-VRSN
   Registrar WHOIS Server: whois.networksolutions.com
   Registrar URL: http://networksolutions.com
   Updated Date: 2021-02-05T19:59:11Z
   Creation Date: 1994-08-16T04:00:00Z
   Registry Expiry Date: 2031-02-05T16:54:08Z
   Registrar: Network Solutions, LLC
   Registrar IANA ID: 2
   Registrar Abuse Contact Email: abuse@web.com
   Registrar Abuse Contact Phone: +1.8003337680
   Domain Status: clientTransferProhibited https://icann.org/epp#clientTransferProhibited
   Name Server: NS1.EU.BITNAMES.COM
   Name Server: NS1.US.BITNAMES.COM
   Name Server: NS2.EU.BITNAMES.COM
   Name Server: NS2.US.BITNAMES.COM
   Name Server: NS3.US.BITNAMES.COM
   DNSSEC: unsigned
   URL of the ICANN Whois Inaccuracy Complaint Form: https://www.icann.org/wicf/
>>> Last update of whois database: 2021-02-07T00:06:52Z <<<

You can also use dig to see the name servers a particular server is using. Here's Cloudflare, for example:

$ dig @1.1.1.1 +short NS perl.com
ns2.us.bitnames.com.
ns3.us.bitnames.com.
ns1.eu.bitnames.com.
ns2.eu.bitnames.com.
ns1.us.bitnames.com.

[briandfoy]

DNS has been safe for awhile, so closing.