xn--wgbh1c. DNSSEC fail
Jan Schaumann
jschauma at netmeister.org
Sat Jan 3 20:13:27 UTC 2026
Hi,
It looks like DNSSEC is broken on the xn--wgbh1c.
ccTLD (Arabic Egypt):
$ dig xn--wgbh1c. soa
;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 512
; EDE: 7 (Signature Expired): (for DNSKEY xn--wgbh1c., id = 65350: RRSIG xn--wgbh1c., expiration = 1766103481)
This appears to have expired since
$ TZ=UTC date -j -f %s 1766103481
Fri Dec 19 00:18:01 UTC 2025
https://domain.eg/en/contact-us/ lists domreg at scu.eg
as the contact address, so I've reached out there, but
IME the ccTLD operators are not always reliably
reachable or responsive, so sharing here as well in
case anybody happens to know the right folks.
-Jan
More information about the dns-operations
mailing list