$ dig www.lancaster.ac.uk @1.1.1.1
; <<>> DiG 9.11.3-1ubuntu1.5-Ubuntu <<>> www.lancaster.ac.uk @1.1.1.1
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: SERVFAIL, id: 56629
;; flags: qr rd ra; QUERY: 1, ANSWER: 2, AUTHORITY: 0, ADDITIONAL: 1
;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 1452
;; QUESTION SECTION:
;www.lancaster.ac.uk. IN A
;; ANSWER SECTION:
www.lancaster.ac.uk. 43200 IN CNAME www.lancs.ac.uk.
www.lancs.ac.uk. 1048 IN A 148.88.65.80
;; Query time: 126 msec
;; SERVER: 1.1.1.1#53(1.1.1.1)
;; WHEN: Mon Mar 25 20:05:17 MSK 2019
;; MSG SIZE rcvd: 88
Same query is OK with google:
$ dig www.lancaster.ac.uk @8.8.8.8
; <<>> DiG 9.11.3-1ubuntu1.5-Ubuntu <<>> www.lancaster.ac.uk @8.8.8.8
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 12029
;; flags: qr rd ra ad; QUERY: 1, ANSWER: 3, AUTHORITY: 0, ADDITIONAL: 1
;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 512
;; QUESTION SECTION:
;www.lancaster.ac.uk. IN A
;; ANSWER SECTION:
lancaster.ac.uk. 18385 IN DNAME lancs.ac.uk.
www.lancaster.ac.uk. 18385 IN CNAME www.lancs.ac.uk.
www.lancs.ac.uk. 385 IN A 148.88.65.80
;; Query time: 17 msec
;; SERVER: 8.8.8.8#53(8.8.8.8)
;; WHEN: Mon Mar 25 20:09:39 MSK 2019
;; MSG SIZE rcvd: 113
Tested DNSSEC here:
https://dnssec-analyzer.verisignlabs.com/www.lancaster.ac.uk
– no issues.