Route53: domains found from AWS name servers, but not "public" name servers

Hello There, It seems like you've done a thorough investigation into the issue you're experiencing with your transferred domains in Amazon Route 53. Based on the information you've provided, it appears that the issue might be related to DNSSEC configuration discrepancies between "Registered Domains" and "Hosted Zone."

DNSSEC (Domain Name System Security Extensions) is used to add an extra layer of security to DNS records by digitally signing them. If there is a mismatch or inconsistency in the DNSSEC configuration between the "Registered Domains" settings and the "Hosted Zone" settings in Route 53, it could cause DNS queries to fail or return "SERVFAIL" responses.

Here are a few steps you can take to further diagnose and potentially resolve the issue:

1. Confirm DNSSEC Configuration: Double-check the DNSSEC configuration for both the "Registered Domains" and the corresponding "Hosted Zone" in Route 53. Ensure that they match and are correctly set up.

2. Check DNSSEC Keys: Verify that the DNSSEC keys are correctly generated and configured in both the domain registrar settings and Route 53's hosted zone settings.

3. Propagation Delays: While DNS updates typically propagate within a few hours, it's possible that some ISPs or DNS resolvers have cached the old DNSSEC information, causing delays in the propagation of updates. However, after 48 hours, most caches should have cleared.

4. Retry DNSSEC Configuration: If you've made changes to DNSSEC settings, give it some time for the changes to propagate, and then retest using external DNS tools like dig or online DNS checking tools to ensure that the DNSSEC configuration is consistent and correct.

5. Contact AWS Support: If the issue persists, consider reaching out to AWS Support for assistance. They can investigate the issue further and help you identify any specific configuration problems.

6. Domain Registrar Support: If you continue to experience issues, you might also consider reaching out to the domain registrar's support team for guidance. They can provide insights into the domain transfer process and ensure that the DNSSEC settings are aligned.

Remember that DNSSEC can be a complex area, and small configuration discrepancies can lead to unexpected issues. It's also worth noting that DNS propagation can vary, and even though most DNS updates occur quickly, it's possible to experience intermittent issues during the transition period.

As a final note, if you made recent changes to DNSSEC settings, I recommend waiting a bit longer to allow for the changes to propagate fully. If the problem persists beyond that, consider reaching out to AWS Support or the domain registrar's support team for further assistance.

I hope this help