DNSSEC Analyzer - cyberthreat.id

Domain Name:

Time: 2020-12-05 13:53:53 UTC, NTP stratum 4

Analyzing DNSSEC problems for cyberthreat.id

DS=20326/SHA-256 is now in the chain-of-trust

	Checking DS between Trust Anchor and .
	`. IN DS ( 20326 8 2 e06d44b80b8f1d39a95c0b0d7c65d08458e880409bbc683457104237c7f8ec8d )`
	Query to e.root-servers.net for ./DNSKEY
	Received 864 bytes from 192.203.230.10
	;; Answer received from 192.203.230.10 (864 bytes) ;; HEADER SECTION ;; id = 53474 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1472 ;; option: ;; QUESTION SECTION (1 record) ;; . IN DNSKEY ;; ANSWER SECTION (3 records) . 172800 IN DNSKEY ( 256 3 8 AwEAAfC/6HLClwss6h7rPfoG2cliv4/SPJRd2HPEglRsvKZRbPP2RLfiobeAkczcdqaD5q8loEt1 4lcTgDqwzOISZ3YvSVkM4JRMFwKzcjukKo5CsDVbMmhTD0C0yxWICRQ1M+Y5/XkZAT7mt4cb3fWc N9xgyq1wEXQX+zdLQHrNEVQSiL5SoA5cOtCSoQ45n8bKDXdw/0jjP9Rw1FVKsdzLVkQSrVMm8k30 WUkHm/SK/n/954KENkdQOA6Li2vO9nicQdegyAkDeNJCdPN/p3jEhCTQLyO4AlAmyaPcDHeeo7OX r/VsYu4NTDde9hBuS0zx/rewD+BvSnmnNHNmH2FjUE8= ) ; Key ID = 26116 . 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; Key ID = 20326 . 172800 IN RRSIG ( DNSKEY 8 0 172800 20201221000000 20201130000000 20326 . Didi7hzR3l250KyQuwL9RCVB/ZqJEaAmtPe5nR1XxmOAYJ/pA40v9NXdPODZiFdRcFha8+jaE4+r S2F2tROdxicdDsmCqw6Ekf3JAz4h4ybdkgf04+4E5VVEULQvvc+fAtv9N7ToBUqezWm/7kkVwtax ga7j1t+V6gheVrTgWmlizqfXGzYJYA8+brHy6oqVwAn+cayMbxFBJZ2ywzoOfJbYHtLm9Tlco86V 6uqlOmE1mEKYyLu0PNL9HgPu+Wy/F0fzx3vma+2mgrRMLsns0oAlAr+8CqzSwzuF4d/oDj3oKlbe 8YpKpXx6JbCInRitab8ODmWpZy+DbXJ8K6OHRw== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1472 ;; option:
	Found 2 DNSKEY records for .
	`. 172800 IN DNSKEY ( 256 3 8 AwEAAfC/6HLClwss6h7rPfoG2cliv4/SPJRd2HPEglRsvKZRbPP2RLfiobeAkczcdqaD5q8loEt1 4lcTgDqwzOISZ3YvSVkM4JRMFwKzcjukKo5CsDVbMmhTD0C0yxWICRQ1M+Y5/XkZAT7mt4cb3fWc N9xgyq1wEXQX+zdLQHrNEVQSiL5SoA5cOtCSoQ45n8bKDXdw/0jjP9Rw1FVKsdzLVkQSrVMm8k30 WUkHm/SK/n/954KENkdQOA6Li2vO9nicQdegyAkDeNJCdPN/p3jEhCTQLyO4AlAmyaPcDHeeo7OX r/VsYu4NTDde9hBuS0zx/rewD+BvSnmnNHNmH2FjUE8= ) ; Key ID = 26116`
	`. 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; Key ID = 20326`
	DNSKEY=20326/SEP is now in the chain-of-trust
	DS=20326/SHA-256 verifies DNSKEY=20326/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`. 172800 IN RRSIG ( DNSKEY 8 0 172800 20201221000000 20201130000000 20326 . Didi7hzR3l250KyQuwL9RCVB/ZqJEaAmtPe5nR1XxmOAYJ/pA40v9NXdPODZiFdRcFha8+jaE4+r S2F2tROdxicdDsmCqw6Ekf3JAz4h4ybdkgf04+4E5VVEULQvvc+fAtv9N7ToBUqezWm/7kkVwtax ga7j1t+V6gheVrTgWmlizqfXGzYJYA8+brHy6oqVwAn+cayMbxFBJZ2ywzoOfJbYHtLm9Tlco86V 6uqlOmE1mEKYyLu0PNL9HgPu+Wy/F0fzx3vma+2mgrRMLsns0oAlAr+8CqzSwzuF4d/oDj3oKlbe 8YpKpXx6JbCInRitab8ODmWpZy+DbXJ8K6OHRw== )`
	RRSIG=20326 and DNSKEY=20326/SEP verifies the DNSKEY RRset
	DNSKEY=26116 is now in the chain-of-trust
	Query to m.root-servers.net for cyberthreat.id/A
	Received 729 bytes from 202.12.27.33
	;; Answer received from 202.12.27.33 (729 bytes) ;; HEADER SECTION ;; id = 28784 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 8 arcount = 11 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; cyberthreat.id. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (8 records) id. 172800 IN NS e.dns.id. id. 172800 IN NS ns4.apnic.net. id. 172800 IN NS b.dns.id. id. 172800 IN NS d.dns.id. id. 172800 IN NS c.dns.id. id. 86400 IN DS 26887 8 1 2f1e41b5bf7da7f134b4025e8242d3a9ef54801c id. 86400 IN DS ( 26887 8 2 28be22003a1afb1ed9a7bb82482274e2db5f09a6c50702c731e040d2257347ea ) id. 86400 IN RRSIG ( DS 8 1 86400 20201218050000 20201205040000 26116 . CmGBx2dC0ODRYFAm4IPmjz36ZO3AYyjflt15Kw4RdoD//x1Qg54nJS+baGNg+cuJGaiRLUQowTA2 NiUbl2zHLsp5bCVuIh/JCD7Jsr0w9y8K33y52kRvpas2WeSb27teXAw0LNaNqDrTzbYNyFaUdAQb E6ijl6lVbB3mIZqZHB52cJ3Vwbq1cKe6pqJN2wCseByuUVy0RMkJZdIuDcs/xRYr2LiyWJplEhVx +Etmn2bGc0cNyDJciNDK7cMq4DzCo1g+JF6ysPqyyaQjJrenOkYA11ZF7HUIePKuVI+tqBK/dyse 2/l/Djb7tpuO4OvZ5aDgFCIfG+vI6jXRBV4KWg== ) ;; ADDITIONAL SECTION (11 records) b.dns.id. 172800 IN A 103.19.179.179 c.dns.id. 172800 IN A 103.19.178.178 d.dns.id. 172800 IN A 45.126.57.57 e.dns.id. 172800 IN A 103.19.177.177 ns4.apnic.net. 172800 IN A 202.12.31.53 b.dns.id. 172800 IN AAAA 2402:ee80:b::b c.dns.id. 172800 IN AAAA 2402:ee80:c::c d.dns.id. 172800 IN AAAA 2402:ee80:d::d e.dns.id. 172800 IN AAAA 2001:df5:4000:4::4 ns4.apnic.net. 172800 IN AAAA 2001:dd8:12::53 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Query to i.root-servers.net for id/DNSKEY
	Received 719 bytes from 192.36.148.17
	;; Answer received from 192.36.148.17 (719 bytes) ;; HEADER SECTION ;; id = 13808 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 8 arcount = 11 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; id. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (8 records) id. 172800 IN NS b.dns.id. id. 172800 IN NS d.dns.id. id. 172800 IN NS e.dns.id. id. 172800 IN NS ns4.apnic.net. id. 172800 IN NS c.dns.id. id. 86400 IN DS 26887 8 1 2f1e41b5bf7da7f134b4025e8242d3a9ef54801c id. 86400 IN DS ( 26887 8 2 28be22003a1afb1ed9a7bb82482274e2db5f09a6c50702c731e040d2257347ea ) id. 86400 IN RRSIG ( DS 8 1 86400 20201218050000 20201205040000 26116 . CmGBx2dC0ODRYFAm4IPmjz36ZO3AYyjflt15Kw4RdoD//x1Qg54nJS+baGNg+cuJGaiRLUQowTA2 NiUbl2zHLsp5bCVuIh/JCD7Jsr0w9y8K33y52kRvpas2WeSb27teXAw0LNaNqDrTzbYNyFaUdAQb E6ijl6lVbB3mIZqZHB52cJ3Vwbq1cKe6pqJN2wCseByuUVy0RMkJZdIuDcs/xRYr2LiyWJplEhVx +Etmn2bGc0cNyDJciNDK7cMq4DzCo1g+JF6ysPqyyaQjJrenOkYA11ZF7HUIePKuVI+tqBK/dyse 2/l/Djb7tpuO4OvZ5aDgFCIfG+vI6jXRBV4KWg== ) ;; ADDITIONAL SECTION (11 records) ns4.apnic.net. 172800 IN A 202.12.31.53 e.dns.id. 172800 IN A 103.19.177.177 d.dns.id. 172800 IN A 45.126.57.57 c.dns.id. 172800 IN A 103.19.178.178 b.dns.id. 172800 IN A 103.19.179.179 ns4.apnic.net. 172800 IN AAAA 2001:dd8:12::53 e.dns.id. 172800 IN AAAA 2001:df5:4000:4::4 d.dns.id. 172800 IN AAAA 2402:ee80:d::d c.dns.id. 172800 IN AAAA 2402:ee80:c::c b.dns.id. 172800 IN AAAA 2402:ee80:b::b ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found child zone id

	Checking DS between . and id
	Query to f.root-servers.net for id/DS
	Received 402 bytes from 192.5.5.241
	;; Answer received from 192.5.5.241 (402 bytes) ;; HEADER SECTION ;; id = 56720 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1472 ;; option: ;; QUESTION SECTION (1 record) ;; id. IN DS ;; ANSWER SECTION (3 records) id. 86400 IN DS 26887 8 1 2f1e41b5bf7da7f134b4025e8242d3a9ef54801c id. 86400 IN DS ( 26887 8 2 28be22003a1afb1ed9a7bb82482274e2db5f09a6c50702c731e040d2257347ea ) id. 86400 IN RRSIG ( DS 8 1 86400 20201218050000 20201205040000 26116 . CmGBx2dC0ODRYFAm4IPmjz36ZO3AYyjflt15Kw4RdoD//x1Qg54nJS+baGNg+cuJGaiRLUQowTA2 NiUbl2zHLsp5bCVuIh/JCD7Jsr0w9y8K33y52kRvpas2WeSb27teXAw0LNaNqDrTzbYNyFaUdAQb E6ijl6lVbB3mIZqZHB52cJ3Vwbq1cKe6pqJN2wCseByuUVy0RMkJZdIuDcs/xRYr2LiyWJplEhVx +Etmn2bGc0cNyDJciNDK7cMq4DzCo1g+JF6ysPqyyaQjJrenOkYA11ZF7HUIePKuVI+tqBK/dyse 2/l/Djb7tpuO4OvZ5aDgFCIfG+vI6jXRBV4KWg== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1472 ;; option:
	Found 2 DS records for id in the . zone
	DS=26887/SHA-1 has algorithm RSASHA256
	DS=26887/SHA-256 has algorithm RSASHA256
	Found 1 RRSIGs over DS RRset
	`id. 86400 IN RRSIG ( DS 8 1 86400 20201218050000 20201205040000 26116 . CmGBx2dC0ODRYFAm4IPmjz36ZO3AYyjflt15Kw4RdoD//x1Qg54nJS+baGNg+cuJGaiRLUQowTA2 NiUbl2zHLsp5bCVuIh/JCD7Jsr0w9y8K33y52kRvpas2WeSb27teXAw0LNaNqDrTzbYNyFaUdAQb E6ijl6lVbB3mIZqZHB52cJ3Vwbq1cKe6pqJN2wCseByuUVy0RMkJZdIuDcs/xRYr2LiyWJplEhVx +Etmn2bGc0cNyDJciNDK7cMq4DzCo1g+JF6ysPqyyaQjJrenOkYA11ZF7HUIePKuVI+tqBK/dyse 2/l/Djb7tpuO4OvZ5aDgFCIfG+vI6jXRBV4KWg== )`
	RRSIG=26116 and DNSKEY=26116 verifies the DS RRset
	DS=26887/SHA-1 is now in the chain-of-trust
	`id. 86400 IN DS 26887 8 1 2f1e41b5bf7da7f134b4025e8242d3a9ef54801c`
	`id. 86400 IN DS ( 26887 8 2 28be22003a1afb1ed9a7bb82482274e2db5f09a6c50702c731e040d2257347ea )`
	Query to ns4.apnic.net for id/DNSKEY
	Received 1163 bytes from 202.12.31.53
	;; Answer received from 202.12.31.53 (1163 bytes) ;; HEADER SECTION ;; id = 4144 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 4 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option: ;; QUESTION SECTION (1 record) ;; id. IN DNSKEY ;; ANSWER SECTION (4 records) id. 86400 IN DNSKEY ( 257 3 8 AwEAAcTe9z3F7RaSKwc6BUrfOAZTKl2uV+VfcYu3+/L5n2AmmqRnep4tUvLLp6awc0/G0sqADalq iLwossfpihHwyXzpD7/DwkUNKtJpbfafeKKqoO7PK10T/tnEyjC6TQLenZIpzVEQIH9Qd0OGr6xb C+whZBfLWwKl8QpdrqcQ6gpH5KpRvvSmo6hJ50SEOqTbJLOtvA4MtBP8k1yKSXDbXTGMniW/wRZf C3bMJGtK2xMY2wPOXsYM9u+MOWaqdhOKdxzG0je9ztz+F97LJa5dke48KcNmHicwDnIHtLm+8Xnm qn/MAPJHnB1NWMWXiMZR8ugrFoPXSkw5IoemtNMjxeM= ) ; Key ID = 26887 id. 86400 IN DNSKEY ( 256 3 8 AwEAAckf2f45NrA7QrZhdbbrBV1ku04QvQWGBqF3gPQ1fe473tV8OVztNzshC4sai1hQDVQ0b5Q1 AWb3u6I6MEtDIvWA2EJU69IRAFj3FcuJoEbMXCKk9xeusPrgnAyu8zOn7Ur2krJ0AVn6nBNjsINA O8UMEC3nT1Loot0GW0Wo98L8gAYwfUofHXCsUlAeOM2m7j2zKu5sVWH+H+/7H4+dEDMDaUj0exqx FVxhsMVsmgqtslmdS7wPWUa5ZB6fm9dybE8aZlSwyeyIRyso6khHRFX7csxbECjfrmUJ9YKMH9td 5/gHVT+HQNQeIJ1khIS21SvWt/GHqcGqDxvS/fTQuRU= ) ; Key ID = 22449 id. 86400 IN RRSIG ( DNSKEY 8 1 86400 20201218215505 20201118215124 22449 id. P5D0RWIp3uS0o4AwX+mt6fU41wsscNZklBS1OLHM4SwUoiHp/bP6rhPfz01ve5DJkTlBhgO+Mh3z 8VZycnbpEaVjwwx1ZkqAwfULcVxk4NaJg7ruGX+Y50xa/mRquQa9rqvF3K2hUPCQPwHdn0KBKoz1 5mgA9kte+QYRPz9g8QZm4GX9nykYVOrrf0FA7j4zCRRiiyTr0IMqwgVkA/cocpZUgMiCVwjOb/v0 PbmNXHG7zF8z8Dp/69RhQjgp/tDzIYZM5QQYDcAikXDDqZiId5sOqpu7kZ8M2PPoQp07dyCVUlhS 5P0e8P4z87AFzFs2BA+qgZlKeeGcnoCW60ijFA== ) id. 86400 IN RRSIG ( DNSKEY 8 1 86400 20201218215505 20201118215124 26887 id. k1fQUYvWu8lKrnmWq/H2rhnJHxiY+4zdg6GrW8GyI9Ep9yX5Zenrf0nulPSIKdwEzw6W4zExRzF1 JSxcvG1uncFt0rkwqkRq1KF3n5oHX+YAvMjwVN2dclk5IPM7479L3RDAkHDfsePQySzcNUH9lcyV v4u5VzxxqVJq6GtQ8YEwD0kGezHKLXHhlVmZJVYZA50XYQFREUKHeY7CK4KBk+j41+nkM/3IVwHg zIobUtERvVI6yR9rRFUXtXQJLGClZgWix+MZ6YHdVjH+GdWfNvCbZ9HnHcy2R/U4W6CI/PJqjlUX H7J8uBusCIlSOtojq+MVfYATYYtZMunGuo66eA== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option:
	Found 2 DNSKEY records for id
	`id. 86400 IN DNSKEY ( 257 3 8 AwEAAcTe9z3F7RaSKwc6BUrfOAZTKl2uV+VfcYu3+/L5n2AmmqRnep4tUvLLp6awc0/G0sqADalq iLwossfpihHwyXzpD7/DwkUNKtJpbfafeKKqoO7PK10T/tnEyjC6TQLenZIpzVEQIH9Qd0OGr6xb C+whZBfLWwKl8QpdrqcQ6gpH5KpRvvSmo6hJ50SEOqTbJLOtvA4MtBP8k1yKSXDbXTGMniW/wRZf C3bMJGtK2xMY2wPOXsYM9u+MOWaqdhOKdxzG0je9ztz+F97LJa5dke48KcNmHicwDnIHtLm+8Xnm qn/MAPJHnB1NWMWXiMZR8ugrFoPXSkw5IoemtNMjxeM= ) ; Key ID = 26887`
	`id. 86400 IN DNSKEY ( 256 3 8 AwEAAckf2f45NrA7QrZhdbbrBV1ku04QvQWGBqF3gPQ1fe473tV8OVztNzshC4sai1hQDVQ0b5Q1 AWb3u6I6MEtDIvWA2EJU69IRAFj3FcuJoEbMXCKk9xeusPrgnAyu8zOn7Ur2krJ0AVn6nBNjsINA O8UMEC3nT1Loot0GW0Wo98L8gAYwfUofHXCsUlAeOM2m7j2zKu5sVWH+H+/7H4+dEDMDaUj0exqx FVxhsMVsmgqtslmdS7wPWUa5ZB6fm9dybE8aZlSwyeyIRyso6khHRFX7csxbECjfrmUJ9YKMH9td 5/gHVT+HQNQeIJ1khIS21SvWt/GHqcGqDxvS/fTQuRU= ) ; Key ID = 22449`
	DNSKEY=26887/SEP is now in the chain-of-trust
	DS=26887/SHA-1 verifies DNSKEY=26887/SEP
	DS=26887/SHA-256 verifies DNSKEY=26887/SEP
	Found 2 RRSIGs over DNSKEY RRset
	`id. 86400 IN RRSIG ( DNSKEY 8 1 86400 20201218215505 20201118215124 22449 id. P5D0RWIp3uS0o4AwX+mt6fU41wsscNZklBS1OLHM4SwUoiHp/bP6rhPfz01ve5DJkTlBhgO+Mh3z 8VZycnbpEaVjwwx1ZkqAwfULcVxk4NaJg7ruGX+Y50xa/mRquQa9rqvF3K2hUPCQPwHdn0KBKoz1 5mgA9kte+QYRPz9g8QZm4GX9nykYVOrrf0FA7j4zCRRiiyTr0IMqwgVkA/cocpZUgMiCVwjOb/v0 PbmNXHG7zF8z8Dp/69RhQjgp/tDzIYZM5QQYDcAikXDDqZiId5sOqpu7kZ8M2PPoQp07dyCVUlhS 5P0e8P4z87AFzFs2BA+qgZlKeeGcnoCW60ijFA== )`
	`id. 86400 IN RRSIG ( DNSKEY 8 1 86400 20201218215505 20201118215124 26887 id. k1fQUYvWu8lKrnmWq/H2rhnJHxiY+4zdg6GrW8GyI9Ep9yX5Zenrf0nulPSIKdwEzw6W4zExRzF1 JSxcvG1uncFt0rkwqkRq1KF3n5oHX+YAvMjwVN2dclk5IPM7479L3RDAkHDfsePQySzcNUH9lcyV v4u5VzxxqVJq6GtQ8YEwD0kGezHKLXHhlVmZJVYZA50XYQFREUKHeY7CK4KBk+j41+nkM/3IVwHg zIobUtERvVI6yR9rRFUXtXQJLGClZgWix+MZ6YHdVjH+GdWfNvCbZ9HnHcy2R/U4W6CI/PJqjlUX H7J8uBusCIlSOtojq+MVfYATYYtZMunGuo66eA== )`
	RRSIG=22449 and DNSKEY=22449 verifies the DNSKEY RRset
	RRSIG=26887 and DNSKEY=26887/SEP verifies the DNSKEY RRset
	DNSKEY=22449 is now in the chain-of-trust
	Query to d.dns.id for cyberthreat.id/A
	Received 516 bytes from 45.126.57.57
	;; Answer received from 45.126.57.57 (516 bytes) ;; HEADER SECTION ;; id = 5413 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 4 arcount = 5 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; cyberthreat.id. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (4 records) cyberthreat.id. 3600 IN NS nx1.ruangsiber.id. cyberthreat.id. 3600 IN NS nx2.ruangsiber.id. cyberthreat.id. 3600 IN DS ( 24997 8 2 612232995827e6bbd19db170e67349635749b3e15ce2ea1ac8c73a681864f7cf ) cyberthreat.id. 3600 IN RRSIG ( DS 8 2 3600 20201218050515 20201118040703 22449 id. lA1zgaqop+1QMO9cIq+H+N64cHjWWCSb8OaLpTGkZBAb4ecgORCw0rCC+w0n+A/xY0r7vHcrNWTs r4VEYRZvfBn+UpXgmLFDW6UzztS1sli/bcGsWnz7jyOAsH+AFHMXRShN21W3gPPO5ojHczQdzNEj SEsuzGSz+ePQMQRNWctHinqpeZafeBiko6nEFvlNMlvuo+aUpXxInOdqEdSuziadzK8stfpORHzX I7dQV6Xuvl0TtRTtXg12XRneJY7jDlTJcfK7tRNS4vSpSh+VUEmTIts39QwXs5nIA69jK3MVMmvW CFlyS+BXS//7ygWobPRvzXscw5yLPmaNpdrMZg== ) ;; ADDITIONAL SECTION (5 records) nx1.ruangsiber.id. 3600 IN A 103.149.180.1 nx1.ruangsiber.id. 3600 IN AAAA 2001:df3:3580:d42::1 nx2.ruangsiber.id. 3600 IN A 103.149.180.2 nx2.ruangsiber.id. 3600 IN AAAA 2001:df3:3580:d42::2 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Query to e.dns.id for cyberthreat.id/DNSKEY
	Received 516 bytes from 103.19.177.177
	;; Answer received from 103.19.177.177 (516 bytes) ;; HEADER SECTION ;; id = 27263 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 4 arcount = 5 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; cyberthreat.id. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (4 records) cyberthreat.id. 3600 IN NS nx1.ruangsiber.id. cyberthreat.id. 3600 IN NS nx2.ruangsiber.id. cyberthreat.id. 3600 IN DS ( 24997 8 2 612232995827e6bbd19db170e67349635749b3e15ce2ea1ac8c73a681864f7cf ) cyberthreat.id. 3600 IN RRSIG ( DS 8 2 3600 20201218050515 20201118040703 22449 id. lA1zgaqop+1QMO9cIq+H+N64cHjWWCSb8OaLpTGkZBAb4ecgORCw0rCC+w0n+A/xY0r7vHcrNWTs r4VEYRZvfBn+UpXgmLFDW6UzztS1sli/bcGsWnz7jyOAsH+AFHMXRShN21W3gPPO5ojHczQdzNEj SEsuzGSz+ePQMQRNWctHinqpeZafeBiko6nEFvlNMlvuo+aUpXxInOdqEdSuziadzK8stfpORHzX I7dQV6Xuvl0TtRTtXg12XRneJY7jDlTJcfK7tRNS4vSpSh+VUEmTIts39QwXs5nIA69jK3MVMmvW CFlyS+BXS//7ygWobPRvzXscw5yLPmaNpdrMZg== ) ;; ADDITIONAL SECTION (5 records) nx1.ruangsiber.id. 3600 IN A 103.149.180.1 nx2.ruangsiber.id. 3600 IN A 103.149.180.2 nx1.ruangsiber.id. 3600 IN AAAA 2001:df3:3580:d42::1 nx2.ruangsiber.id. 3600 IN AAAA 2001:df3:3580:d42::2 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found child zone cyberthreat.id

cyberthreat.id

	Checking DS between id and cyberthreat.id
	Query to c.dns.id for cyberthreat.id/DS
	Received 381 bytes from 103.19.178.178
	;; Answer received from 103.19.178.178 (381 bytes) ;; HEADER SECTION ;; id = 24152 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; cyberthreat.id. IN DS ;; ANSWER SECTION (2 records) cyberthreat.id. 3600 IN DS ( 24997 8 2 612232995827e6bbd19db170e67349635749b3e15ce2ea1ac8c73a681864f7cf ) cyberthreat.id. 3600 IN RRSIG ( DS 8 2 3600 20201218050515 20201118040703 22449 id. lA1zgaqop+1QMO9cIq+H+N64cHjWWCSb8OaLpTGkZBAb4ecgORCw0rCC+w0n+A/xY0r7vHcrNWTs r4VEYRZvfBn+UpXgmLFDW6UzztS1sli/bcGsWnz7jyOAsH+AFHMXRShN21W3gPPO5ojHczQdzNEj SEsuzGSz+ePQMQRNWctHinqpeZafeBiko6nEFvlNMlvuo+aUpXxInOdqEdSuziadzK8stfpORHzX I7dQV6Xuvl0TtRTtXg12XRneJY7jDlTJcfK7tRNS4vSpSh+VUEmTIts39QwXs5nIA69jK3MVMmvW CFlyS+BXS//7ygWobPRvzXscw5yLPmaNpdrMZg== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found 1 DS records for cyberthreat.id in the id zone
	DS=24997/SHA-256 has algorithm RSASHA256
	Found 1 RRSIGs over DS RRset
	`cyberthreat.id. 3600 IN RRSIG ( DS 8 2 3600 20201218050515 20201118040703 22449 id. lA1zgaqop+1QMO9cIq+H+N64cHjWWCSb8OaLpTGkZBAb4ecgORCw0rCC+w0n+A/xY0r7vHcrNWTs r4VEYRZvfBn+UpXgmLFDW6UzztS1sli/bcGsWnz7jyOAsH+AFHMXRShN21W3gPPO5ojHczQdzNEj SEsuzGSz+ePQMQRNWctHinqpeZafeBiko6nEFvlNMlvuo+aUpXxInOdqEdSuziadzK8stfpORHzX I7dQV6Xuvl0TtRTtXg12XRneJY7jDlTJcfK7tRNS4vSpSh+VUEmTIts39QwXs5nIA69jK3MVMmvW CFlyS+BXS//7ygWobPRvzXscw5yLPmaNpdrMZg== )`
	RRSIG=22449 and DNSKEY=22449 verifies the DS RRset
	DS=24997/SHA-256 is now in the chain-of-trust
	`cyberthreat.id. 3600 IN DS ( 24997 8 2 612232995827e6bbd19db170e67349635749b3e15ce2ea1ac8c73a681864f7cf )`
	Query to nx2.ruangsiber.id for cyberthreat.id/DNSKEY
	Timeout querying nx2.ruangsiber.id/103.149.180.2 for cyberthreat.id/DNSKEY
	All Queries to nx2.ruangsiber.id for cyberthreat.id/DNSKEY timed out or failed
	Query to nx1.ruangsiber.id for cyberthreat.id/DNSKEY
	Received 769 bytes from 103.149.180.1
	;; Answer received from 103.149.180.1 (769 bytes) ;; HEADER SECTION ;; id = 50181 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1680 ;; option: ;; QUESTION SECTION (1 record) ;; cyberthreat.id. IN DNSKEY ;; ANSWER SECTION (3 records) cyberthreat.id. 86400 IN DNSKEY ( 257 3 8 AwEAAes75iWSeDcRiX3eiB1qYM6ECEh7I+wnYDOSosX0OpB6GHXKPHFdd6SD4eBqYc4+9DUsxx+F 15pvRqAhZ11NRXZIhG5llWZjgkPkROtiuYv/enFOI7ubkRlGtltnJqKYsLD/VDfoYUZYb5jO4yTs U5V7dB3/P8AJk/V8pj7VDJwAkrPJhsPl6CwaIDotQJSAypasu83wsB2k3znoqpapM1QASm3S41EQ T95OES52t92ZUkD+2pV6U+WgD5fqVZNoR8PzgPs8RhSVJgEq/v6zx+Iq3OqtEbC7Un3e0tjQTlSG 2DYRNoIGea6cT+2Od6ECFP9tl3LaIdHthkQxoOuFOss= ) ; Key ID = 24997 cyberthreat.id. 86400 IN RRSIG ( DNSKEY 8 2 86400 20201217000000 20201126000000 24997 cyberthreat.id. noiiNHy9ci+M/vK19eHKnG3kalxnCTRMZQ8TIGBJb9YSb26kXdB+sAEvRoUO+9n3vADBW/VXLgT8 GqZUeJ3JuE1Abd7RwkkROPcoD+hgB5NOuCLImHVGkw8zT86/dkjiYyS3kV/zEADJUQ0ZQHcpu75X +12WcbJEMG/ZsJv6CNYTPSjNMEjTKJXRwlDVAc1TsvzEk68vnPECEhXVOw4CtkUSTyhuZ0qaJOIK 2jYxf7oVAiq/tcoskcA3cnSKaRjF00SLwR/Nk7vZsb30eagtSSqlhSeZ1RO/3VGIEKTcyqZ/uGFr 2ffWMCxtEMK3Z/5uwFXN/WmvNFzNs4fFDdqgNw== ) cyberthreat.id. 86400 IN DNSKEY ( 256 3 8 AwEAAb9zVCOmbH7lHpTRFYmApHRO7jLs2XWfBaLh7f5Wh4bYjZqdFTYv9SUbC0Mi9KbsIgSDLrhn 5cg+UWeiYJLCYYmOIPeoxWyN8afnmz3YcL7g+EKm1Y4qgBNsLxJh+olJ+DLVz9v4E7DOFmRQs5sj we0YmaYpdjZgGB8K7h8z4+xr ) ; Key ID = 64743 ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1680 ;; option:
	Found 2 DNSKEY records for cyberthreat.id
	`cyberthreat.id. 86400 IN DNSKEY ( 257 3 8 AwEAAes75iWSeDcRiX3eiB1qYM6ECEh7I+wnYDOSosX0OpB6GHXKPHFdd6SD4eBqYc4+9DUsxx+F 15pvRqAhZ11NRXZIhG5llWZjgkPkROtiuYv/enFOI7ubkRlGtltnJqKYsLD/VDfoYUZYb5jO4yTs U5V7dB3/P8AJk/V8pj7VDJwAkrPJhsPl6CwaIDotQJSAypasu83wsB2k3znoqpapM1QASm3S41EQ T95OES52t92ZUkD+2pV6U+WgD5fqVZNoR8PzgPs8RhSVJgEq/v6zx+Iq3OqtEbC7Un3e0tjQTlSG 2DYRNoIGea6cT+2Od6ECFP9tl3LaIdHthkQxoOuFOss= ) ; Key ID = 24997`
	`cyberthreat.id. 86400 IN DNSKEY ( 256 3 8 AwEAAb9zVCOmbH7lHpTRFYmApHRO7jLs2XWfBaLh7f5Wh4bYjZqdFTYv9SUbC0Mi9KbsIgSDLrhn 5cg+UWeiYJLCYYmOIPeoxWyN8afnmz3YcL7g+EKm1Y4qgBNsLxJh+olJ+DLVz9v4E7DOFmRQs5sj we0YmaYpdjZgGB8K7h8z4+xr ) ; Key ID = 64743`
	DNSKEY=24997/SEP is now in the chain-of-trust
	DS=24997/SHA-256 verifies DNSKEY=24997/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`cyberthreat.id. 86400 IN RRSIG ( DNSKEY 8 2 86400 20201217000000 20201126000000 24997 cyberthreat.id. noiiNHy9ci+M/vK19eHKnG3kalxnCTRMZQ8TIGBJb9YSb26kXdB+sAEvRoUO+9n3vADBW/VXLgT8 GqZUeJ3JuE1Abd7RwkkROPcoD+hgB5NOuCLImHVGkw8zT86/dkjiYyS3kV/zEADJUQ0ZQHcpu75X +12WcbJEMG/ZsJv6CNYTPSjNMEjTKJXRwlDVAc1TsvzEk68vnPECEhXVOw4CtkUSTyhuZ0qaJOIK 2jYxf7oVAiq/tcoskcA3cnSKaRjF00SLwR/Nk7vZsb30eagtSSqlhSeZ1RO/3VGIEKTcyqZ/uGFr 2ffWMCxtEMK3Z/5uwFXN/WmvNFzNs4fFDdqgNw== )`
	RRSIG=24997 and DNSKEY=24997/SEP verifies the DNSKEY RRset
	DNSKEY=64743 is now in the chain-of-trust
	Query to nx1.ruangsiber.id for cyberthreat.id/A
	Received 233 bytes from 103.149.180.1
	;; Answer received from 103.149.180.1 (233 bytes) ;; HEADER SECTION ;; id = 2151 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1680 ;; option: ;; QUESTION SECTION (1 record) ;; cyberthreat.id. IN A ;; ANSWER SECTION (2 records) cyberthreat.id. 14400 IN RRSIG ( A 8 2 14400 20201217000000 20201126000000 64743 cyberthreat.id. PXroTGiH9PR3xFaoakhU44TD06XHZHwkY9XBy/Iq09rKStWCi1SSXpAUuQN78iFaSejeCIr2lKSV +7CfzzC1v5jrVyIP71fBb2WeiLYHDfuIxsi6DytH30MQTg4tpm+MxIphktChGCzmCGYfQTBTySCv LbOphnl9dOtUMv6HcSA= ) cyberthreat.id. 14400 IN A 103.149.180.250 ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1680 ;; option:
	cyberthreat.id is authoritative for cyberthreat.id
	Found RRSIG signed by cyberthreat.id zone
	Query to nx1.ruangsiber.id for cyberthreat.id/SOA
	Received 275 bytes from 103.149.180.1
	;; Answer received from 103.149.180.1 (275 bytes) ;; HEADER SECTION ;; id = 63145 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1680 ;; option: ;; QUESTION SECTION (1 record) ;; cyberthreat.id. IN SOA ;; ANSWER SECTION (2 records) cyberthreat.id. 86400 IN SOA ( nx1.ruangsiber.id. teknis.ruangsiber.id. 2020111903 ;serial 3600 ;refresh 1800 ;retry 1209600 ;expire 86400 ;minimum ) cyberthreat.id. 86400 IN RRSIG ( SOA 8 2 86400 20201217000000 20201126000000 64743 cyberthreat.id. GoDC8NhWF66YFO/Yblhf0ECC4Cs9yol24l3gzdacX/RSBk2ZAqUvUOsQjr7buH/qP2DJwUf1q69G OJxUKozbJrsGC00R2FFjEEYnvJr9MLhqXDGT4mI1O5hs8f4d4Bb9JwBtJnNbqtKyx1t2BQiB37ox IZT20ZXsEQnMnaPWPgg= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1680 ;; option:
	Query to nx1.ruangsiber.id for cyberthreat.id/A
	Received 233 bytes from 103.149.180.1
	;; Answer received from 103.149.180.1 (233 bytes) ;; HEADER SECTION ;; id = 61387 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1680 ;; option: ;; QUESTION SECTION (1 record) ;; cyberthreat.id. IN A ;; ANSWER SECTION (2 records) cyberthreat.id. 14400 IN RRSIG ( A 8 2 14400 20201217000000 20201126000000 64743 cyberthreat.id. PXroTGiH9PR3xFaoakhU44TD06XHZHwkY9XBy/Iq09rKStWCi1SSXpAUuQN78iFaSejeCIr2lKSV +7CfzzC1v5jrVyIP71fBb2WeiLYHDfuIxsi6DytH30MQTg4tpm+MxIphktChGCzmCGYfQTBTySCv LbOphnl9dOtUMv6HcSA= ) cyberthreat.id. 14400 IN A 103.149.180.250 ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1680 ;; option:
	cyberthreat.id A RR has value 103.149.180.250
	Found 1 RRSIGs over A RRset
	`cyberthreat.id. 14400 IN RRSIG ( A 8 2 14400 20201217000000 20201126000000 64743 cyberthreat.id. PXroTGiH9PR3xFaoakhU44TD06XHZHwkY9XBy/Iq09rKStWCi1SSXpAUuQN78iFaSejeCIr2lKSV +7CfzzC1v5jrVyIP71fBb2WeiLYHDfuIxsi6DytH30MQTg4tpm+MxIphktChGCzmCGYfQTBTySCv LbOphnl9dOtUMv6HcSA= )`
	RRSIG=64743 and DNSKEY=64743 verifies the A RRset

Move your mouse over any or symbols for remediation hints.

Want a second opinion? Test cyberthreat.id at dnsviz.net.

DNSSEC Analyzer

↓ Advanced options ↑ Advanced options

Trust Anchor:
Name Servers: