DNSSEC Analyzer - cyberthreat.id

Domain Name:

Time: 2019-09-20 09:29:21 UTC, NTP stratum 4

Analyzing DNSSEC problems for cyberthreat.id

DS=20326/SHA-256 is now in the chain-of-trust

	Checking DS between Trust Anchor and .
	`. IN DS ( 20326 8 2 e06d44b80b8f1d39a95c0b0d7c65d08458e880409bbc683457104237c7f8ec8d )`
	Query to b.root-servers.net for ./DNSKEY
	Received 1139 bytes from 199.9.14.201
	;; Answer received from 199.9.14.201 (1139 bytes) ;; HEADER SECTION ;; id = 8549 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 4 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; . IN DNSKEY ;; ANSWER SECTION (4 records) . 172800 IN DNSKEY ( 256 3 8 AwEAAbPwrxwtOMENWvblQbUFwBllR7ZtXsu9rg/LdyklKs9gU2GQTeOc59XjhuAPZ4WrT09z6YPL +vzIIJqnG3Hiru7hFUQ4pH0qsLNxrsuZrZYmXAKoVa9SXL1Ap0LygwrIugEk1G4v7Rk/Alt1jLUI E+ZymGtSEhIuGQdXrEmj3ffzXY13H42X4Ja3vJTn/WIQOXY7vwHXGDypSh9j0Tt0hknF1yVJCrIp fkhFWihMKNdMzMprD4bV+PDLRA5YSn3OPIeUnRn9qBUCN11LXQKb+W3Jg+m/5xQRQJzJ/qXgDh1+ aN+Mc9AstP29Y/ZLFmF6cKtL2zoUMN5I5QymeSkJJzc= ) ; Key ID = 22545 . 172800 IN DNSKEY ( 256 3 8 AwEAAcTQyaIe6nt3xSPOG2L/YfwBkOVTJN6mlnZ249O5Rtt3ZSRQHxQSW61AODYw6bvgxrrGq8ee OuenFjcSYgNAMcBYoEYYmKDW6e9EryW4ZaT/MCq+8Am06oR40xAA3fClOM6QjRcT85tP41Go946A icBGP8XOP/Aj1aI/oPRGzRnboUPUok/AzTNnW5npBU69+BuiIwYE7mQOiNBFePyvjQBdoiuYbmuD 3Py0IyjlBxzZUXbqLsRL9gYFkCqeTY29Ik7usuzMTa+JRSLz6KGS5RSJ7CTSMjZg8aNaUbN2dvGh akJPh92HnLvMA3TefFgbKJphFNPA3BWSKLZ02cRWXqM= ) ; Key ID = 59944 . 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; Key ID = 20326 . 172800 IN RRSIG ( DNSKEY 8 0 172800 20191010000000 20190919000000 20326 . OcVKz5iMycVJP8n4f3IAAYG3AZFS3nh4t6nxMC2Jxg5uk2MyAlFUvAdvclTs15S2D9FP7aL+uQ9J aPSAaMv7opp8tOo5X5qEJjpaHTwXWjSgFeUMGhp2rtdCR1aTeIKlLd6g3JthDpEWV0ip6VQKqLNO Yx7gnaQc3j4SzK1q1YyjX/caO7m5We14vJNx0bmp4K/+U6SyKYuIu38IsHPUMbBO624MpRqW0etq cT3WiYCgGgFUTfYbr6aD4YSQPDAjII4N0yPJrBdDvbo2a3Nzvn2edq2zxRinnwWcqAqoymhZzr+h g7CTaLftqq2vTEXAtHSFk8JhLSlmciNm1S1xiA== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found 3 DNSKEY records for .
	`. 172800 IN DNSKEY ( 256 3 8 AwEAAbPwrxwtOMENWvblQbUFwBllR7ZtXsu9rg/LdyklKs9gU2GQTeOc59XjhuAPZ4WrT09z6YPL +vzIIJqnG3Hiru7hFUQ4pH0qsLNxrsuZrZYmXAKoVa9SXL1Ap0LygwrIugEk1G4v7Rk/Alt1jLUI E+ZymGtSEhIuGQdXrEmj3ffzXY13H42X4Ja3vJTn/WIQOXY7vwHXGDypSh9j0Tt0hknF1yVJCrIp fkhFWihMKNdMzMprD4bV+PDLRA5YSn3OPIeUnRn9qBUCN11LXQKb+W3Jg+m/5xQRQJzJ/qXgDh1+ aN+Mc9AstP29Y/ZLFmF6cKtL2zoUMN5I5QymeSkJJzc= ) ; Key ID = 22545`
	`. 172800 IN DNSKEY ( 256 3 8 AwEAAcTQyaIe6nt3xSPOG2L/YfwBkOVTJN6mlnZ249O5Rtt3ZSRQHxQSW61AODYw6bvgxrrGq8ee OuenFjcSYgNAMcBYoEYYmKDW6e9EryW4ZaT/MCq+8Am06oR40xAA3fClOM6QjRcT85tP41Go946A icBGP8XOP/Aj1aI/oPRGzRnboUPUok/AzTNnW5npBU69+BuiIwYE7mQOiNBFePyvjQBdoiuYbmuD 3Py0IyjlBxzZUXbqLsRL9gYFkCqeTY29Ik7usuzMTa+JRSLz6KGS5RSJ7CTSMjZg8aNaUbN2dvGh akJPh92HnLvMA3TefFgbKJphFNPA3BWSKLZ02cRWXqM= ) ; Key ID = 59944`
	`. 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; Key ID = 20326`
	DNSKEY=20326/SEP is now in the chain-of-trust
	DS=20326/SHA-256 verifies DNSKEY=20326/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`. 172800 IN RRSIG ( DNSKEY 8 0 172800 20191010000000 20190919000000 20326 . OcVKz5iMycVJP8n4f3IAAYG3AZFS3nh4t6nxMC2Jxg5uk2MyAlFUvAdvclTs15S2D9FP7aL+uQ9J aPSAaMv7opp8tOo5X5qEJjpaHTwXWjSgFeUMGhp2rtdCR1aTeIKlLd6g3JthDpEWV0ip6VQKqLNO Yx7gnaQc3j4SzK1q1YyjX/caO7m5We14vJNx0bmp4K/+U6SyKYuIu38IsHPUMbBO624MpRqW0etq cT3WiYCgGgFUTfYbr6aD4YSQPDAjII4N0yPJrBdDvbo2a3Nzvn2edq2zxRinnwWcqAqoymhZzr+h g7CTaLftqq2vTEXAtHSFk8JhLSlmciNm1S1xiA== )`
	RRSIG=20326 and DNSKEY=20326/SEP verifies the DNSKEY RRset
	DNSKEY=22545 is now in the chain-of-trust
	DNSKEY=59944 is now in the chain-of-trust
	Query to a.root-servers.net for cyberthreat.id/A
	Error querying a.root-servers.net/2001:503:ba3e:0:0:0:2:30 for cyberthreat.id/A: 'IPv6 transport disabled'
	Received 729 bytes from 198.41.0.4
	;; Answer received from 198.41.0.4 (729 bytes) ;; HEADER SECTION ;; id = 60135 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 8 arcount = 11 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1472 ;; option: ;; QUESTION SECTION (1 record) ;; cyberthreat.id. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (8 records) id. 172800 IN NS b.dns.id. id. 172800 IN NS c.dns.id. id. 172800 IN NS d.dns.id. id. 172800 IN NS e.dns.id. id. 172800 IN NS ns4.apnic.net. id. 86400 IN DS 26887 8 1 2f1e41b5bf7da7f134b4025e8242d3a9ef54801c id. 86400 IN DS ( 26887 8 2 28be22003a1afb1ed9a7bb82482274e2db5f09a6c50702c731e040d2257347ea ) id. 86400 IN RRSIG ( DS 8 1 86400 20191003050000 20190920040000 59944 . dTKnOhLbzNl9qLFPf7UYI4sygFGGyZGb11c0tKB8NFB2uy6j+T8IkrWSzHBmsE+jhsKnGjmhs0tv ayXRMNX4MBtI/qIodNTvs3Tl3jDONAv6hjZWNavGWoNBoTQwMnWzABITQDLWKvObuyfudrSWVqUn e1YwTe9CFTCoReo4ebP1tG5iK4yfp4DdSC6UV32xfVKx1JJ6+OXjZ3S57kfcGgP88x1iXwi+itF3 O/I3qYeVZBcDicSQVZnlcgw8yCkeb8OAgtP2AXB4M9R3zVPT6TqoJ6fI390DemdD3SUOMOM5A/3V sAkYw8L2tjRMkI6KR2mvfTp6o7AMxy0g8p6CaA== ) ;; ADDITIONAL SECTION (11 records) b.dns.id. 172800 IN A 103.19.179.179 c.dns.id. 172800 IN A 103.19.178.178 d.dns.id. 172800 IN A 45.126.57.57 e.dns.id. 172800 IN A 103.19.177.177 ns4.apnic.net. 172800 IN A 202.12.31.53 b.dns.id. 172800 IN AAAA 2402:ee80:b::b c.dns.id. 172800 IN AAAA 2402:ee80:c::c d.dns.id. 172800 IN AAAA 2402:ee80:d::d e.dns.id. 172800 IN AAAA 2001:df5:4000:4::4 ns4.apnic.net. 172800 IN AAAA 2001:dd8:12::53 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1472 ;; option:
	Query to l.root-servers.net for id/DNSKEY
	Received 717 bytes from 199.7.83.42
	;; Answer received from 199.7.83.42 (717 bytes) ;; HEADER SECTION ;; id = 37434 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 8 arcount = 11 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; id. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (8 records) id. 172800 IN NS b.dns.id. id. 172800 IN NS c.dns.id. id. 172800 IN NS d.dns.id. id. 172800 IN NS e.dns.id. id. 172800 IN NS ns4.apnic.net. id. 86400 IN DS 26887 8 1 2f1e41b5bf7da7f134b4025e8242d3a9ef54801c id. 86400 IN DS ( 26887 8 2 28be22003a1afb1ed9a7bb82482274e2db5f09a6c50702c731e040d2257347ea ) id. 86400 IN RRSIG ( DS 8 1 86400 20191003050000 20190920040000 59944 . dTKnOhLbzNl9qLFPf7UYI4sygFGGyZGb11c0tKB8NFB2uy6j+T8IkrWSzHBmsE+jhsKnGjmhs0tv ayXRMNX4MBtI/qIodNTvs3Tl3jDONAv6hjZWNavGWoNBoTQwMnWzABITQDLWKvObuyfudrSWVqUn e1YwTe9CFTCoReo4ebP1tG5iK4yfp4DdSC6UV32xfVKx1JJ6+OXjZ3S57kfcGgP88x1iXwi+itF3 O/I3qYeVZBcDicSQVZnlcgw8yCkeb8OAgtP2AXB4M9R3zVPT6TqoJ6fI390DemdD3SUOMOM5A/3V sAkYw8L2tjRMkI6KR2mvfTp6o7AMxy0g8p6CaA== ) ;; ADDITIONAL SECTION (11 records) b.dns.id. 172800 IN A 103.19.179.179 b.dns.id. 172800 IN AAAA 2402:ee80:b::b c.dns.id. 172800 IN A 103.19.178.178 c.dns.id. 172800 IN AAAA 2402:ee80:c::c d.dns.id. 172800 IN A 45.126.57.57 d.dns.id. 172800 IN AAAA 2402:ee80:d::d e.dns.id. 172800 IN A 103.19.177.177 e.dns.id. 172800 IN AAAA 2001:df5:4000:4::4 ns4.apnic.net. 172800 IN A 202.12.31.53 ns4.apnic.net. 172800 IN AAAA 2001:dd8:12::53 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found child zone id

	Checking DS between . and id
	Query to j.root-servers.net for id/DS
	Received 402 bytes from 192.58.128.30
	;; Answer received from 192.58.128.30 (402 bytes) ;; HEADER SECTION ;; id = 16746 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; id. IN DS ;; ANSWER SECTION (3 records) id. 86400 IN DS 26887 8 1 2f1e41b5bf7da7f134b4025e8242d3a9ef54801c id. 86400 IN DS ( 26887 8 2 28be22003a1afb1ed9a7bb82482274e2db5f09a6c50702c731e040d2257347ea ) id. 86400 IN RRSIG ( DS 8 1 86400 20191003050000 20190920040000 59944 . dTKnOhLbzNl9qLFPf7UYI4sygFGGyZGb11c0tKB8NFB2uy6j+T8IkrWSzHBmsE+jhsKnGjmhs0tv ayXRMNX4MBtI/qIodNTvs3Tl3jDONAv6hjZWNavGWoNBoTQwMnWzABITQDLWKvObuyfudrSWVqUn e1YwTe9CFTCoReo4ebP1tG5iK4yfp4DdSC6UV32xfVKx1JJ6+OXjZ3S57kfcGgP88x1iXwi+itF3 O/I3qYeVZBcDicSQVZnlcgw8yCkeb8OAgtP2AXB4M9R3zVPT6TqoJ6fI390DemdD3SUOMOM5A/3V sAkYw8L2tjRMkI6KR2mvfTp6o7AMxy0g8p6CaA== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found 2 DS records for id in the . zone
	DS=26887/SHA-1 has algorithm RSASHA256
	DS=26887/SHA-256 has algorithm RSASHA256
	Found 1 RRSIGs over DS RRset
	`id. 86400 IN RRSIG ( DS 8 1 86400 20191003050000 20190920040000 59944 . dTKnOhLbzNl9qLFPf7UYI4sygFGGyZGb11c0tKB8NFB2uy6j+T8IkrWSzHBmsE+jhsKnGjmhs0tv ayXRMNX4MBtI/qIodNTvs3Tl3jDONAv6hjZWNavGWoNBoTQwMnWzABITQDLWKvObuyfudrSWVqUn e1YwTe9CFTCoReo4ebP1tG5iK4yfp4DdSC6UV32xfVKx1JJ6+OXjZ3S57kfcGgP88x1iXwi+itF3 O/I3qYeVZBcDicSQVZnlcgw8yCkeb8OAgtP2AXB4M9R3zVPT6TqoJ6fI390DemdD3SUOMOM5A/3V sAkYw8L2tjRMkI6KR2mvfTp6o7AMxy0g8p6CaA== )`
	RRSIG=59944 and DNSKEY=59944 verifies the DS RRset
	DS=26887/SHA-1 is now in the chain-of-trust
	`id. 86400 IN DS 26887 8 1 2f1e41b5bf7da7f134b4025e8242d3a9ef54801c`
	`id. 86400 IN DS ( 26887 8 2 28be22003a1afb1ed9a7bb82482274e2db5f09a6c50702c731e040d2257347ea )`
	Query to c.dns.id for id/DNSKEY
	Received 1163 bytes from 103.19.178.178
	;; Answer received from 103.19.178.178 (1163 bytes) ;; HEADER SECTION ;; id = 50063 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 4 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; id. IN DNSKEY ;; ANSWER SECTION (4 records) id. 86400 IN DNSKEY ( 256 3 8 AwEAAckf2f45NrA7QrZhdbbrBV1ku04QvQWGBqF3gPQ1fe473tV8OVztNzshC4sai1hQDVQ0b5Q1 AWb3u6I6MEtDIvWA2EJU69IRAFj3FcuJoEbMXCKk9xeusPrgnAyu8zOn7Ur2krJ0AVn6nBNjsINA O8UMEC3nT1Loot0GW0Wo98L8gAYwfUofHXCsUlAeOM2m7j2zKu5sVWH+H+/7H4+dEDMDaUj0exqx FVxhsMVsmgqtslmdS7wPWUa5ZB6fm9dybE8aZlSwyeyIRyso6khHRFX7csxbECjfrmUJ9YKMH9td 5/gHVT+HQNQeIJ1khIS21SvWt/GHqcGqDxvS/fTQuRU= ) ; Key ID = 22449 id. 86400 IN DNSKEY ( 257 3 8 AwEAAcTe9z3F7RaSKwc6BUrfOAZTKl2uV+VfcYu3+/L5n2AmmqRnep4tUvLLp6awc0/G0sqADalq iLwossfpihHwyXzpD7/DwkUNKtJpbfafeKKqoO7PK10T/tnEyjC6TQLenZIpzVEQIH9Qd0OGr6xb C+whZBfLWwKl8QpdrqcQ6gpH5KpRvvSmo6hJ50SEOqTbJLOtvA4MtBP8k1yKSXDbXTGMniW/wRZf C3bMJGtK2xMY2wPOXsYM9u+MOWaqdhOKdxzG0je9ztz+F97LJa5dke48KcNmHicwDnIHtLm+8Xnm qn/MAPJHnB1NWMWXiMZR8ugrFoPXSkw5IoemtNMjxeM= ) ; Key ID = 26887 id. 86400 IN RRSIG ( DNSKEY 8 1 86400 20191019003612 20190919002516 22449 id. dZF30mFYtAVTCO29plofMEV6ro/BQbe6cBkVc3yKSayxEbjQgls2+tXJKsB+cj/DxdhjuTTkzriF HnzpwJNwrjUITihrcn0VdzD3kCy+2snkFsFQpSPyAeAcUp0bQGA+z/gtN3GyxQhKKmLjSMBOuQwo ZAzqr0eGSzA9ymzYV5xkyihJIyyC/ZBojyeX3Y4x2UTuFfRD2PuDG74MNaXUUbG7DeCfsxexzBxb 3YYkv4rCfqjZXf/z2Bowv2mxPrXqCaTXzW2HcEgypLo6eDPDMVMiCCX9dnqQfuUh8s15jvPLejCE 6y8vnCDpetbsGi/N8gMLe4owArFO3N/yYfkTpQ== ) id. 86400 IN RRSIG ( DNSKEY 8 1 86400 20191019003612 20190919002516 26887 id. Rex/leiPVMHQKCjejs/63M+3u8aISoVAePMAaDU0zmzApeNz+UE/9Iu1Bk9/L/u22Qz/PFkO2E08 z435kTYAdX2DgF/xIfTC3l3/fc1LQ0QD3zkm+Dgf1+7AHxjhonie5caG0/7/wy63FyGAgBg6haQe AFZhSiMjIligneD9amm9zFK9YcuMbKPstqmZnj3Pc2Bgb3/8x12K3HxferLvA5Topa6NjBzB6pc3 rqQKZSC86ASa5clZrNriAj8Zlk5ud5sRANGQ1vTW62w72VayCCubi4BhfiACGZ4FRHNC79BkwBXh OG4u9qRYuJZ6Tv0qmqQM50Ryqkop/I5r2STcsQ== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found 2 DNSKEY records for id
	`id. 86400 IN DNSKEY ( 256 3 8 AwEAAckf2f45NrA7QrZhdbbrBV1ku04QvQWGBqF3gPQ1fe473tV8OVztNzshC4sai1hQDVQ0b5Q1 AWb3u6I6MEtDIvWA2EJU69IRAFj3FcuJoEbMXCKk9xeusPrgnAyu8zOn7Ur2krJ0AVn6nBNjsINA O8UMEC3nT1Loot0GW0Wo98L8gAYwfUofHXCsUlAeOM2m7j2zKu5sVWH+H+/7H4+dEDMDaUj0exqx FVxhsMVsmgqtslmdS7wPWUa5ZB6fm9dybE8aZlSwyeyIRyso6khHRFX7csxbECjfrmUJ9YKMH9td 5/gHVT+HQNQeIJ1khIS21SvWt/GHqcGqDxvS/fTQuRU= ) ; Key ID = 22449`
	`id. 86400 IN DNSKEY ( 257 3 8 AwEAAcTe9z3F7RaSKwc6BUrfOAZTKl2uV+VfcYu3+/L5n2AmmqRnep4tUvLLp6awc0/G0sqADalq iLwossfpihHwyXzpD7/DwkUNKtJpbfafeKKqoO7PK10T/tnEyjC6TQLenZIpzVEQIH9Qd0OGr6xb C+whZBfLWwKl8QpdrqcQ6gpH5KpRvvSmo6hJ50SEOqTbJLOtvA4MtBP8k1yKSXDbXTGMniW/wRZf C3bMJGtK2xMY2wPOXsYM9u+MOWaqdhOKdxzG0je9ztz+F97LJa5dke48KcNmHicwDnIHtLm+8Xnm qn/MAPJHnB1NWMWXiMZR8ugrFoPXSkw5IoemtNMjxeM= ) ; Key ID = 26887`
	DNSKEY=26887/SEP is now in the chain-of-trust
	DS=26887/SHA-1 verifies DNSKEY=26887/SEP
	DS=26887/SHA-256 verifies DNSKEY=26887/SEP
	Found 2 RRSIGs over DNSKEY RRset
	`id. 86400 IN RRSIG ( DNSKEY 8 1 86400 20191019003612 20190919002516 22449 id. dZF30mFYtAVTCO29plofMEV6ro/BQbe6cBkVc3yKSayxEbjQgls2+tXJKsB+cj/DxdhjuTTkzriF HnzpwJNwrjUITihrcn0VdzD3kCy+2snkFsFQpSPyAeAcUp0bQGA+z/gtN3GyxQhKKmLjSMBOuQwo ZAzqr0eGSzA9ymzYV5xkyihJIyyC/ZBojyeX3Y4x2UTuFfRD2PuDG74MNaXUUbG7DeCfsxexzBxb 3YYkv4rCfqjZXf/z2Bowv2mxPrXqCaTXzW2HcEgypLo6eDPDMVMiCCX9dnqQfuUh8s15jvPLejCE 6y8vnCDpetbsGi/N8gMLe4owArFO3N/yYfkTpQ== )`
	`id. 86400 IN RRSIG ( DNSKEY 8 1 86400 20191019003612 20190919002516 26887 id. Rex/leiPVMHQKCjejs/63M+3u8aISoVAePMAaDU0zmzApeNz+UE/9Iu1Bk9/L/u22Qz/PFkO2E08 z435kTYAdX2DgF/xIfTC3l3/fc1LQ0QD3zkm+Dgf1+7AHxjhonie5caG0/7/wy63FyGAgBg6haQe AFZhSiMjIligneD9amm9zFK9YcuMbKPstqmZnj3Pc2Bgb3/8x12K3HxferLvA5Topa6NjBzB6pc3 rqQKZSC86ASa5clZrNriAj8Zlk5ud5sRANGQ1vTW62w72VayCCubi4BhfiACGZ4FRHNC79BkwBXh OG4u9qRYuJZ6Tv0qmqQM50Ryqkop/I5r2STcsQ== )`
	RRSIG=22449 and DNSKEY=22449 verifies the DNSKEY RRset
	RRSIG=26887 and DNSKEY=26887/SEP verifies the DNSKEY RRset
	DNSKEY=22449 is now in the chain-of-trust
	Query to d.dns.id for cyberthreat.id/A
	Received 493 bytes from 45.126.57.57
	;; Answer received from 45.126.57.57 (493 bytes) ;; HEADER SECTION ;; id = 33863 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 4 arcount = 5 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; cyberthreat.id. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (4 records) cyberthreat.id. 43200 IN NS nx1.cyberthreat.id. cyberthreat.id. 43200 IN NS nx2.cyberthreat.id. cyberthreat.id. 43200 IN DS ( 11965 13 1 f5ccc131a55a75b57039ad54abf701a85c9f88ec ) cyberthreat.id. 43200 IN RRSIG ( DS 8 2 43200 20191018235535 20190918230509 22449 id. xtZoETox/4mn/1zyyJh/Tn6tKHh3JHkdIFBcCTZVuCLQ6gClFZCepwbOpltcys3SaKmc25cBoI2s aWY6Tb07SaOgFcEcAWEJdSM8Vds5tqqypIsxzG1wgmiXG2t5hcONm1vA7uFIRYpAh32J0bPhnUUX FQxR0EmfeX4s30qTdnvGJjb4+CmEJhueAafnIZCMNrwqMOflnJewEltJEE01UCJqZrHLzT+380uD 4Ozb68MPQwPwSoa79qeNL8pz5aKl98NA7zKnjtLt9XdMNPUP9koVcv8MF5hm798HCA9NK3mO43Ug Y/IgFRHzKhopMbuASCY2Grpt4zNAL62bt/7ITQ== ) ;; ADDITIONAL SECTION (5 records) nx1.cyberthreat.id. 43200 IN A 103.112.223.1 nx1.cyberthreat.id. 43200 IN AAAA 2001:df4:bd00::990:1 nx2.cyberthreat.id. 43200 IN A 182.23.40.154 nx2.cyberthreat.id. 43200 IN AAAA 2400:8000:1000::154 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Query to b.dns.id for cyberthreat.id/DNSKEY
	Error querying b.dns.id/2402:ee80:b:0:0:0:0:b for cyberthreat.id/DNSKEY: 'IPv6 transport disabled'
	Received 493 bytes from 103.19.179.179
	;; Answer received from 103.19.179.179 (493 bytes) ;; HEADER SECTION ;; id = 10860 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 4 arcount = 5 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; cyberthreat.id. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (4 records) cyberthreat.id. 43200 IN NS nx1.cyberthreat.id. cyberthreat.id. 43200 IN NS nx2.cyberthreat.id. cyberthreat.id. 43200 IN DS ( 11965 13 1 f5ccc131a55a75b57039ad54abf701a85c9f88ec ) cyberthreat.id. 43200 IN RRSIG ( DS 8 2 43200 20191018235535 20190918230509 22449 id. xtZoETox/4mn/1zyyJh/Tn6tKHh3JHkdIFBcCTZVuCLQ6gClFZCepwbOpltcys3SaKmc25cBoI2s aWY6Tb07SaOgFcEcAWEJdSM8Vds5tqqypIsxzG1wgmiXG2t5hcONm1vA7uFIRYpAh32J0bPhnUUX FQxR0EmfeX4s30qTdnvGJjb4+CmEJhueAafnIZCMNrwqMOflnJewEltJEE01UCJqZrHLzT+380uD 4Ozb68MPQwPwSoa79qeNL8pz5aKl98NA7zKnjtLt9XdMNPUP9koVcv8MF5hm798HCA9NK3mO43Ug Y/IgFRHzKhopMbuASCY2Grpt4zNAL62bt/7ITQ== ) ;; ADDITIONAL SECTION (5 records) nx1.cyberthreat.id. 43200 IN A 103.112.223.1 nx1.cyberthreat.id. 43200 IN AAAA 2001:df4:bd00::990:1 nx2.cyberthreat.id. 43200 IN A 182.23.40.154 nx2.cyberthreat.id. 43200 IN AAAA 2400:8000:1000::154 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found child zone cyberthreat.id

cyberthreat.id

	Checking DS between id and cyberthreat.id
	Query to c.dns.id for cyberthreat.id/DS
	Received 369 bytes from 103.19.178.178
	;; Answer received from 103.19.178.178 (369 bytes) ;; HEADER SECTION ;; id = 35465 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; cyberthreat.id. IN DS ;; ANSWER SECTION (2 records) cyberthreat.id. 43200 IN DS ( 11965 13 1 f5ccc131a55a75b57039ad54abf701a85c9f88ec ) cyberthreat.id. 43200 IN RRSIG ( DS 8 2 43200 20191018235535 20190918230509 22449 id. xtZoETox/4mn/1zyyJh/Tn6tKHh3JHkdIFBcCTZVuCLQ6gClFZCepwbOpltcys3SaKmc25cBoI2s aWY6Tb07SaOgFcEcAWEJdSM8Vds5tqqypIsxzG1wgmiXG2t5hcONm1vA7uFIRYpAh32J0bPhnUUX FQxR0EmfeX4s30qTdnvGJjb4+CmEJhueAafnIZCMNrwqMOflnJewEltJEE01UCJqZrHLzT+380uD 4Ozb68MPQwPwSoa79qeNL8pz5aKl98NA7zKnjtLt9XdMNPUP9koVcv8MF5hm798HCA9NK3mO43Ug Y/IgFRHzKhopMbuASCY2Grpt4zNAL62bt/7ITQ== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found 1 DS records for cyberthreat.id in the id zone
	DS=11965/SHA-1 has algorithm ECDSAP256SHA256
	Found 1 RRSIGs over DS RRset
	`cyberthreat.id. 43200 IN RRSIG ( DS 8 2 43200 20191018235535 20190918230509 22449 id. xtZoETox/4mn/1zyyJh/Tn6tKHh3JHkdIFBcCTZVuCLQ6gClFZCepwbOpltcys3SaKmc25cBoI2s aWY6Tb07SaOgFcEcAWEJdSM8Vds5tqqypIsxzG1wgmiXG2t5hcONm1vA7uFIRYpAh32J0bPhnUUX FQxR0EmfeX4s30qTdnvGJjb4+CmEJhueAafnIZCMNrwqMOflnJewEltJEE01UCJqZrHLzT+380uD 4Ozb68MPQwPwSoa79qeNL8pz5aKl98NA7zKnjtLt9XdMNPUP9koVcv8MF5hm798HCA9NK3mO43Ug Y/IgFRHzKhopMbuASCY2Grpt4zNAL62bt/7ITQ== )`
	RRSIG=22449 and DNSKEY=22449 verifies the DS RRset
	DS=11965/SHA-1 is now in the chain-of-trust
	`cyberthreat.id. 43200 IN DS ( 11965 13 1 f5ccc131a55a75b57039ad54abf701a85c9f88ec )`
	Query to nx2.cyberthreat.id for cyberthreat.id/DNSKEY
	Received 423 bytes from 182.23.40.154
	;; Answer received from 182.23.40.154 (423 bytes) ;; HEADER SECTION ;; id = 57873 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 4 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; cyberthreat.id. IN DNSKEY ;; ANSWER SECTION (4 records) cyberthreat.id. 86400 IN DNSKEY ( 256 3 13 f8lop9fF7xrgaLmRDcXlTPNvADFQakuqANWwlCc1JIVCmI0EtGOpKKyXlZtQZsLtIhWJRPL67lCj RtpRBzrrnw== ) ; Key ID = 19725 cyberthreat.id. 86400 IN DNSKEY ( 257 3 13 rfDHEJ72GjcDH18bEFwFUBs3Y7K3djAV70RleCbFRbAvFWs3a5pzDGdYgj7RAABut5/B4jwNg6p4 IPwcVSwmVA== ) ; Key ID = 11965 cyberthreat.id. 86400 IN RRSIG ( DNSKEY 13 2 86400 20191016104138 20190916104138 11965 cyberthreat.id. LCsrGEv+WGucpJlhuy3M+MA5nmplZVf07vQgYv2xXEZTx7Mu8OS9D90vef4eyWnU/3sbYJfabaQ4 EPhnqZoivQ== ) cyberthreat.id. 86400 IN RRSIG ( DNSKEY 13 2 86400 20191016104138 20190916104138 19725 cyberthreat.id. iGlfs12ThcurwbG5fbmOfpy8NsVQOtFMGZ9afTcF8PQ42GnMSFH/ozobaFVW5tiWVXvsCTqzyXON iaJbj+F4+g== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found 2 DNSKEY records for cyberthreat.id
	`cyberthreat.id. 86400 IN DNSKEY ( 256 3 13 f8lop9fF7xrgaLmRDcXlTPNvADFQakuqANWwlCc1JIVCmI0EtGOpKKyXlZtQZsLtIhWJRPL67lCj RtpRBzrrnw== ) ; Key ID = 19725`
	`cyberthreat.id. 86400 IN DNSKEY ( 257 3 13 rfDHEJ72GjcDH18bEFwFUBs3Y7K3djAV70RleCbFRbAvFWs3a5pzDGdYgj7RAABut5/B4jwNg6p4 IPwcVSwmVA== ) ; Key ID = 11965`
	DNSKEY=11965/SEP is now in the chain-of-trust
	DS=11965/SHA-1 verifies DNSKEY=11965/SEP
	Found 2 RRSIGs over DNSKEY RRset
	`cyberthreat.id. 86400 IN RRSIG ( DNSKEY 13 2 86400 20191016104138 20190916104138 11965 cyberthreat.id. LCsrGEv+WGucpJlhuy3M+MA5nmplZVf07vQgYv2xXEZTx7Mu8OS9D90vef4eyWnU/3sbYJfabaQ4 EPhnqZoivQ== )`
	`cyberthreat.id. 86400 IN RRSIG ( DNSKEY 13 2 86400 20191016104138 20190916104138 19725 cyberthreat.id. iGlfs12ThcurwbG5fbmOfpy8NsVQOtFMGZ9afTcF8PQ42GnMSFH/ozobaFVW5tiWVXvsCTqzyXON iaJbj+F4+g== )`
	RRSIG=11965 and DNSKEY=11965/SEP verifies the DNSKEY RRset
	RRSIG=19725 and DNSKEY=19725 verifies the DNSKEY RRset
	DNSKEY=19725 is now in the chain-of-trust
	Query to nx2.cyberthreat.id for cyberthreat.id/A
	Error querying nx2.cyberthreat.id/2400:8000:1000:0:0:0:0:154 for cyberthreat.id/A: 'IPv6 transport disabled'
	Received 169 bytes from 182.23.40.154
	;; Answer received from 182.23.40.154 (169 bytes) ;; HEADER SECTION ;; id = 17941 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; cyberthreat.id. IN A ;; ANSWER SECTION (2 records) cyberthreat.id. 86400 IN A 103.112.223.7 cyberthreat.id. 86400 IN RRSIG ( A 13 2 86400 20191016104138 20190916104138 19725 cyberthreat.id. sRCz6QrifHlkm9tlFFY+gRDngp4oUJp44Fx1YfSqJgwWk1dU3V5aRnoD7//fuODrJqnzK8ErhJUi oesgwTtHkQ== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	cyberthreat.id is authoritative for cyberthreat.id
	Found RRSIG signed by cyberthreat.id zone
	Query to nx2.cyberthreat.id for cyberthreat.id/SOA
	Error querying nx2.cyberthreat.id/2400:8000:1000:0:0:0:0:154 for cyberthreat.id/SOA: 'IPv6 transport disabled'
	Received 204 bytes from 182.23.40.154
	;; Answer received from 182.23.40.154 (204 bytes) ;; HEADER SECTION ;; id = 29227 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; cyberthreat.id. IN SOA ;; ANSWER SECTION (2 records) cyberthreat.id. 86400 IN SOA ( nx1.cyberthreat.id. hostmaster.cyberthreat.id. 2018101610 ;serial 14400 ;refresh 3600 ;retry 1209600 ;expire 3600 ;minimum ) cyberthreat.id. 86400 IN RRSIG ( SOA 13 2 86400 20191016104138 20190916104138 19725 cyberthreat.id. Mcg7jGOgnaxBWaSKDDKikxeJAwxPzgBorN2F8tIt6iuWLQ/9QWmUFd+0Iy5mI8MqX8XapFMsVPHR a9SS0K81uw== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Query to nx1.cyberthreat.id for cyberthreat.id/SOA
	Error querying nx1.cyberthreat.id/2001:df4:bd00:0:0:0:990:1 for cyberthreat.id/SOA: 'IPv6 transport disabled'
	Received 204 bytes from 103.112.223.1
	;; Answer received from 103.112.223.1 (204 bytes) ;; HEADER SECTION ;; id = 36289 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; cyberthreat.id. IN SOA ;; ANSWER SECTION (2 records) cyberthreat.id. 86400 IN SOA ( nx1.cyberthreat.id. hostmaster.cyberthreat.id. 2018101610 ;serial 14400 ;refresh 3600 ;retry 1209600 ;expire 3600 ;minimum ) cyberthreat.id. 86400 IN RRSIG ( SOA 13 2 86400 20191016104138 20190916104138 19725 cyberthreat.id. Mcg7jGOgnaxBWaSKDDKikxeJAwxPzgBorN2F8tIt6iuWLQ/9QWmUFd+0Iy5mI8MqX8XapFMsVPHR a9SS0K81uw== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Query to nx2.cyberthreat.id for cyberthreat.id/A
	Received 169 bytes from 182.23.40.154
	;; Answer received from 182.23.40.154 (169 bytes) ;; HEADER SECTION ;; id = 16513 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; cyberthreat.id. IN A ;; ANSWER SECTION (2 records) cyberthreat.id. 86400 IN A 103.112.223.7 cyberthreat.id. 86400 IN RRSIG ( A 13 2 86400 20191016104138 20190916104138 19725 cyberthreat.id. sRCz6QrifHlkm9tlFFY+gRDngp4oUJp44Fx1YfSqJgwWk1dU3V5aRnoD7//fuODrJqnzK8ErhJUi oesgwTtHkQ== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	cyberthreat.id A RR has value 103.112.223.7
	Found 1 RRSIGs over A RRset
	`cyberthreat.id. 86400 IN RRSIG ( A 13 2 86400 20191016104138 20190916104138 19725 cyberthreat.id. sRCz6QrifHlkm9tlFFY+gRDngp4oUJp44Fx1YfSqJgwWk1dU3V5aRnoD7//fuODrJqnzK8ErhJUi oesgwTtHkQ== )`
	RRSIG=19725 and DNSKEY=19725 verifies the A RRset

Move your mouse over any or symbols for remediation hints.

Want a second opinion? Test cyberthreat.id at dnsviz.net.

DNSSEC Analyzer

↓ Advanced options ↑ Advanced options

Trust Anchor:
Name Servers: