DNSSEC Analyzer - cyberthreat.id

Domain Name:

Time: 2019-11-15 19:52:41 UTC, NTP stratum 4

Analyzing DNSSEC problems for cyberthreat.id

DS=20326/SHA-256 is now in the chain-of-trust

	Checking DS between Trust Anchor and .
	`. IN DS ( 20326 8 2 e06d44b80b8f1d39a95c0b0d7c65d08458e880409bbc683457104237c7f8ec8d )`
	Query to f.root-servers.net for ./DNSKEY
	Error querying f.root-servers.net/2001:500:2f:0:0:0:0:f for ./DNSKEY: 'IPv6 transport disabled'
	Received 864 bytes from 192.5.5.241
	;; Answer received from 192.5.5.241 (864 bytes) ;; HEADER SECTION ;; id = 16459 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1472 ;; option: ;; QUESTION SECTION (1 record) ;; . IN DNSKEY ;; ANSWER SECTION (3 records) . 172800 IN DNSKEY ( 256 3 8 AwEAAbPwrxwtOMENWvblQbUFwBllR7ZtXsu9rg/LdyklKs9gU2GQTeOc59XjhuAPZ4WrT09z6YPL +vzIIJqnG3Hiru7hFUQ4pH0qsLNxrsuZrZYmXAKoVa9SXL1Ap0LygwrIugEk1G4v7Rk/Alt1jLUI E+ZymGtSEhIuGQdXrEmj3ffzXY13H42X4Ja3vJTn/WIQOXY7vwHXGDypSh9j0Tt0hknF1yVJCrIp fkhFWihMKNdMzMprD4bV+PDLRA5YSn3OPIeUnRn9qBUCN11LXQKb+W3Jg+m/5xQRQJzJ/qXgDh1+ aN+Mc9AstP29Y/ZLFmF6cKtL2zoUMN5I5QymeSkJJzc= ) ; Key ID = 22545 . 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; Key ID = 20326 . 172800 IN RRSIG ( DNSKEY 8 0 172800 20191201000000 20191110000000 20326 . Ls9QKBBhEie6yu8Y8nxmSg/K7CvsJ7mQr1mgOiOkzokm97IpD+Wnls/84l77jFKDJBHEA2mzEMUi eKMb4B95aGqrJua2J4HB/51jwaae7GrVpKtS5w5ni5k1bpB6qPmvmlDlq4vJ3YOVawMsy4vF9Dxa lQ0satgSoFdze4QNUy9J+2Lcjtf6+OamOS7R2bKOQGD4z7+ftKLJqYXlKw3UgGMmnaCMVbcC6IpU UHl52CEPlWTga/fI33QVJjD3j2zkZCip+lIPY3lNb+CXHKr8UvgnrQckZ/MYnvUNlt/JxjFME1hy bwACbrJ/Ea6IwGbDNW4wsmq8HLSn5n9mA6n6iw== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1472 ;; option:
	Found 2 DNSKEY records for .
	`. 172800 IN DNSKEY ( 256 3 8 AwEAAbPwrxwtOMENWvblQbUFwBllR7ZtXsu9rg/LdyklKs9gU2GQTeOc59XjhuAPZ4WrT09z6YPL +vzIIJqnG3Hiru7hFUQ4pH0qsLNxrsuZrZYmXAKoVa9SXL1Ap0LygwrIugEk1G4v7Rk/Alt1jLUI E+ZymGtSEhIuGQdXrEmj3ffzXY13H42X4Ja3vJTn/WIQOXY7vwHXGDypSh9j0Tt0hknF1yVJCrIp fkhFWihMKNdMzMprD4bV+PDLRA5YSn3OPIeUnRn9qBUCN11LXQKb+W3Jg+m/5xQRQJzJ/qXgDh1+ aN+Mc9AstP29Y/ZLFmF6cKtL2zoUMN5I5QymeSkJJzc= ) ; Key ID = 22545`
	`. 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; Key ID = 20326`
	DNSKEY=20326/SEP is now in the chain-of-trust
	DS=20326/SHA-256 verifies DNSKEY=20326/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`. 172800 IN RRSIG ( DNSKEY 8 0 172800 20191201000000 20191110000000 20326 . Ls9QKBBhEie6yu8Y8nxmSg/K7CvsJ7mQr1mgOiOkzokm97IpD+Wnls/84l77jFKDJBHEA2mzEMUi eKMb4B95aGqrJua2J4HB/51jwaae7GrVpKtS5w5ni5k1bpB6qPmvmlDlq4vJ3YOVawMsy4vF9Dxa lQ0satgSoFdze4QNUy9J+2Lcjtf6+OamOS7R2bKOQGD4z7+ftKLJqYXlKw3UgGMmnaCMVbcC6IpU UHl52CEPlWTga/fI33QVJjD3j2zkZCip+lIPY3lNb+CXHKr8UvgnrQckZ/MYnvUNlt/JxjFME1hy bwACbrJ/Ea6IwGbDNW4wsmq8HLSn5n9mA6n6iw== )`
	RRSIG=20326 and DNSKEY=20326/SEP verifies the DNSKEY RRset
	DNSKEY=22545 is now in the chain-of-trust
	Query to m.root-servers.net for cyberthreat.id/A
	Received 729 bytes from 202.12.27.33
	;; Answer received from 202.12.27.33 (729 bytes) ;; HEADER SECTION ;; id = 58697 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 8 arcount = 11 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; cyberthreat.id. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (8 records) id. 172800 IN NS c.dns.id. id. 172800 IN NS d.dns.id. id. 172800 IN NS ns4.apnic.net. id. 172800 IN NS b.dns.id. id. 172800 IN NS e.dns.id. id. 86400 IN DS 26887 8 1 2f1e41b5bf7da7f134b4025e8242d3a9ef54801c id. 86400 IN DS ( 26887 8 2 28be22003a1afb1ed9a7bb82482274e2db5f09a6c50702c731e040d2257347ea ) id. 86400 IN RRSIG ( DS 8 1 86400 20191128170000 20191115160000 22545 . iq3OhaG0rztdTsXXIaTh2ki9N7t+zoUQ/VWTBTpy1ZuRd965ihCjckaJ0C7ua4jVJlth2J8EMEa4 CPsyvkrG5Wk0Oc8P02xBkc9GHTPtnd30a0he90540o0HV0KLem0KFmcv9ldNZbU01A78LyTUdoTg 3R+wC9SLJ8R+MiRXGKVngdyxHYwgzxv94l2oXid02G6eqrq/7gfJGa7o+ig5QXToSC0BbmFEJWvm G4ZTjmJUg6wjn5DKmFxIq1gSc2TC6AOKyEOL+AjWYmyNbiJoC597jG+9zGVjTDAqME/Xuvo+f+Ny ZYD4h/VIkWJS+sMJDf7JdKAkomp+u+XEFqoP6Q== ) ;; ADDITIONAL SECTION (11 records) b.dns.id. 172800 IN A 103.19.179.179 c.dns.id. 172800 IN A 103.19.178.178 d.dns.id. 172800 IN A 45.126.57.57 e.dns.id. 172800 IN A 103.19.177.177 ns4.apnic.net. 172800 IN A 202.12.31.53 b.dns.id. 172800 IN AAAA 2402:ee80:b::b c.dns.id. 172800 IN AAAA 2402:ee80:c::c d.dns.id. 172800 IN AAAA 2402:ee80:d::d e.dns.id. 172800 IN AAAA 2001:df5:4000:4::4 ns4.apnic.net. 172800 IN AAAA 2001:dd8:12::53 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Query to g.root-servers.net for id/DNSKEY
	Error querying g.root-servers.net/2001:500:12:0:0:0:0:d0d for id/DNSKEY: 'IPv6 transport disabled'
	Received 717 bytes from 192.112.36.4
	;; Answer received from 192.112.36.4 (717 bytes) ;; HEADER SECTION ;; id = 54389 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 8 arcount = 11 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; id. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (8 records) id. 172800 IN NS e.dns.id. id. 172800 IN NS c.dns.id. id. 172800 IN NS ns4.apnic.net. id. 172800 IN NS d.dns.id. id. 172800 IN NS b.dns.id. id. 86400 IN DS ( 26887 8 2 28be22003a1afb1ed9a7bb82482274e2db5f09a6c50702c731e040d2257347ea ) id. 86400 IN DS 26887 8 1 2f1e41b5bf7da7f134b4025e8242d3a9ef54801c id. 86400 IN RRSIG ( DS 8 1 86400 20191128170000 20191115160000 22545 . iq3OhaG0rztdTsXXIaTh2ki9N7t+zoUQ/VWTBTpy1ZuRd965ihCjckaJ0C7ua4jVJlth2J8EMEa4 CPsyvkrG5Wk0Oc8P02xBkc9GHTPtnd30a0he90540o0HV0KLem0KFmcv9ldNZbU01A78LyTUdoTg 3R+wC9SLJ8R+MiRXGKVngdyxHYwgzxv94l2oXid02G6eqrq/7gfJGa7o+ig5QXToSC0BbmFEJWvm G4ZTjmJUg6wjn5DKmFxIq1gSc2TC6AOKyEOL+AjWYmyNbiJoC597jG+9zGVjTDAqME/Xuvo+f+Ny ZYD4h/VIkWJS+sMJDf7JdKAkomp+u+XEFqoP6Q== ) ;; ADDITIONAL SECTION (11 records) b.dns.id. 172800 IN A 103.19.179.179 c.dns.id. 172800 IN A 103.19.178.178 d.dns.id. 172800 IN A 45.126.57.57 e.dns.id. 172800 IN A 103.19.177.177 ns4.apnic.net. 172800 IN A 202.12.31.53 b.dns.id. 172800 IN AAAA 2402:ee80:b::b c.dns.id. 172800 IN AAAA 2402:ee80:c::c d.dns.id. 172800 IN AAAA 2402:ee80:d::d e.dns.id. 172800 IN AAAA 2001:df5:4000:4::4 ns4.apnic.net. 172800 IN AAAA 2001:dd8:12::53 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found child zone id

	Checking DS between . and id
	Query to a.root-servers.net for id/DS
	Error querying a.root-servers.net/2001:503:ba3e:0:0:0:2:30 for id/DS: 'IPv6 transport disabled'
	Received 402 bytes from 198.41.0.4
	;; Answer received from 198.41.0.4 (402 bytes) ;; HEADER SECTION ;; id = 64044 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; id. IN DS ;; ANSWER SECTION (3 records) id. 86400 IN DS 26887 8 1 2f1e41b5bf7da7f134b4025e8242d3a9ef54801c id. 86400 IN DS ( 26887 8 2 28be22003a1afb1ed9a7bb82482274e2db5f09a6c50702c731e040d2257347ea ) id. 86400 IN RRSIG ( DS 8 1 86400 20191128170000 20191115160000 22545 . iq3OhaG0rztdTsXXIaTh2ki9N7t+zoUQ/VWTBTpy1ZuRd965ihCjckaJ0C7ua4jVJlth2J8EMEa4 CPsyvkrG5Wk0Oc8P02xBkc9GHTPtnd30a0he90540o0HV0KLem0KFmcv9ldNZbU01A78LyTUdoTg 3R+wC9SLJ8R+MiRXGKVngdyxHYwgzxv94l2oXid02G6eqrq/7gfJGa7o+ig5QXToSC0BbmFEJWvm G4ZTjmJUg6wjn5DKmFxIq1gSc2TC6AOKyEOL+AjWYmyNbiJoC597jG+9zGVjTDAqME/Xuvo+f+Ny ZYD4h/VIkWJS+sMJDf7JdKAkomp+u+XEFqoP6Q== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found 2 DS records for id in the . zone
	DS=26887/SHA-1 has algorithm RSASHA256
	DS=26887/SHA-256 has algorithm RSASHA256
	Found 1 RRSIGs over DS RRset
	`id. 86400 IN RRSIG ( DS 8 1 86400 20191128170000 20191115160000 22545 . iq3OhaG0rztdTsXXIaTh2ki9N7t+zoUQ/VWTBTpy1ZuRd965ihCjckaJ0C7ua4jVJlth2J8EMEa4 CPsyvkrG5Wk0Oc8P02xBkc9GHTPtnd30a0he90540o0HV0KLem0KFmcv9ldNZbU01A78LyTUdoTg 3R+wC9SLJ8R+MiRXGKVngdyxHYwgzxv94l2oXid02G6eqrq/7gfJGa7o+ig5QXToSC0BbmFEJWvm G4ZTjmJUg6wjn5DKmFxIq1gSc2TC6AOKyEOL+AjWYmyNbiJoC597jG+9zGVjTDAqME/Xuvo+f+Ny ZYD4h/VIkWJS+sMJDf7JdKAkomp+u+XEFqoP6Q== )`
	RRSIG=22545 and DNSKEY=22545 verifies the DS RRset
	DS=26887/SHA-1 is now in the chain-of-trust
	`id. 86400 IN DS 26887 8 1 2f1e41b5bf7da7f134b4025e8242d3a9ef54801c`
	`id. 86400 IN DS ( 26887 8 2 28be22003a1afb1ed9a7bb82482274e2db5f09a6c50702c731e040d2257347ea )`
	Query to c.dns.id for id/DNSKEY
	Error querying c.dns.id/2402:ee80:c:0:0:0:0:c for id/DNSKEY: 'IPv6 transport disabled'
	Received 1163 bytes from 103.19.178.178
	;; Answer received from 103.19.178.178 (1163 bytes) ;; HEADER SECTION ;; id = 11337 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 4 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; id. IN DNSKEY ;; ANSWER SECTION (4 records) id. 86400 IN DNSKEY ( 256 3 8 AwEAAckf2f45NrA7QrZhdbbrBV1ku04QvQWGBqF3gPQ1fe473tV8OVztNzshC4sai1hQDVQ0b5Q1 AWb3u6I6MEtDIvWA2EJU69IRAFj3FcuJoEbMXCKk9xeusPrgnAyu8zOn7Ur2krJ0AVn6nBNjsINA O8UMEC3nT1Loot0GW0Wo98L8gAYwfUofHXCsUlAeOM2m7j2zKu5sVWH+H+/7H4+dEDMDaUj0exqx FVxhsMVsmgqtslmdS7wPWUa5ZB6fm9dybE8aZlSwyeyIRyso6khHRFX7csxbECjfrmUJ9YKMH9td 5/gHVT+HQNQeIJ1khIS21SvWt/GHqcGqDxvS/fTQuRU= ) ; Key ID = 22449 id. 86400 IN DNSKEY ( 257 3 8 AwEAAcTe9z3F7RaSKwc6BUrfOAZTKl2uV+VfcYu3+/L5n2AmmqRnep4tUvLLp6awc0/G0sqADalq iLwossfpihHwyXzpD7/DwkUNKtJpbfafeKKqoO7PK10T/tnEyjC6TQLenZIpzVEQIH9Qd0OGr6xb C+whZBfLWwKl8QpdrqcQ6gpH5KpRvvSmo6hJ50SEOqTbJLOtvA4MtBP8k1yKSXDbXTGMniW/wRZf C3bMJGtK2xMY2wPOXsYM9u+MOWaqdhOKdxzG0je9ztz+F97LJa5dke48KcNmHicwDnIHtLm+8Xnm qn/MAPJHnB1NWMWXiMZR8ugrFoPXSkw5IoemtNMjxeM= ) ; Key ID = 26887 id. 86400 IN RRSIG ( DNSKEY 8 1 86400 20191202232605 20191102224258 22449 id. ZFBN66o3lxV/YOCLXa+N29tsL378hx7tJs2mKVHHNxwOvppk+RY3DnpbOwKBSx9iH55MXVdO37aX cEgEflnMJN6lQrTo/gg4kbQvn1nzWlUpUTEusKNE7u/27Hox89EQWLzxGIsJvPGpxEzdts7tt/Ob n0twN0cmqXldVi/CVOX4tx8CWpS8m/pYnEN5yXfP8p66xTy6IfrdfxfSQjZtSsGbxcN+QJtdcjef ICzmaLaYZshuxoGVnbg5MLE7h+C1v2LIEXwr0uJhByFDPfkN1H2FF/8RJFxRz/cIfJOt/4cHWcgP bOJ5YKvo/mug+FRoKDfPu+CJj8HRZialdL3Hww== ) id. 86400 IN RRSIG ( DNSKEY 8 1 86400 20191202232605 20191102224258 26887 id. RiICVi6GBfhu1JQEcbUguLMtArQ0t1jn56YwwRSntVVR8I+LiPXPn1Qg+AcmXgIu8RWk6LgsYNbW CCDaT1a+5PFk0r9hiEtpnblWvG2/+PwPvFNVJTBZ7QHW7i9FbeMslqZxGJSEK6cVw4nou2n4SN/J JRdRd5qYpHNksCvsaA54muZfbFYWLvND/XRx44lgziSxKwH7T4Wj5xIitnU5EV5qyRMphEdfne1S g9Q0S1reWvJveLrtFx/7OCwhgINAOA/MsBouILlHE1BtGKf4RSl9JAjkkQqZK2JTwgsyOfZaSwak g6A7VrfrOfO6B9nng4r7byB1keBpPLB8KyAo9w== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found 2 DNSKEY records for id
	`id. 86400 IN DNSKEY ( 256 3 8 AwEAAckf2f45NrA7QrZhdbbrBV1ku04QvQWGBqF3gPQ1fe473tV8OVztNzshC4sai1hQDVQ0b5Q1 AWb3u6I6MEtDIvWA2EJU69IRAFj3FcuJoEbMXCKk9xeusPrgnAyu8zOn7Ur2krJ0AVn6nBNjsINA O8UMEC3nT1Loot0GW0Wo98L8gAYwfUofHXCsUlAeOM2m7j2zKu5sVWH+H+/7H4+dEDMDaUj0exqx FVxhsMVsmgqtslmdS7wPWUa5ZB6fm9dybE8aZlSwyeyIRyso6khHRFX7csxbECjfrmUJ9YKMH9td 5/gHVT+HQNQeIJ1khIS21SvWt/GHqcGqDxvS/fTQuRU= ) ; Key ID = 22449`
	`id. 86400 IN DNSKEY ( 257 3 8 AwEAAcTe9z3F7RaSKwc6BUrfOAZTKl2uV+VfcYu3+/L5n2AmmqRnep4tUvLLp6awc0/G0sqADalq iLwossfpihHwyXzpD7/DwkUNKtJpbfafeKKqoO7PK10T/tnEyjC6TQLenZIpzVEQIH9Qd0OGr6xb C+whZBfLWwKl8QpdrqcQ6gpH5KpRvvSmo6hJ50SEOqTbJLOtvA4MtBP8k1yKSXDbXTGMniW/wRZf C3bMJGtK2xMY2wPOXsYM9u+MOWaqdhOKdxzG0je9ztz+F97LJa5dke48KcNmHicwDnIHtLm+8Xnm qn/MAPJHnB1NWMWXiMZR8ugrFoPXSkw5IoemtNMjxeM= ) ; Key ID = 26887`
	DNSKEY=26887/SEP is now in the chain-of-trust
	DS=26887/SHA-1 verifies DNSKEY=26887/SEP
	DS=26887/SHA-256 verifies DNSKEY=26887/SEP
	Found 2 RRSIGs over DNSKEY RRset
	`id. 86400 IN RRSIG ( DNSKEY 8 1 86400 20191202232605 20191102224258 22449 id. ZFBN66o3lxV/YOCLXa+N29tsL378hx7tJs2mKVHHNxwOvppk+RY3DnpbOwKBSx9iH55MXVdO37aX cEgEflnMJN6lQrTo/gg4kbQvn1nzWlUpUTEusKNE7u/27Hox89EQWLzxGIsJvPGpxEzdts7tt/Ob n0twN0cmqXldVi/CVOX4tx8CWpS8m/pYnEN5yXfP8p66xTy6IfrdfxfSQjZtSsGbxcN+QJtdcjef ICzmaLaYZshuxoGVnbg5MLE7h+C1v2LIEXwr0uJhByFDPfkN1H2FF/8RJFxRz/cIfJOt/4cHWcgP bOJ5YKvo/mug+FRoKDfPu+CJj8HRZialdL3Hww== )`
	`id. 86400 IN RRSIG ( DNSKEY 8 1 86400 20191202232605 20191102224258 26887 id. RiICVi6GBfhu1JQEcbUguLMtArQ0t1jn56YwwRSntVVR8I+LiPXPn1Qg+AcmXgIu8RWk6LgsYNbW CCDaT1a+5PFk0r9hiEtpnblWvG2/+PwPvFNVJTBZ7QHW7i9FbeMslqZxGJSEK6cVw4nou2n4SN/J JRdRd5qYpHNksCvsaA54muZfbFYWLvND/XRx44lgziSxKwH7T4Wj5xIitnU5EV5qyRMphEdfne1S g9Q0S1reWvJveLrtFx/7OCwhgINAOA/MsBouILlHE1BtGKf4RSl9JAjkkQqZK2JTwgsyOfZaSwak g6A7VrfrOfO6B9nng4r7byB1keBpPLB8KyAo9w== )`
	RRSIG=22449 and DNSKEY=22449 verifies the DNSKEY RRset
	RRSIG=26887 and DNSKEY=26887/SEP verifies the DNSKEY RRset
	DNSKEY=22449 is now in the chain-of-trust
	Query to d.dns.id for cyberthreat.id/A
	Received 493 bytes from 45.126.57.57
	;; Answer received from 45.126.57.57 (493 bytes) ;; HEADER SECTION ;; id = 23246 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 4 arcount = 5 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; cyberthreat.id. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (4 records) cyberthreat.id. 43200 IN NS nx1.cyberthreat.id. cyberthreat.id. 43200 IN NS nx2.cyberthreat.id. cyberthreat.id. 43200 IN DS ( 11965 13 1 f5ccc131a55a75b57039ad54abf701a85c9f88ec ) cyberthreat.id. 43200 IN RRSIG ( DS 8 2 43200 20191202224314 20191102220728 22449 id. dl5geDbeEMosy2ppbPQ9I1yUuOJj2VsEheNd2M3MhrQvDWxBQNi5j2Qu6AsQQyBU/q1syQNwYphK MBh3CywiZe9GvmP4D31PZEhnPf9qcrN3kggVZGEH8nq8z6UPUCaELo2jbweePI/tYJUMKeXae7iz xTKMwclzzDWTMPCMYn2+zLTjxbm8zVlNV0GMYoQLs/s2Mk9X1HfMa60KKfRHDzOqdZDtPvlAxE5X Jme2JcsGWZGr0XZepwS9Oc0AJLTAixysEmHHr4aX97/CMDjyGP1mvBtHdDeZri+UFdSlKeglFn8m /UY/Mf+mRIC7NPwrJDlCT7un8z1XM7tytUo06Q== ) ;; ADDITIONAL SECTION (5 records) nx1.cyberthreat.id. 43200 IN A 103.112.223.1 nx1.cyberthreat.id. 43200 IN AAAA 2001:df4:bd00::990:1 nx2.cyberthreat.id. 43200 IN A 182.23.40.154 nx2.cyberthreat.id. 43200 IN AAAA 2400:8000:1000::154 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Query to e.dns.id for cyberthreat.id/DNSKEY
	Error querying e.dns.id/2001:df5:4000:4:0:0:0:4 for cyberthreat.id/DNSKEY: 'IPv6 transport disabled'
	Received 493 bytes from 103.19.177.177
	;; Answer received from 103.19.177.177 (493 bytes) ;; HEADER SECTION ;; id = 40503 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 4 arcount = 5 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; cyberthreat.id. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (4 records) cyberthreat.id. 43200 IN NS nx2.cyberthreat.id. cyberthreat.id. 43200 IN NS nx1.cyberthreat.id. cyberthreat.id. 43200 IN DS ( 11965 13 1 f5ccc131a55a75b57039ad54abf701a85c9f88ec ) cyberthreat.id. 43200 IN RRSIG ( DS 8 2 43200 20191202224314 20191102220728 22449 id. dl5geDbeEMosy2ppbPQ9I1yUuOJj2VsEheNd2M3MhrQvDWxBQNi5j2Qu6AsQQyBU/q1syQNwYphK MBh3CywiZe9GvmP4D31PZEhnPf9qcrN3kggVZGEH8nq8z6UPUCaELo2jbweePI/tYJUMKeXae7iz xTKMwclzzDWTMPCMYn2+zLTjxbm8zVlNV0GMYoQLs/s2Mk9X1HfMa60KKfRHDzOqdZDtPvlAxE5X Jme2JcsGWZGr0XZepwS9Oc0AJLTAixysEmHHr4aX97/CMDjyGP1mvBtHdDeZri+UFdSlKeglFn8m /UY/Mf+mRIC7NPwrJDlCT7un8z1XM7tytUo06Q== ) ;; ADDITIONAL SECTION (5 records) nx1.cyberthreat.id. 43200 IN A 103.112.223.1 nx2.cyberthreat.id. 43200 IN A 182.23.40.154 nx1.cyberthreat.id. 43200 IN AAAA 2001:df4:bd00::990:1 nx2.cyberthreat.id. 43200 IN AAAA 2400:8000:1000::154 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found child zone cyberthreat.id

cyberthreat.id

	Checking DS between id and cyberthreat.id
	Query to e.dns.id for cyberthreat.id/DS
	Error querying e.dns.id/2001:df5:4000:4:0:0:0:4 for cyberthreat.id/DS: 'IPv6 transport disabled'
	Received 369 bytes from 103.19.177.177
	;; Answer received from 103.19.177.177 (369 bytes) ;; HEADER SECTION ;; id = 58543 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; cyberthreat.id. IN DS ;; ANSWER SECTION (2 records) cyberthreat.id. 43200 IN DS ( 11965 13 1 f5ccc131a55a75b57039ad54abf701a85c9f88ec ) cyberthreat.id. 43200 IN RRSIG ( DS 8 2 43200 20191202224314 20191102220728 22449 id. dl5geDbeEMosy2ppbPQ9I1yUuOJj2VsEheNd2M3MhrQvDWxBQNi5j2Qu6AsQQyBU/q1syQNwYphK MBh3CywiZe9GvmP4D31PZEhnPf9qcrN3kggVZGEH8nq8z6UPUCaELo2jbweePI/tYJUMKeXae7iz xTKMwclzzDWTMPCMYn2+zLTjxbm8zVlNV0GMYoQLs/s2Mk9X1HfMa60KKfRHDzOqdZDtPvlAxE5X Jme2JcsGWZGr0XZepwS9Oc0AJLTAixysEmHHr4aX97/CMDjyGP1mvBtHdDeZri+UFdSlKeglFn8m /UY/Mf+mRIC7NPwrJDlCT7un8z1XM7tytUo06Q== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found 1 DS records for cyberthreat.id in the id zone
	DS=11965/SHA-1 has algorithm ECDSAP256SHA256
	Found 1 RRSIGs over DS RRset
	`cyberthreat.id. 43200 IN RRSIG ( DS 8 2 43200 20191202224314 20191102220728 22449 id. dl5geDbeEMosy2ppbPQ9I1yUuOJj2VsEheNd2M3MhrQvDWxBQNi5j2Qu6AsQQyBU/q1syQNwYphK MBh3CywiZe9GvmP4D31PZEhnPf9qcrN3kggVZGEH8nq8z6UPUCaELo2jbweePI/tYJUMKeXae7iz xTKMwclzzDWTMPCMYn2+zLTjxbm8zVlNV0GMYoQLs/s2Mk9X1HfMa60KKfRHDzOqdZDtPvlAxE5X Jme2JcsGWZGr0XZepwS9Oc0AJLTAixysEmHHr4aX97/CMDjyGP1mvBtHdDeZri+UFdSlKeglFn8m /UY/Mf+mRIC7NPwrJDlCT7un8z1XM7tytUo06Q== )`
	RRSIG=22449 and DNSKEY=22449 verifies the DS RRset
	DS=11965/SHA-1 is now in the chain-of-trust
	`cyberthreat.id. 43200 IN DS ( 11965 13 1 f5ccc131a55a75b57039ad54abf701a85c9f88ec )`
	Query to nx1.cyberthreat.id for cyberthreat.id/DNSKEY
	Error querying nx1.cyberthreat.id/2001:df4:bd00:0:0:0:990:1 for cyberthreat.id/DNSKEY: 'IPv6 transport disabled'
	Received 423 bytes from 103.112.223.1
	;; Answer received from 103.112.223.1 (423 bytes) ;; HEADER SECTION ;; id = 54273 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 4 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; cyberthreat.id. IN DNSKEY ;; ANSWER SECTION (4 records) cyberthreat.id. 86400 IN DNSKEY ( 256 3 13 f8lop9fF7xrgaLmRDcXlTPNvADFQakuqANWwlCc1JIVCmI0EtGOpKKyXlZtQZsLtIhWJRPL67lCj RtpRBzrrnw== ) ; Key ID = 19725 cyberthreat.id. 86400 IN DNSKEY ( 257 3 13 rfDHEJ72GjcDH18bEFwFUBs3Y7K3djAV70RleCbFRbAvFWs3a5pzDGdYgj7RAABut5/B4jwNg6p4 IPwcVSwmVA== ) ; Key ID = 11965 cyberthreat.id. 86400 IN RRSIG ( DNSKEY 13 2 86400 20191118073253 20191019073253 11965 cyberthreat.id. qvehj9kKS/o8by9Cu3SaYHyOUkneds2VXEKC69Z+GIhQTW4tgy7MMJfi6f3R3gPK0ybVVHz0Qwar XZL4yhggQw== ) cyberthreat.id. 86400 IN RRSIG ( DNSKEY 13 2 86400 20191118073253 20191019073253 19725 cyberthreat.id. RpVSG5amIN4oOq2FbNO8rrstAN2bDX6jPNi/RR4dyCQdpnKz/4bhsKfzv2Q8f8/LhXv2fnFmNcxu 0XjT4/CfdQ== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found 2 DNSKEY records for cyberthreat.id
	`cyberthreat.id. 86400 IN DNSKEY ( 256 3 13 f8lop9fF7xrgaLmRDcXlTPNvADFQakuqANWwlCc1JIVCmI0EtGOpKKyXlZtQZsLtIhWJRPL67lCj RtpRBzrrnw== ) ; Key ID = 19725`
	`cyberthreat.id. 86400 IN DNSKEY ( 257 3 13 rfDHEJ72GjcDH18bEFwFUBs3Y7K3djAV70RleCbFRbAvFWs3a5pzDGdYgj7RAABut5/B4jwNg6p4 IPwcVSwmVA== ) ; Key ID = 11965`
	DNSKEY=11965/SEP is now in the chain-of-trust
	DS=11965/SHA-1 verifies DNSKEY=11965/SEP
	Found 2 RRSIGs over DNSKEY RRset
	`cyberthreat.id. 86400 IN RRSIG ( DNSKEY 13 2 86400 20191118073253 20191019073253 11965 cyberthreat.id. qvehj9kKS/o8by9Cu3SaYHyOUkneds2VXEKC69Z+GIhQTW4tgy7MMJfi6f3R3gPK0ybVVHz0Qwar XZL4yhggQw== )`
	`cyberthreat.id. 86400 IN RRSIG ( DNSKEY 13 2 86400 20191118073253 20191019073253 19725 cyberthreat.id. RpVSG5amIN4oOq2FbNO8rrstAN2bDX6jPNi/RR4dyCQdpnKz/4bhsKfzv2Q8f8/LhXv2fnFmNcxu 0XjT4/CfdQ== )`
	RRSIG=11965 and DNSKEY=11965/SEP verifies the DNSKEY RRset
	RRSIG=19725 and DNSKEY=19725 verifies the DNSKEY RRset
	DNSKEY=19725 is now in the chain-of-trust
	Query to nx1.cyberthreat.id for cyberthreat.id/A
	Received 169 bytes from 103.112.223.1
	;; Answer received from 103.112.223.1 (169 bytes) ;; HEADER SECTION ;; id = 11828 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; cyberthreat.id. IN A ;; ANSWER SECTION (2 records) cyberthreat.id. 86400 IN A 103.112.223.7 cyberthreat.id. 86400 IN RRSIG ( A 13 2 86400 20191118073253 20191019073253 19725 cyberthreat.id. Z78poFeNHeveoZAcpsoR+hqESLALg0b8xBSK/YOTVnug1SXafivw5S/OMIyFAkvO4iYMfHy0RWZ2 pL+4Ai4aaw== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	cyberthreat.id is authoritative for cyberthreat.id
	Found RRSIG signed by cyberthreat.id zone
	Query to nx2.cyberthreat.id for cyberthreat.id/SOA
	Received 204 bytes from 182.23.40.154
	;; Answer received from 182.23.40.154 (204 bytes) ;; HEADER SECTION ;; id = 3430 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; cyberthreat.id. IN SOA ;; ANSWER SECTION (2 records) cyberthreat.id. 86400 IN SOA ( nx1.cyberthreat.id. hostmaster.cyberthreat.id. 2018101613 ;serial 14400 ;refresh 3600 ;retry 1209600 ;expire 3600 ;minimum ) cyberthreat.id. 86400 IN RRSIG ( SOA 13 2 86400 20191118073253 20191019073253 19725 cyberthreat.id. ZkFNOA9t18LLxfqL/vV8n7eXdW36fvQ9YtdYoUGVDiBiShAV/MC0Qg5NY/r1XEnm/hutNeCiIBPS 52p01wrgXw== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Query to nx1.cyberthreat.id for cyberthreat.id/SOA
	Error querying nx1.cyberthreat.id/2001:df4:bd00:0:0:0:990:1 for cyberthreat.id/SOA: 'IPv6 transport disabled'
	Received 204 bytes from 103.112.223.1
	;; Answer received from 103.112.223.1 (204 bytes) ;; HEADER SECTION ;; id = 64628 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; cyberthreat.id. IN SOA ;; ANSWER SECTION (2 records) cyberthreat.id. 86400 IN SOA ( nx1.cyberthreat.id. hostmaster.cyberthreat.id. 2018101613 ;serial 14400 ;refresh 3600 ;retry 1209600 ;expire 3600 ;minimum ) cyberthreat.id. 86400 IN RRSIG ( SOA 13 2 86400 20191118073253 20191019073253 19725 cyberthreat.id. ZkFNOA9t18LLxfqL/vV8n7eXdW36fvQ9YtdYoUGVDiBiShAV/MC0Qg5NY/r1XEnm/hutNeCiIBPS 52p01wrgXw== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Query to nx1.cyberthreat.id for cyberthreat.id/A
	Received 169 bytes from 103.112.223.1
	;; Answer received from 103.112.223.1 (169 bytes) ;; HEADER SECTION ;; id = 12723 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; cyberthreat.id. IN A ;; ANSWER SECTION (2 records) cyberthreat.id. 86400 IN A 103.112.223.7 cyberthreat.id. 86400 IN RRSIG ( A 13 2 86400 20191118073253 20191019073253 19725 cyberthreat.id. Z78poFeNHeveoZAcpsoR+hqESLALg0b8xBSK/YOTVnug1SXafivw5S/OMIyFAkvO4iYMfHy0RWZ2 pL+4Ai4aaw== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	cyberthreat.id A RR has value 103.112.223.7
	Found 1 RRSIGs over A RRset
	`cyberthreat.id. 86400 IN RRSIG ( A 13 2 86400 20191118073253 20191019073253 19725 cyberthreat.id. Z78poFeNHeveoZAcpsoR+hqESLALg0b8xBSK/YOTVnug1SXafivw5S/OMIyFAkvO4iYMfHy0RWZ2 pL+4Ai4aaw== )`
	RRSIG=19725 and DNSKEY=19725 verifies the A RRset

Move your mouse over any or symbols for remediation hints.

Want a second opinion? Test cyberthreat.id at dnsviz.net.

DNSSEC Analyzer

↓ Advanced options ↑ Advanced options

Trust Anchor:
Name Servers: