DNSSEC Analyzer - gameinferno.de

Domain Name:

Time: 2019-12-15 13:46:01 UTC, NTP stratum 4

Analyzing DNSSEC problems for gameinferno.de

DS=20326/SHA-256 is now in the chain-of-trust

	Checking DS between Trust Anchor and .
	`. IN DS ( 20326 8 2 e06d44b80b8f1d39a95c0b0d7c65d08458e880409bbc683457104237c7f8ec8d )`
	Query to m.root-servers.net for ./DNSKEY
	Received 864 bytes from 202.12.27.33
	;; Answer received from 202.12.27.33 (864 bytes) ;; HEADER SECTION ;; id = 47239 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; . IN DNSKEY ;; ANSWER SECTION (3 records) . 172800 IN DNSKEY ( 256 3 8 AwEAAbPwrxwtOMENWvblQbUFwBllR7ZtXsu9rg/LdyklKs9gU2GQTeOc59XjhuAPZ4WrT09z6YPL +vzIIJqnG3Hiru7hFUQ4pH0qsLNxrsuZrZYmXAKoVa9SXL1Ap0LygwrIugEk1G4v7Rk/Alt1jLUI E+ZymGtSEhIuGQdXrEmj3ffzXY13H42X4Ja3vJTn/WIQOXY7vwHXGDypSh9j0Tt0hknF1yVJCrIp fkhFWihMKNdMzMprD4bV+PDLRA5YSn3OPIeUnRn9qBUCN11LXQKb+W3Jg+m/5xQRQJzJ/qXgDh1+ aN+Mc9AstP29Y/ZLFmF6cKtL2zoUMN5I5QymeSkJJzc= ) ; Key ID = 22545 . 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; Key ID = 20326 . 172800 IN RRSIG ( DNSKEY 8 0 172800 20191231000000 20191210000000 20326 . M6PHO6VOOLVi9f31412BD96l/dWG8WOE+R6Q+KYMr4aJpS/hTZjjs6EDa249B2cjO7QzSD+qxWNT s7enqC1DsEAjeVm0epe3h6TFVBjX76R0MIqYC3+LjgGjyQnpish6mPApIx0ZC8mxewn0GCvC9Gqk 9S7s7IDD8FQWosXQRChqF9M7qkG1NuKvgPvqgpAk3naii0Eajx8N3XiPo8EwVS3yWOct4wcY8B1s fZjvL7mLDAiggGouyxt5PGm9TdnG7eioZPM1LyX1YgDV4/qUKmp7BHhsVKh/nQaR46yxbcpiRz6R nADB991g/+3bgY8dSACfUI0aBFsRT0DHHnMfpg== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found 2 DNSKEY records for .
	`. 172800 IN DNSKEY ( 256 3 8 AwEAAbPwrxwtOMENWvblQbUFwBllR7ZtXsu9rg/LdyklKs9gU2GQTeOc59XjhuAPZ4WrT09z6YPL +vzIIJqnG3Hiru7hFUQ4pH0qsLNxrsuZrZYmXAKoVa9SXL1Ap0LygwrIugEk1G4v7Rk/Alt1jLUI E+ZymGtSEhIuGQdXrEmj3ffzXY13H42X4Ja3vJTn/WIQOXY7vwHXGDypSh9j0Tt0hknF1yVJCrIp fkhFWihMKNdMzMprD4bV+PDLRA5YSn3OPIeUnRn9qBUCN11LXQKb+W3Jg+m/5xQRQJzJ/qXgDh1+ aN+Mc9AstP29Y/ZLFmF6cKtL2zoUMN5I5QymeSkJJzc= ) ; Key ID = 22545`
	`. 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; Key ID = 20326`
	DNSKEY=20326/SEP is now in the chain-of-trust
	DS=20326/SHA-256 verifies DNSKEY=20326/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`. 172800 IN RRSIG ( DNSKEY 8 0 172800 20191231000000 20191210000000 20326 . M6PHO6VOOLVi9f31412BD96l/dWG8WOE+R6Q+KYMr4aJpS/hTZjjs6EDa249B2cjO7QzSD+qxWNT s7enqC1DsEAjeVm0epe3h6TFVBjX76R0MIqYC3+LjgGjyQnpish6mPApIx0ZC8mxewn0GCvC9Gqk 9S7s7IDD8FQWosXQRChqF9M7qkG1NuKvgPvqgpAk3naii0Eajx8N3XiPo8EwVS3yWOct4wcY8B1s fZjvL7mLDAiggGouyxt5PGm9TdnG7eioZPM1LyX1YgDV4/qUKmp7BHhsVKh/nQaR46yxbcpiRz6R nADB991g/+3bgY8dSACfUI0aBFsRT0DHHnMfpg== )`
	RRSIG=20326 and DNSKEY=20326/SEP verifies the DNSKEY RRset
	DNSKEY=22545 is now in the chain-of-trust
	Query to b.root-servers.net for gameinferno.de/A
	Received 768 bytes from 199.9.14.201
	;; Answer received from 199.9.14.201 (768 bytes) ;; HEADER SECTION ;; id = 62907 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 9 arcount = 12 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; gameinferno.de. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (9 records) de. 172800 IN NS f.nic.de. de. 172800 IN NS n.de.net. de. 172800 IN NS l.de.net. de. 172800 IN NS z.nic.de. de. 172800 IN NS s.de.net. de. 172800 IN NS a.nic.de. de. 86400 IN DS ( 45580 8 2 918c32e2f12211766be6226674f447458f2259b9a0d87b44d29d55afeca6b2e1 ) de. 86400 IN DS ( 39227 8 2 aab73083b9ef70e4a5e94769a418ac12e887fc3c0875ef206c3451dc40b6c4fa ) de. 86400 IN RRSIG ( DS 8 1 86400 20191228050000 20191215040000 22545 . hV9HioZQcxIjv2WgEIycJlE0A8o/H8pLalCZ4oPGonZs7ibFsyzfrOhug9E6EW8VsvdMSBwobHG4 cb7tF22pXASdE3JdcIJ8dNW8J30/+SlyI+Qd+FlHLbX7vCGHgJ/4YtbEdIifXJiRuf0mypW6rBtf DuViuoBurXngx2RDwbY39o0k0qu+XmR6jXwopAt5YA96CwYL/VDymejQ4YHUrhjfeOoMSO80V3+T FhN3onVcjTO5B9BQlDadmNWAdHCFGOncPUF929lYYXoxNcw3VIDXDZWg72vlmwKe+0gDf0B21yCU oUTSYXrDMa4WCAaN3AC+RRfghoFlrSg6TyVJ2A== ) ;; ADDITIONAL SECTION (12 records) a.nic.de. 172800 IN A 194.0.0.53 f.nic.de. 172800 IN A 81.91.164.5 l.de.net. 172800 IN A 77.67.63.105 n.de.net. 172800 IN A 194.146.107.6 s.de.net. 172800 IN A 195.243.137.26 z.nic.de. 172800 IN A 194.246.96.1 a.nic.de. 172800 IN AAAA 2001:678:2::53 f.nic.de. 172800 IN AAAA 2a02:568:0:2::53 l.de.net. 172800 IN AAAA 2001:668:1f:11::105 n.de.net. 172800 IN AAAA 2001:67c:1011:1::53 s.de.net. 172800 IN AAAA 2003:8:14::53 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Query to f.root-servers.net for de/DNSKEY
	Error querying f.root-servers.net/2001:500:2f:0:0:0:0:f for de/DNSKEY: 'IPv6 transport disabled'
	Received 756 bytes from 192.5.5.241
	;; Answer received from 192.5.5.241 (756 bytes) ;; HEADER SECTION ;; id = 18830 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 9 arcount = 12 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1472 ;; option: ;; QUESTION SECTION (1 record) ;; de. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (9 records) de. 172800 IN NS a.nic.de. de. 172800 IN NS f.nic.de. de. 172800 IN NS l.de.net. de. 172800 IN NS n.de.net. de. 172800 IN NS s.de.net. de. 172800 IN NS z.nic.de. de. 86400 IN DS ( 39227 8 2 aab73083b9ef70e4a5e94769a418ac12e887fc3c0875ef206c3451dc40b6c4fa ) de. 86400 IN DS ( 45580 8 2 918c32e2f12211766be6226674f447458f2259b9a0d87b44d29d55afeca6b2e1 ) de. 86400 IN RRSIG ( DS 8 1 86400 20191228050000 20191215040000 22545 . hV9HioZQcxIjv2WgEIycJlE0A8o/H8pLalCZ4oPGonZs7ibFsyzfrOhug9E6EW8VsvdMSBwobHG4 cb7tF22pXASdE3JdcIJ8dNW8J30/+SlyI+Qd+FlHLbX7vCGHgJ/4YtbEdIifXJiRuf0mypW6rBtf DuViuoBurXngx2RDwbY39o0k0qu+XmR6jXwopAt5YA96CwYL/VDymejQ4YHUrhjfeOoMSO80V3+T FhN3onVcjTO5B9BQlDadmNWAdHCFGOncPUF929lYYXoxNcw3VIDXDZWg72vlmwKe+0gDf0B21yCU oUTSYXrDMa4WCAaN3AC+RRfghoFlrSg6TyVJ2A== ) ;; ADDITIONAL SECTION (12 records) a.nic.de. 172800 IN A 194.0.0.53 a.nic.de. 172800 IN AAAA 2001:678:2::53 f.nic.de. 172800 IN A 81.91.164.5 f.nic.de. 172800 IN AAAA 2a02:568:0:2::53 l.de.net. 172800 IN A 77.67.63.105 l.de.net. 172800 IN AAAA 2001:668:1f:11::105 n.de.net. 172800 IN A 194.146.107.6 n.de.net. 172800 IN AAAA 2001:67c:1011:1::53 s.de.net. 172800 IN A 195.243.137.26 s.de.net. 172800 IN AAAA 2003:8:14::53 z.nic.de. 172800 IN A 194.246.96.1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1472 ;; option:
	Found child zone de

	Checking DS between . and de
	Query to e.root-servers.net for de/DS
	Error querying e.root-servers.net/2001:500:a8:0:0:0:0:e for de/DS: 'IPv6 transport disabled'
	Received 414 bytes from 192.203.230.10
	;; Answer received from 192.203.230.10 (414 bytes) ;; HEADER SECTION ;; id = 47463 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1472 ;; option: ;; QUESTION SECTION (1 record) ;; de. IN DS ;; ANSWER SECTION (3 records) de. 86400 IN DS ( 39227 8 2 aab73083b9ef70e4a5e94769a418ac12e887fc3c0875ef206c3451dc40b6c4fa ) de. 86400 IN DS ( 45580 8 2 918c32e2f12211766be6226674f447458f2259b9a0d87b44d29d55afeca6b2e1 ) de. 86400 IN RRSIG ( DS 8 1 86400 20191228050000 20191215040000 22545 . hV9HioZQcxIjv2WgEIycJlE0A8o/H8pLalCZ4oPGonZs7ibFsyzfrOhug9E6EW8VsvdMSBwobHG4 cb7tF22pXASdE3JdcIJ8dNW8J30/+SlyI+Qd+FlHLbX7vCGHgJ/4YtbEdIifXJiRuf0mypW6rBtf DuViuoBurXngx2RDwbY39o0k0qu+XmR6jXwopAt5YA96CwYL/VDymejQ4YHUrhjfeOoMSO80V3+T FhN3onVcjTO5B9BQlDadmNWAdHCFGOncPUF929lYYXoxNcw3VIDXDZWg72vlmwKe+0gDf0B21yCU oUTSYXrDMa4WCAaN3AC+RRfghoFlrSg6TyVJ2A== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1472 ;; option:
	Found 2 DS records for de in the . zone
	DS=39227/SHA-256 has algorithm RSASHA256
	DS=45580/SHA-256 has algorithm RSASHA256
	Found 1 RRSIGs over DS RRset
	`de. 86400 IN RRSIG ( DS 8 1 86400 20191228050000 20191215040000 22545 . hV9HioZQcxIjv2WgEIycJlE0A8o/H8pLalCZ4oPGonZs7ibFsyzfrOhug9E6EW8VsvdMSBwobHG4 cb7tF22pXASdE3JdcIJ8dNW8J30/+SlyI+Qd+FlHLbX7vCGHgJ/4YtbEdIifXJiRuf0mypW6rBtf DuViuoBurXngx2RDwbY39o0k0qu+XmR6jXwopAt5YA96CwYL/VDymejQ4YHUrhjfeOoMSO80V3+T FhN3onVcjTO5B9BQlDadmNWAdHCFGOncPUF929lYYXoxNcw3VIDXDZWg72vlmwKe+0gDf0B21yCU oUTSYXrDMa4WCAaN3AC+RRfghoFlrSg6TyVJ2A== )`
	RRSIG=22545 and DNSKEY=22545 verifies the DS RRset
	DS=39227/SHA-256 is now in the chain-of-trust
	DS=45580/SHA-256 is now in the chain-of-trust
	`de. 86400 IN DS ( 39227 8 2 aab73083b9ef70e4a5e94769a418ac12e887fc3c0875ef206c3451dc40b6c4fa )`
	`de. 86400 IN DS ( 45580 8 2 918c32e2f12211766be6226674f447458f2259b9a0d87b44d29d55afeca6b2e1 )`
	Query to f.nic.de for de/DNSKEY
	Received 745 bytes from 81.91.164.5
	;; Answer received from 81.91.164.5 (745 bytes) ;; HEADER SECTION ;; id = 29872 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option: ;; QUESTION SECTION (1 record) ;; de. IN DNSKEY ;; ANSWER SECTION (3 records) de. 300 IN DNSKEY ( 256 3 8 AwEAAZt1oyWfwj7d+ilIw49v3Tq7bo2TzB6endm2n22BoYGop3lk7sZG6io7n4wRA1cSBtstiNQ0 gCqi22eNlA5YAAZ8urdetvbTrnjFHgK2NGmovD13jtZBtOTrB1GHXMhdpiA0AKDtmbZP2rh6hMkE iDaKHG5qU829gpDzpQg/rFkT ) ; Key ID = 18318 de. 300 IN DNSKEY ( 257 3 8 AwEAAZpbDb1imP0XWl57A8IeSwm4AbMARc/Lp+xqTuURddY9sUJDAGXLMq2w0pTcMgFc/ojX95VM GWh93gs+/5Ob1cNisW8qhyk4ZJJ0yKABVJrHHlghRwl/PeN6wRs2z3cQymRFiedxRK2IsNUS6QUJ yhy1n8Z5YLSnpcDHTnT9caaYeI1Ag73CZF6f4ym034x0o2Q3SSGJ8HP65tDUWWTO776zKvZEbtia VqPmKteQKjwDcebiedNNOWGWeda4Lc/7YMrT++WsUeL4HGnaQW/roUZvsE6/vGDK7oSrKiCt35Xr 0OFhtYZlyhmlHUyT+kY7hMFYKnljDPSZ+iCASR6ekK0= ) ; Key ID = 45580 de. 300 IN RRSIG ( DNSKEY 8 1 300 20191226090009 20191212073009 45580 de. EYaz/Pgn1Mtgu6sQIaD7ZOVZRtulvuBGy03TBgyMAJ5yvBjt//CXiBDKg2zkUBsduaFsZM6p39ou vrgJN2rVXNkGI07HVQ1dqd7FaoYQjrqcCGuN5uP5gsOa0PNE8hgoiITEYQxAfGw7Do9yW/p3hbLn 7MZ1UouplEKoRok2dIXS4SV8Eqm6wWfYuY2zTqpsAZtDY+kBeIG4+8a7ukWuDmMKIp0tQ1lX0MMv OXC09DVT3FRm014SPqPdzfIMlrHYtz/dXZhWZBLIxo73fJtUvooSogz+PLnFlE62qb+RCkiJ4IjG EqDR0GeSDGu43Gq6iX3yNaQdZ0z3rYE4Wc9KoQ== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option:
	Found 2 DNSKEY records for de
	`de. 300 IN DNSKEY ( 256 3 8 AwEAAZt1oyWfwj7d+ilIw49v3Tq7bo2TzB6endm2n22BoYGop3lk7sZG6io7n4wRA1cSBtstiNQ0 gCqi22eNlA5YAAZ8urdetvbTrnjFHgK2NGmovD13jtZBtOTrB1GHXMhdpiA0AKDtmbZP2rh6hMkE iDaKHG5qU829gpDzpQg/rFkT ) ; Key ID = 18318`
	`de. 300 IN DNSKEY ( 257 3 8 AwEAAZpbDb1imP0XWl57A8IeSwm4AbMARc/Lp+xqTuURddY9sUJDAGXLMq2w0pTcMgFc/ojX95VM GWh93gs+/5Ob1cNisW8qhyk4ZJJ0yKABVJrHHlghRwl/PeN6wRs2z3cQymRFiedxRK2IsNUS6QUJ yhy1n8Z5YLSnpcDHTnT9caaYeI1Ag73CZF6f4ym034x0o2Q3SSGJ8HP65tDUWWTO776zKvZEbtia VqPmKteQKjwDcebiedNNOWGWeda4Lc/7YMrT++WsUeL4HGnaQW/roUZvsE6/vGDK7oSrKiCt35Xr 0OFhtYZlyhmlHUyT+kY7hMFYKnljDPSZ+iCASR6ekK0= ) ; Key ID = 45580`
	DNSKEY=45580/SEP is now in the chain-of-trust
	DS=45580/SHA-256 verifies DNSKEY=45580/SEP
	DS=39227/SHA-256 is published, but a corresponding DNSKEY is not
	Found 1 RRSIGs over DNSKEY RRset
	`de. 300 IN RRSIG ( DNSKEY 8 1 300 20191226090009 20191212073009 45580 de. EYaz/Pgn1Mtgu6sQIaD7ZOVZRtulvuBGy03TBgyMAJ5yvBjt//CXiBDKg2zkUBsduaFsZM6p39ou vrgJN2rVXNkGI07HVQ1dqd7FaoYQjrqcCGuN5uP5gsOa0PNE8hgoiITEYQxAfGw7Do9yW/p3hbLn 7MZ1UouplEKoRok2dIXS4SV8Eqm6wWfYuY2zTqpsAZtDY+kBeIG4+8a7ukWuDmMKIp0tQ1lX0MMv OXC09DVT3FRm014SPqPdzfIMlrHYtz/dXZhWZBLIxo73fJtUvooSogz+PLnFlE62qb+RCkiJ4IjG EqDR0GeSDGu43Gq6iX3yNaQdZ0z3rYE4Wc9KoQ== )`
	RRSIG=45580 and DNSKEY=45580/SEP verifies the DNSKEY RRset
	DNSKEY=18318 is now in the chain-of-trust
	Query to z.nic.de for gameinferno.de/A
	Received 302 bytes from 194.246.96.1
	;; Answer received from 194.246.96.1 (302 bytes) ;; HEADER SECTION ;; id = 5022 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 4 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; gameinferno.de. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (4 records) gameinferno.de. 86400 IN NS ns1.mail.scusi.io. gameinferno.de. 86400 IN NS dns.scusi.io. gameinferno.de. 86400 IN DS ( 16806 7 2 dd2ce0072b4e0df1c5f1187bad460bbc334f9a677b21266607e9a7f9a31f3e72 ) gameinferno.de. 86400 IN RRSIG ( DS 8 2 86400 20191224150933 20191210133933 18318 de. IpIgdGl/DRGTIf7H0Bfup2BVf+4eJBFD5I4QKHK5YHsPl+AKOIVKb0qv2ztgbB+ZniCpOrdC1/SE ivUIXX1rEKPg6t/+eulOHPgimaVl/hwVqyNSJPS4T7puXa8BKqnUIcgZrVCj91Ug3t1JBCs7DDRV IwblrTQFlkv1s16KSMo= ) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Query to f.nic.de for gameinferno.de/DNSKEY
	Received 302 bytes from 81.91.164.5
	;; Answer received from 81.91.164.5 (302 bytes) ;; HEADER SECTION ;; id = 11873 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 4 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option: ;; QUESTION SECTION (1 record) ;; gameinferno.de. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (4 records) gameinferno.de. 86400 IN NS dns.scusi.io. gameinferno.de. 86400 IN NS ns1.mail.scusi.io. gameinferno.de. 86400 IN DS ( 16806 7 2 dd2ce0072b4e0df1c5f1187bad460bbc334f9a677b21266607e9a7f9a31f3e72 ) gameinferno.de. 86400 IN RRSIG ( DS 8 2 86400 20191224150933 20191210133933 18318 de. IpIgdGl/DRGTIf7H0Bfup2BVf+4eJBFD5I4QKHK5YHsPl+AKOIVKb0qv2ztgbB+ZniCpOrdC1/SE ivUIXX1rEKPg6t/+eulOHPgimaVl/hwVqyNSJPS4T7puXa8BKqnUIcgZrVCj91Ug3t1JBCs7DDRV IwblrTQFlkv1s16KSMo= ) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option:
	Found child zone gameinferno.de

gameinferno.de

	Checking DS between de and gameinferno.de
	Query to z.nic.de for gameinferno.de/DS
	Received 253 bytes from 194.246.96.1
	;; Answer received from 194.246.96.1 (253 bytes) ;; HEADER SECTION ;; id = 11717 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; gameinferno.de. IN DS ;; ANSWER SECTION (2 records) gameinferno.de. 86400 IN DS ( 16806 7 2 dd2ce0072b4e0df1c5f1187bad460bbc334f9a677b21266607e9a7f9a31f3e72 ) gameinferno.de. 86400 IN RRSIG ( DS 8 2 86400 20191224150933 20191210133933 18318 de. IpIgdGl/DRGTIf7H0Bfup2BVf+4eJBFD5I4QKHK5YHsPl+AKOIVKb0qv2ztgbB+ZniCpOrdC1/SE ivUIXX1rEKPg6t/+eulOHPgimaVl/hwVqyNSJPS4T7puXa8BKqnUIcgZrVCj91Ug3t1JBCs7DDRV IwblrTQFlkv1s16KSMo= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found 1 DS records for gameinferno.de in the de zone
	DS=16806/SHA-256 has algorithm RSASHA1-NSEC3-SHA1
	Found 1 RRSIGs over DS RRset
	`gameinferno.de. 86400 IN RRSIG ( DS 8 2 86400 20191224150933 20191210133933 18318 de. IpIgdGl/DRGTIf7H0Bfup2BVf+4eJBFD5I4QKHK5YHsPl+AKOIVKb0qv2ztgbB+ZniCpOrdC1/SE ivUIXX1rEKPg6t/+eulOHPgimaVl/hwVqyNSJPS4T7puXa8BKqnUIcgZrVCj91Ug3t1JBCs7DDRV IwblrTQFlkv1s16KSMo= )`
	RRSIG=18318 and DNSKEY=18318 verifies the DS RRset
	DS=16806/SHA-256 is now in the chain-of-trust
	`gameinferno.de. 86400 IN DS ( 16806 7 2 dd2ce0072b4e0df1c5f1187bad460bbc334f9a677b21266607e9a7f9a31f3e72 )`
	Query to dns.scusi.io for gameinferno.de/DNSKEY
	Received 769 bytes from 89.238.79.206
	;; Answer received from 89.238.79.206 (769 bytes) ;; HEADER SECTION ;; id = 19940 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; gameinferno.de. IN DNSKEY ;; ANSWER SECTION (3 records) gameinferno.de. 1800 IN DNSKEY ( 256 3 7 AwEAAbusFA+SoRrIUL0zpKnkcbdFSsX0G9FTGa4IkIW9goDn9zk40nx0cq/fGPw4gKikklza3IQ4 G9+3dFrUOMUyf2BnvKjFlknIzcWvY8tm8UmxmE9ykWeTHssNHp1M4e3OLj3Bbb/zUswvwevGqeFP eu7a31Z2cuKRTRRoaNwXnVFl ) ; Key ID = 47750 gameinferno.de. 1800 IN DNSKEY ( 257 3 7 AwEAAc0nw+hvrQhrZECF6TtvGaM/Q29pQH7DNH7/uzB8eKBb89g/yrT4pPNXUu0Cdgwk0AZ8cwyE 9wEzCq3QPWhXetLMxaUzZHvHlDylUw4pPqULdQXS9VRngpFKnlb139WfOMDpIAmoci0ETNiUWRGH Y7f7HIViFy14jB8P3r0EzBImBqO/+pzAV4q8vADQIhiELomYdGul4n2kRhdmR4fBDGvQZWnl7xfU TeCf+mD8pO2FGGqks4TAUWMD8fKitjDmiZ8EO+7FHmVNSAN2AAwgPKt5dF1wdEFW+kA3n+fhM31x KAe6aYbBDMzFby+lvoC2KtDIS5akl+BQAyJk3+gCKH0= ) ; Key ID = 16806 gameinferno.de. 1800 IN RRSIG ( DNSKEY 7 2 1800 20191222000000 20191122052501 16806 gameinferno.de. cTgxLlOqZ5CbKkpyTNnzUUdFX889UUcseUzf7HDlZNAOWZbxmAlWe5Ecg0C8UeW8GChXmuuqNuii 8Db5bCi1epiE0rEF8QKKtKFfQmtrjjuTwh2/l50Ggu7EvTnl84WgN8dNW7+4H6RSn//mW+pvDABD lmHZqyzyij4YSmQ5uG5LR45QbVhVf4fIFs9DsTc2JQu6RV6OSGJTq5u51GurhUqEtN6PDsOp4vo1 39kHpEoEGAPFSd2PTUwrJq5nLVfAb2t7iGMLp2xdyLq1+Q5797xQWVBnVtYy1VnRqCfjB/NJH+yW nzCAlOKFf1UMUM7JufNAFX6AagOx9Q14LI+SOw== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found 2 DNSKEY records for gameinferno.de
	`gameinferno.de. 1800 IN DNSKEY ( 256 3 7 AwEAAbusFA+SoRrIUL0zpKnkcbdFSsX0G9FTGa4IkIW9goDn9zk40nx0cq/fGPw4gKikklza3IQ4 G9+3dFrUOMUyf2BnvKjFlknIzcWvY8tm8UmxmE9ykWeTHssNHp1M4e3OLj3Bbb/zUswvwevGqeFP eu7a31Z2cuKRTRRoaNwXnVFl ) ; Key ID = 47750`
	`gameinferno.de. 1800 IN DNSKEY ( 257 3 7 AwEAAc0nw+hvrQhrZECF6TtvGaM/Q29pQH7DNH7/uzB8eKBb89g/yrT4pPNXUu0Cdgwk0AZ8cwyE 9wEzCq3QPWhXetLMxaUzZHvHlDylUw4pPqULdQXS9VRngpFKnlb139WfOMDpIAmoci0ETNiUWRGH Y7f7HIViFy14jB8P3r0EzBImBqO/+pzAV4q8vADQIhiELomYdGul4n2kRhdmR4fBDGvQZWnl7xfU TeCf+mD8pO2FGGqks4TAUWMD8fKitjDmiZ8EO+7FHmVNSAN2AAwgPKt5dF1wdEFW+kA3n+fhM31x KAe6aYbBDMzFby+lvoC2KtDIS5akl+BQAyJk3+gCKH0= ) ; Key ID = 16806`
	DNSKEY=16806/SEP is now in the chain-of-trust
	DS=16806/SHA-256 verifies DNSKEY=16806/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`gameinferno.de. 1800 IN RRSIG ( DNSKEY 7 2 1800 20191222000000 20191122052501 16806 gameinferno.de. cTgxLlOqZ5CbKkpyTNnzUUdFX889UUcseUzf7HDlZNAOWZbxmAlWe5Ecg0C8UeW8GChXmuuqNuii 8Db5bCi1epiE0rEF8QKKtKFfQmtrjjuTwh2/l50Ggu7EvTnl84WgN8dNW7+4H6RSn//mW+pvDABD lmHZqyzyij4YSmQ5uG5LR45QbVhVf4fIFs9DsTc2JQu6RV6OSGJTq5u51GurhUqEtN6PDsOp4vo1 39kHpEoEGAPFSd2PTUwrJq5nLVfAb2t7iGMLp2xdyLq1+Q5797xQWVBnVtYy1VnRqCfjB/NJH+yW nzCAlOKFf1UMUM7JufNAFX6AagOx9Q14LI+SOw== )`
	RRSIG=16806 and DNSKEY=16806/SEP verifies the DNSKEY RRset
	DNSKEY=47750 is now in the chain-of-trust
	Query to ns1.mail.scusi.io for gameinferno.de/A
	Error querying ns1.mail.scusi.io/2a03:b0c0:3:e0:0:0:f:9001 for gameinferno.de/A: 'IPv6 transport disabled'
	Received 456 bytes from 165.22.83.37
	;; Answer received from 165.22.83.37 (456 bytes) ;; HEADER SECTION ;; id = 26376 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 3 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; gameinferno.de. IN A ;; ANSWER SECTION (2 records) gameinferno.de. 1800 IN A 165.22.83.37 gameinferno.de. 1800 IN RRSIG ( A 7 2 1800 20191222000000 20191122052501 47750 gameinferno.de. QXkRVhQaukpwqK6NMqruU2fg6udElFaNJ5f8KvtqRkyXisElWnLFDk1NAa3rFoGL6nxtzz+nuCfq +9uSlNBM6ID/UDTiLLXLngJ/KHdll3Zt5lF3ZMNjgI2TYO4EqCCvT1ZxuCeJ2h1q0Un4FIJePJ1S vWE/DJZx5UtbzZE8yH4= ) ;; AUTHORITY SECTION (3 records) gameinferno.de. 1800 IN NS dns.scusi.io. gameinferno.de. 1800 IN NS ns1.mail.scusi.io. gameinferno.de. 1800 IN RRSIG ( NS 7 2 1800 20191222000000 20191122052501 47750 gameinferno.de. OwxwYGUtz0KWR6URLdIRS5m3q2T89yctj9ScCG2DTy7d0FlRIp8dkArjZsxWLKGWA2+6GfsGYVR8 5Slx9CBu6W+ZU4Dshlz+UNT4+0s7b8Zg6G94f51ZTeK5Z1lwOpDlNf9e6yjKctRYvhVEifH+O4Bk I0t99LlLEfFGRou+40c= ) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	gameinferno.de is authoritative for gameinferno.de
	Found RRSIG signed by gameinferno.de zone
	Query to ns1.mail.scusi.io for gameinferno.de/SOA
	Error querying ns1.mail.scusi.io/2a03:b0c0:3:e0:0:0:f:9001 for gameinferno.de/SOA: 'IPv6 transport disabled'
	Received 487 bytes from 165.22.83.37
	;; Answer received from 165.22.83.37 (487 bytes) ;; HEADER SECTION ;; id = 35636 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 3 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; gameinferno.de. IN SOA ;; ANSWER SECTION (2 records) gameinferno.de. 1800 IN SOA ( ns1.mail.scusi.io. hostmaster.mail.scusi.io. 2019112200 ;serial 7200 ;refresh 1800 ;retry 1209600 ;expire 1800 ;minimum ) gameinferno.de. 1800 IN RRSIG ( SOA 7 2 1800 20191222000000 20191122052501 47750 gameinferno.de. GyXb9ZeawqwPt3A9uip8kyKSwFdjK6oOtCw7hM1NRbDclnzzWarz6PbozAsumAv3uPu94jive3UB axuaXFCzSrxovsx8NRrEcW2RNGjTYm33kI4kNERNVFEetmi2VOMQHZ315Aj7gBm4/mpYZINL9r6r M5skUtdPnZYvF7BX7K8= ) ;; AUTHORITY SECTION (3 records) gameinferno.de. 1800 IN NS dns.scusi.io. gameinferno.de. 1800 IN NS ns1.mail.scusi.io. gameinferno.de. 1800 IN RRSIG ( NS 7 2 1800 20191222000000 20191122052501 47750 gameinferno.de. OwxwYGUtz0KWR6URLdIRS5m3q2T89yctj9ScCG2DTy7d0FlRIp8dkArjZsxWLKGWA2+6GfsGYVR8 5Slx9CBu6W+ZU4Dshlz+UNT4+0s7b8Zg6G94f51ZTeK5Z1lwOpDlNf9e6yjKctRYvhVEifH+O4Bk I0t99LlLEfFGRou+40c= ) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Query to dns.scusi.io for gameinferno.de/SOA
	Received 487 bytes from 89.238.79.206
	;; Answer received from 89.238.79.206 (487 bytes) ;; HEADER SECTION ;; id = 35031 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 3 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; gameinferno.de. IN SOA ;; ANSWER SECTION (2 records) gameinferno.de. 1800 IN SOA ( ns1.mail.scusi.io. hostmaster.mail.scusi.io. 2019112200 ;serial 7200 ;refresh 1800 ;retry 1209600 ;expire 1800 ;minimum ) gameinferno.de. 1800 IN RRSIG ( SOA 7 2 1800 20191222000000 20191122052501 47750 gameinferno.de. GyXb9ZeawqwPt3A9uip8kyKSwFdjK6oOtCw7hM1NRbDclnzzWarz6PbozAsumAv3uPu94jive3UB axuaXFCzSrxovsx8NRrEcW2RNGjTYm33kI4kNERNVFEetmi2VOMQHZ315Aj7gBm4/mpYZINL9r6r M5skUtdPnZYvF7BX7K8= ) ;; AUTHORITY SECTION (3 records) gameinferno.de. 1800 IN NS dns.scusi.io. gameinferno.de. 1800 IN NS ns1.mail.scusi.io. gameinferno.de. 1800 IN RRSIG ( NS 7 2 1800 20191222000000 20191122052501 47750 gameinferno.de. OwxwYGUtz0KWR6URLdIRS5m3q2T89yctj9ScCG2DTy7d0FlRIp8dkArjZsxWLKGWA2+6GfsGYVR8 5Slx9CBu6W+ZU4Dshlz+UNT4+0s7b8Zg6G94f51ZTeK5Z1lwOpDlNf9e6yjKctRYvhVEifH+O4Bk I0t99LlLEfFGRou+40c= ) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Query to ns1.mail.scusi.io for gameinferno.de/A
	Error querying ns1.mail.scusi.io/2a03:b0c0:3:e0:0:0:f:9001 for gameinferno.de/A: 'IPv6 transport disabled'
	Received 456 bytes from 165.22.83.37
	;; Answer received from 165.22.83.37 (456 bytes) ;; HEADER SECTION ;; id = 13832 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 3 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; gameinferno.de. IN A ;; ANSWER SECTION (2 records) gameinferno.de. 1800 IN A 165.22.83.37 gameinferno.de. 1800 IN RRSIG ( A 7 2 1800 20191222000000 20191122052501 47750 gameinferno.de. QXkRVhQaukpwqK6NMqruU2fg6udElFaNJ5f8KvtqRkyXisElWnLFDk1NAa3rFoGL6nxtzz+nuCfq +9uSlNBM6ID/UDTiLLXLngJ/KHdll3Zt5lF3ZMNjgI2TYO4EqCCvT1ZxuCeJ2h1q0Un4FIJePJ1S vWE/DJZx5UtbzZE8yH4= ) ;; AUTHORITY SECTION (3 records) gameinferno.de. 1800 IN NS dns.scusi.io. gameinferno.de. 1800 IN NS ns1.mail.scusi.io. gameinferno.de. 1800 IN RRSIG ( NS 7 2 1800 20191222000000 20191122052501 47750 gameinferno.de. OwxwYGUtz0KWR6URLdIRS5m3q2T89yctj9ScCG2DTy7d0FlRIp8dkArjZsxWLKGWA2+6GfsGYVR8 5Slx9CBu6W+ZU4Dshlz+UNT4+0s7b8Zg6G94f51ZTeK5Z1lwOpDlNf9e6yjKctRYvhVEifH+O4Bk I0t99LlLEfFGRou+40c= ) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	gameinferno.de A RR has value 165.22.83.37
	Found 1 RRSIGs over A RRset
	`gameinferno.de. 1800 IN RRSIG ( A 7 2 1800 20191222000000 20191122052501 47750 gameinferno.de. QXkRVhQaukpwqK6NMqruU2fg6udElFaNJ5f8KvtqRkyXisElWnLFDk1NAa3rFoGL6nxtzz+nuCfq +9uSlNBM6ID/UDTiLLXLngJ/KHdll3Zt5lF3ZMNjgI2TYO4EqCCvT1ZxuCeJ2h1q0Un4FIJePJ1S vWE/DJZx5UtbzZE8yH4= )`
	RRSIG=47750 and DNSKEY=47750 verifies the A RRset

Move your mouse over any or symbols for remediation hints.

Want a second opinion? Test gameinferno.de at dnsviz.net.

DNSSEC Analyzer

↓ Advanced options ↑ Advanced options

Trust Anchor:
Name Servers: