DNSSEC Analyzer - ns4.internetgremlin.com

Domain Name:

Time: 2021-03-19 02:30:53 UTC, NTP stratum 4

Analyzing DNSSEC problems for ns4.internetgremlin.com

DS=20326/SHA-256 is now in the chain-of-trust

	Checking DS between Trust Anchor and .
	`. IN DS ( 20326 8 2 e06d44b80b8f1d39a95c0b0d7c65d08458e880409bbc683457104237c7f8ec8d )`
	Query to f.root-servers.net for ./DNSKEY
	Received 864 bytes from 192.5.5.241
	;; Answer received from 192.5.5.241 (864 bytes) ;; HEADER SECTION ;; id = 37807 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1472 ;; option: ;; QUESTION SECTION (1 record) ;; . IN DNSKEY ;; ANSWER SECTION (3 records) . 172800 IN DNSKEY ( 256 3 8 AwEAAbKGKkqc1VAvQr48iPf9Nd39f337MitggxF0AB9kLKRNSuq9joOEPC/R6PD/4lTzUms8U9oP +aiF0rVC2rGOKSdOLxPHRLA3ameMFT2/3bmVCFsRsn03IVTdN5VUAfczjqjmA0t9NM7bbN5oVzuQ L3P1FyQb1q6HX4M1qg+htMNEd9PdlPLMFcrUg5fcYtTr2llVkO1Xo3lAdrjmmxfGeIyQnskpwPyW 88J527DEytmgPo5KzLBYLMoL2Q41PK0ul0rs7yN+g5IG4LnJOcjew1yrmHXrp/OzrpsO4FkicufY t/ygfQKkT5HYbr/yFgeZAfaF80nYyc7wgDYxOeHdiRk= ) ; Key ID = 42351 . 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; Key ID = 20326 . 172800 IN RRSIG ( DNSKEY 8 0 172800 20210402000000 20210312000000 20326 . m4qjWhV4eOHhyN+ybfdLjIw3p9PTHYsrbKEER5Z1YOkcbDdFR5TSACRxCPKEwM9RVW93Dh+kJjdt 774hN2TnDphcondv4eR5qlXNVH/McItwzWUl8v4szlBLJTfMflSc90VEXZW3jjMrzT1/nKn7qqbI T3eM0VveBxeXHbg4QweQOiL7Ua17UWi1upYO5YfOmYc14cqXFuoUUFJ9CUgBsMI1v3f0h1cUOujI 30PkULoAo9yG3dq8NGJcQDbok7WelJrGru5Vff30N2ugUpTy1E0G0nxsaMoPMMSg4Mnh1Xax22Hc cfftFot+0RpOATfccrkiEsYV+b0LQtGPzdvP5g== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1472 ;; option:
	Found 2 DNSKEY records for .
	`. 172800 IN DNSKEY ( 256 3 8 AwEAAbKGKkqc1VAvQr48iPf9Nd39f337MitggxF0AB9kLKRNSuq9joOEPC/R6PD/4lTzUms8U9oP +aiF0rVC2rGOKSdOLxPHRLA3ameMFT2/3bmVCFsRsn03IVTdN5VUAfczjqjmA0t9NM7bbN5oVzuQ L3P1FyQb1q6HX4M1qg+htMNEd9PdlPLMFcrUg5fcYtTr2llVkO1Xo3lAdrjmmxfGeIyQnskpwPyW 88J527DEytmgPo5KzLBYLMoL2Q41PK0ul0rs7yN+g5IG4LnJOcjew1yrmHXrp/OzrpsO4FkicufY t/ygfQKkT5HYbr/yFgeZAfaF80nYyc7wgDYxOeHdiRk= ) ; Key ID = 42351`
	`. 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; Key ID = 20326`
	DNSKEY=20326/SEP is now in the chain-of-trust
	DS=20326/SHA-256 verifies DNSKEY=20326/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`. 172800 IN RRSIG ( DNSKEY 8 0 172800 20210402000000 20210312000000 20326 . m4qjWhV4eOHhyN+ybfdLjIw3p9PTHYsrbKEER5Z1YOkcbDdFR5TSACRxCPKEwM9RVW93Dh+kJjdt 774hN2TnDphcondv4eR5qlXNVH/McItwzWUl8v4szlBLJTfMflSc90VEXZW3jjMrzT1/nKn7qqbI T3eM0VveBxeXHbg4QweQOiL7Ua17UWi1upYO5YfOmYc14cqXFuoUUFJ9CUgBsMI1v3f0h1cUOujI 30PkULoAo9yG3dq8NGJcQDbok7WelJrGru5Vff30N2ugUpTy1E0G0nxsaMoPMMSg4Mnh1Xax22Hc cfftFot+0RpOATfccrkiEsYV+b0LQtGPzdvP5g== )`
	RRSIG=20326 and DNSKEY=20326/SEP verifies the DNSKEY RRset
	DNSKEY=42351 is now in the chain-of-trust
	Query to k.root-servers.net for ns4.internetgremlin.com/A
	Received 1183 bytes from 193.0.14.129
	;; Answer received from 193.0.14.129 (1183 bytes) ;; HEADER SECTION ;; id = 34629 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 15 arcount = 27 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option: ;; QUESTION SECTION (1 record) ;; ns4.internetgremlin.com. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (15 records) com. 172800 IN NS a.gtld-servers.net. com. 172800 IN NS b.gtld-servers.net. com. 172800 IN NS c.gtld-servers.net. com. 172800 IN NS d.gtld-servers.net. com. 172800 IN NS e.gtld-servers.net. com. 172800 IN NS f.gtld-servers.net. com. 172800 IN NS g.gtld-servers.net. com. 172800 IN NS h.gtld-servers.net. com. 172800 IN NS i.gtld-servers.net. com. 172800 IN NS j.gtld-servers.net. com. 172800 IN NS k.gtld-servers.net. com. 172800 IN NS l.gtld-servers.net. com. 172800 IN NS m.gtld-servers.net. com. 86400 IN DS ( 30909 8 2 e2d3c916f6deeac73294e8268fb5885044a833fc5459588f4a9184cfc41a5766 ) com. 86400 IN RRSIG ( DS 8 1 86400 20210331170000 20210318160000 42351 . TKSxuNOqTK+qEK9KUcp19+zX6Kx8CVTQzxJMpQ74pgr5P7IjSdpiqQG2ibnwDCSueqAToWJkr73Y fMMhQBGHks5T+vFMM0nOu0sR7kfw2rdlX3OmMMQwxMCsxVoNesppiyiVx9AWt5LwYvc2acdEucRJ Ngs2Bwwd8Bfghyo89hJKDNZky/qJqFCP5UMV/zmT0grLqJ4QI3TrXHtqh4B6GIGqvMr8bQDarhAL uEVIjpiDBi3c/y1Bgn5ksw+j5D0tOhcBnFcX7HM0lc5tW96ZR+N2zEIR8cW6cAwHHj4ebE4sh0qg 9OJxUIeCvtfT6Aiquf0MxczrGLu0YARjhg1iRg== ) ;; ADDITIONAL SECTION (27 records) a.gtld-servers.net. 172800 IN A 192.5.6.30 a.gtld-servers.net. 172800 IN AAAA 2001:503:a83e::2:30 b.gtld-servers.net. 172800 IN A 192.33.14.30 b.gtld-servers.net. 172800 IN AAAA 2001:503:231d::2:30 c.gtld-servers.net. 172800 IN A 192.26.92.30 c.gtld-servers.net. 172800 IN AAAA 2001:503:83eb::30 d.gtld-servers.net. 172800 IN A 192.31.80.30 d.gtld-servers.net. 172800 IN AAAA 2001:500:856e::30 e.gtld-servers.net. 172800 IN A 192.12.94.30 e.gtld-servers.net. 172800 IN AAAA 2001:502:1ca1::30 f.gtld-servers.net. 172800 IN A 192.35.51.30 f.gtld-servers.net. 172800 IN AAAA 2001:503:d414::30 g.gtld-servers.net. 172800 IN A 192.42.93.30 g.gtld-servers.net. 172800 IN AAAA 2001:503:eea3::30 h.gtld-servers.net. 172800 IN A 192.54.112.30 h.gtld-servers.net. 172800 IN AAAA 2001:502:8cc::30 i.gtld-servers.net. 172800 IN A 192.43.172.30 i.gtld-servers.net. 172800 IN AAAA 2001:503:39c1::30 j.gtld-servers.net. 172800 IN A 192.48.79.30 j.gtld-servers.net. 172800 IN AAAA 2001:502:7094::30 k.gtld-servers.net. 172800 IN A 192.52.178.30 k.gtld-servers.net. 172800 IN AAAA 2001:503:d2d::30 l.gtld-servers.net. 172800 IN A 192.41.162.30 l.gtld-servers.net. 172800 IN AAAA 2001:500:d937::30 m.gtld-servers.net. 172800 IN A 192.55.83.30 m.gtld-servers.net. 172800 IN AAAA 2001:501:b1f9::30 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option:
	Query to j.root-servers.net for com/DNSKEY
	Received 1163 bytes from 192.58.128.30
	;; Answer received from 192.58.128.30 (1163 bytes) ;; HEADER SECTION ;; id = 64537 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 15 arcount = 27 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; com. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (15 records) com. 172800 IN NS e.gtld-servers.net. com. 172800 IN NS b.gtld-servers.net. com. 172800 IN NS j.gtld-servers.net. com. 172800 IN NS m.gtld-servers.net. com. 172800 IN NS i.gtld-servers.net. com. 172800 IN NS f.gtld-servers.net. com. 172800 IN NS a.gtld-servers.net. com. 172800 IN NS g.gtld-servers.net. com. 172800 IN NS h.gtld-servers.net. com. 172800 IN NS l.gtld-servers.net. com. 172800 IN NS k.gtld-servers.net. com. 172800 IN NS c.gtld-servers.net. com. 172800 IN NS d.gtld-servers.net. com. 86400 IN DS ( 30909 8 2 e2d3c916f6deeac73294e8268fb5885044a833fc5459588f4a9184cfc41a5766 ) com. 86400 IN RRSIG ( DS 8 1 86400 20210331170000 20210318160000 42351 . TKSxuNOqTK+qEK9KUcp19+zX6Kx8CVTQzxJMpQ74pgr5P7IjSdpiqQG2ibnwDCSueqAToWJkr73Y fMMhQBGHks5T+vFMM0nOu0sR7kfw2rdlX3OmMMQwxMCsxVoNesppiyiVx9AWt5LwYvc2acdEucRJ Ngs2Bwwd8Bfghyo89hJKDNZky/qJqFCP5UMV/zmT0grLqJ4QI3TrXHtqh4B6GIGqvMr8bQDarhAL uEVIjpiDBi3c/y1Bgn5ksw+j5D0tOhcBnFcX7HM0lc5tW96ZR+N2zEIR8cW6cAwHHj4ebE4sh0qg 9OJxUIeCvtfT6Aiquf0MxczrGLu0YARjhg1iRg== ) ;; ADDITIONAL SECTION (27 records) e.gtld-servers.net. 172800 IN A 192.12.94.30 e.gtld-servers.net. 172800 IN AAAA 2001:502:1ca1::30 b.gtld-servers.net. 172800 IN A 192.33.14.30 b.gtld-servers.net. 172800 IN AAAA 2001:503:231d::2:30 j.gtld-servers.net. 172800 IN A 192.48.79.30 j.gtld-servers.net. 172800 IN AAAA 2001:502:7094::30 m.gtld-servers.net. 172800 IN A 192.55.83.30 m.gtld-servers.net. 172800 IN AAAA 2001:501:b1f9::30 i.gtld-servers.net. 172800 IN A 192.43.172.30 i.gtld-servers.net. 172800 IN AAAA 2001:503:39c1::30 f.gtld-servers.net. 172800 IN A 192.35.51.30 f.gtld-servers.net. 172800 IN AAAA 2001:503:d414::30 a.gtld-servers.net. 172800 IN A 192.5.6.30 a.gtld-servers.net. 172800 IN AAAA 2001:503:a83e::2:30 g.gtld-servers.net. 172800 IN A 192.42.93.30 g.gtld-servers.net. 172800 IN AAAA 2001:503:eea3::30 h.gtld-servers.net. 172800 IN A 192.54.112.30 h.gtld-servers.net. 172800 IN AAAA 2001:502:8cc::30 l.gtld-servers.net. 172800 IN A 192.41.162.30 l.gtld-servers.net. 172800 IN AAAA 2001:500:d937::30 k.gtld-servers.net. 172800 IN A 192.52.178.30 k.gtld-servers.net. 172800 IN AAAA 2001:503:d2d::30 c.gtld-servers.net. 172800 IN A 192.26.92.30 c.gtld-servers.net. 172800 IN AAAA 2001:503:83eb::30 d.gtld-servers.net. 172800 IN A 192.31.80.30 d.gtld-servers.net. 172800 IN AAAA 2001:500:856e::30 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found child zone com

com

	Checking DS between . and com
	Query to e.root-servers.net for com/DS
	Received 367 bytes from 192.203.230.10
	;; Answer received from 192.203.230.10 (367 bytes) ;; HEADER SECTION ;; id = 53036 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1472 ;; option: ;; QUESTION SECTION (1 record) ;; com. IN DS ;; ANSWER SECTION (2 records) com. 86400 IN DS ( 30909 8 2 e2d3c916f6deeac73294e8268fb5885044a833fc5459588f4a9184cfc41a5766 ) com. 86400 IN RRSIG ( DS 8 1 86400 20210331170000 20210318160000 42351 . TKSxuNOqTK+qEK9KUcp19+zX6Kx8CVTQzxJMpQ74pgr5P7IjSdpiqQG2ibnwDCSueqAToWJkr73Y fMMhQBGHks5T+vFMM0nOu0sR7kfw2rdlX3OmMMQwxMCsxVoNesppiyiVx9AWt5LwYvc2acdEucRJ Ngs2Bwwd8Bfghyo89hJKDNZky/qJqFCP5UMV/zmT0grLqJ4QI3TrXHtqh4B6GIGqvMr8bQDarhAL uEVIjpiDBi3c/y1Bgn5ksw+j5D0tOhcBnFcX7HM0lc5tW96ZR+N2zEIR8cW6cAwHHj4ebE4sh0qg 9OJxUIeCvtfT6Aiquf0MxczrGLu0YARjhg1iRg== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1472 ;; option:
	Found 1 DS records for com in the . zone
	DS=30909/SHA-256 has algorithm RSASHA256
	Found 1 RRSIGs over DS RRset
	`com. 86400 IN RRSIG ( DS 8 1 86400 20210331170000 20210318160000 42351 . TKSxuNOqTK+qEK9KUcp19+zX6Kx8CVTQzxJMpQ74pgr5P7IjSdpiqQG2ibnwDCSueqAToWJkr73Y fMMhQBGHks5T+vFMM0nOu0sR7kfw2rdlX3OmMMQwxMCsxVoNesppiyiVx9AWt5LwYvc2acdEucRJ Ngs2Bwwd8Bfghyo89hJKDNZky/qJqFCP5UMV/zmT0grLqJ4QI3TrXHtqh4B6GIGqvMr8bQDarhAL uEVIjpiDBi3c/y1Bgn5ksw+j5D0tOhcBnFcX7HM0lc5tW96ZR+N2zEIR8cW6cAwHHj4ebE4sh0qg 9OJxUIeCvtfT6Aiquf0MxczrGLu0YARjhg1iRg== )`
	RRSIG=42351 and DNSKEY=42351 verifies the DS RRset
	DS=30909/SHA-256 is now in the chain-of-trust
	`com. 86400 IN DS ( 30909 8 2 e2d3c916f6deeac73294e8268fb5885044a833fc5459588f4a9184cfc41a5766 )`
	Query to k.gtld-servers.net for com/DNSKEY
	Received 777 bytes from 192.52.178.30
	;; Answer received from 192.52.178.30 (777 bytes) ;; HEADER SECTION ;; id = 60650 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; com. IN DNSKEY ;; ANSWER SECTION (3 records) com. 86400 IN DNSKEY ( 256 3 8 AwEAAdAVrRxtpC0gruiqnbm//BTq3/HF/wPuR0vYU+P+GDXYa0kDbdeKsp55Lz/adyaX/SOzgd0i sSwP/Y1yN2kTqXAqNz7UmjlqBVc56qphFWgrA4gDoEsMg2rc5tIVezF6m82rxh2/ptnS85ML2IqC tuqGsqVBVceboC/hVzKayw6iahADbcvvU+U7M1AnmnteJ0I4CQNifNqS3LiAsgOLN6c= ) ; Key ID = 58540 com. 86400 IN DNSKEY ( 257 3 8 AQPDzldNmMvZFX4NcNJ0uEnKDg7tmv/F3MyQR0lpBmVcNcsIszxNFxsBfKNW9JYCYqpik8366LE7 VbIcNRzfp2h9OO8HRl+H+E08zauK8k7evWEmu/6od+2boggPoiEfGNyvNPaSI7FOIroDsnw/tagg zHRX1Z7SOiOiPWPNIwSUyWOZ79VmcQ1GLkC6NlYvG3HwYmynQv6oFwGv/KELSw7ZSdrbTQ0HXvZb qMUI7BaMskmvgm1G7oKZ1YiF7O9ioVNc0+7ASbqmZN7Z98EGU/Qh2K/BgUe8Hs0XVcdPKrtyYnoQ Hd2ynKPcMMlTEih2/2HDHjRPJ2aywIpKNnv4oPo/ ) ; Key ID = 30909 com. 86400 IN RRSIG ( DNSKEY 8 1 86400 20210326192421 20210311191921 30909 com. YpYXRAvKagAr2qGhjEGwm3erq112DHWnYAxfLjGb/Oh3wZXUgEoup2faQGoiVLf5gScUCQOYbwSP Eu+vtA94EYsF0fBzHOb+At5+EaAZbxmT2r3NauE2LooalKmgjQUn/xw3NDxAyFKb+ag39o7QnhGm Uy1CDaEZ/LEYmiwifGuP7/1XihIsYFVx6cWSxeg507ySPvqFeHzezj78d0dx+lxZi7EMxsxnProT 1dRrOJmM3BNOP4gRbFivWCFFtsJxvLT+dLKPqhgF939suH0jh/usjg6yswVorp7klrAxToHvZhpY WxJ8sW90WtNWsCx7dSbAnclWMvLum70SVrUZAw== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found 2 DNSKEY records for com
	`com. 86400 IN DNSKEY ( 256 3 8 AwEAAdAVrRxtpC0gruiqnbm//BTq3/HF/wPuR0vYU+P+GDXYa0kDbdeKsp55Lz/adyaX/SOzgd0i sSwP/Y1yN2kTqXAqNz7UmjlqBVc56qphFWgrA4gDoEsMg2rc5tIVezF6m82rxh2/ptnS85ML2IqC tuqGsqVBVceboC/hVzKayw6iahADbcvvU+U7M1AnmnteJ0I4CQNifNqS3LiAsgOLN6c= ) ; Key ID = 58540`
	`com. 86400 IN DNSKEY ( 257 3 8 AQPDzldNmMvZFX4NcNJ0uEnKDg7tmv/F3MyQR0lpBmVcNcsIszxNFxsBfKNW9JYCYqpik8366LE7 VbIcNRzfp2h9OO8HRl+H+E08zauK8k7evWEmu/6od+2boggPoiEfGNyvNPaSI7FOIroDsnw/tagg zHRX1Z7SOiOiPWPNIwSUyWOZ79VmcQ1GLkC6NlYvG3HwYmynQv6oFwGv/KELSw7ZSdrbTQ0HXvZb qMUI7BaMskmvgm1G7oKZ1YiF7O9ioVNc0+7ASbqmZN7Z98EGU/Qh2K/BgUe8Hs0XVcdPKrtyYnoQ Hd2ynKPcMMlTEih2/2HDHjRPJ2aywIpKNnv4oPo/ ) ; Key ID = 30909`
	DNSKEY=30909/SEP is now in the chain-of-trust
	DS=30909/SHA-256 verifies DNSKEY=30909/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`com. 86400 IN RRSIG ( DNSKEY 8 1 86400 20210326192421 20210311191921 30909 com. YpYXRAvKagAr2qGhjEGwm3erq112DHWnYAxfLjGb/Oh3wZXUgEoup2faQGoiVLf5gScUCQOYbwSP Eu+vtA94EYsF0fBzHOb+At5+EaAZbxmT2r3NauE2LooalKmgjQUn/xw3NDxAyFKb+ag39o7QnhGm Uy1CDaEZ/LEYmiwifGuP7/1XihIsYFVx6cWSxeg507ySPvqFeHzezj78d0dx+lxZi7EMxsxnProT 1dRrOJmM3BNOP4gRbFivWCFFtsJxvLT+dLKPqhgF939suH0jh/usjg6yswVorp7klrAxToHvZhpY WxJ8sW90WtNWsCx7dSbAnclWMvLum70SVrUZAw== )`
	RRSIG=30909 and DNSKEY=30909/SEP verifies the DNSKEY RRset
	DNSKEY=58540 is now in the chain-of-trust
	Query to l.gtld-servers.net for ns4.internetgremlin.com/A
	Received 370 bytes from 192.41.162.30
	;; Answer received from 192.41.162.30 (370 bytes) ;; HEADER SECTION ;; id = 36560 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 5 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; ns4.internetgremlin.com. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (5 records) internetgremlin.com. 172800 IN NS 1.rhye.uk. internetgremlin.com. 172800 IN NS 2.rhye.uk. internetgremlin.com. 86400 IN DS ( 13776 13 2 06d58f2379beaf245ed7b835726fa641bbd9f817e6c795bd4ff799a38373e01e ) internetgremlin.com. 86400 IN DS ( 13776 13 1 5564153c26517218ff33f6c494a41934bc553714 ) internetgremlin.com. 86400 IN RRSIG ( DS 8 2 86400 20210323043250 20210316032250 58540 com. NiTlMx7RteRY5lY7wXih2KFloBQKHg9FlQvnq0phB4LQPSw/wz+MRlA+OeHeDy+SBAP0Po01MqaX szBDW9cfWlGKxEMgw2f0upUL5Ur8eWZRv08SehJ+33xTTDD/Zu4j0hP7hNmyp1eAO5kTUMAyJJBx 0NqRdZ+Ys2uSFT5sa3nWG1Ooiqg2dJV1aeiTZ+pv+4cIBDXuskmXjVTmr0lCmQ== ) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Query to a.gtld-servers.net for internetgremlin.com/DNSKEY
	Received 366 bytes from 192.5.6.30
	;; Answer received from 192.5.6.30 (366 bytes) ;; HEADER SECTION ;; id = 21888 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 5 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; internetgremlin.com. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (5 records) internetgremlin.com. 172800 IN NS 1.rhye.uk. internetgremlin.com. 172800 IN NS 2.rhye.uk. internetgremlin.com. 86400 IN DS ( 13776 13 2 06d58f2379beaf245ed7b835726fa641bbd9f817e6c795bd4ff799a38373e01e ) internetgremlin.com. 86400 IN DS ( 13776 13 1 5564153c26517218ff33f6c494a41934bc553714 ) internetgremlin.com. 86400 IN RRSIG ( DS 8 2 86400 20210323043250 20210316032250 58540 com. NiTlMx7RteRY5lY7wXih2KFloBQKHg9FlQvnq0phB4LQPSw/wz+MRlA+OeHeDy+SBAP0Po01MqaX szBDW9cfWlGKxEMgw2f0upUL5Ur8eWZRv08SehJ+33xTTDD/Zu4j0hP7hNmyp1eAO5kTUMAyJJBx 0NqRdZ+Ys2uSFT5sa3nWG1Ooiqg2dJV1aeiTZ+pv+4cIBDXuskmXjVTmr0lCmQ== ) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found child zone internetgremlin.com

internetgremlin.com

	Checking DS between com and internetgremlin.com
	Query to g.gtld-servers.net for internetgremlin.com/DS
	Received 1318 bytes from 192.42.93.30
	;; Answer received from 192.42.93.30 (1318 bytes) ;; HEADER SECTION ;; id = 28753 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 14 arcount = 27 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; internetgremlin.com. IN DS ;; ANSWER SECTION (3 records) internetgremlin.com. 86400 IN DS ( 13776 13 2 06d58f2379beaf245ed7b835726fa641bbd9f817e6c795bd4ff799a38373e01e ) internetgremlin.com. 86400 IN DS ( 13776 13 1 5564153c26517218ff33f6c494a41934bc553714 ) internetgremlin.com. 86400 IN RRSIG ( DS 8 2 86400 20210323043250 20210316032250 58540 com. NiTlMx7RteRY5lY7wXih2KFloBQKHg9FlQvnq0phB4LQPSw/wz+MRlA+OeHeDy+SBAP0Po01MqaX szBDW9cfWlGKxEMgw2f0upUL5Ur8eWZRv08SehJ+33xTTDD/Zu4j0hP7hNmyp1eAO5kTUMAyJJBx 0NqRdZ+Ys2uSFT5sa3nWG1Ooiqg2dJV1aeiTZ+pv+4cIBDXuskmXjVTmr0lCmQ== ) ;; AUTHORITY SECTION (14 records) com. 172800 IN NS c.gtld-servers.net. com. 172800 IN NS j.gtld-servers.net. com. 172800 IN NS b.gtld-servers.net. com. 172800 IN NS d.gtld-servers.net. com. 172800 IN NS g.gtld-servers.net. com. 172800 IN NS i.gtld-servers.net. com. 172800 IN NS e.gtld-servers.net. com. 172800 IN NS f.gtld-servers.net. com. 172800 IN NS h.gtld-servers.net. com. 172800 IN NS m.gtld-servers.net. com. 172800 IN NS k.gtld-servers.net. com. 172800 IN NS l.gtld-servers.net. com. 172800 IN NS a.gtld-servers.net. com. 172800 IN RRSIG ( NS 8 1 172800 20210325044039 20210318033039 58540 com. m0MWJG/n3bM92PVN7oKf3Zl3Sh6ProVFKNgXk8V8HHcNRt13jHD8L8pvdSi5V/YpGLHFcRn3AmIS ITeO3SXgEhr1tOTw5ycfMNFZbLRIq6M+L95TBqCzNV2ITl+6/yo1dfu/vRWEaivFkCmZuCQ4Ousj x6aeVTKJNnT8g/GodTPYSkVXOJeKqedrjD76kUGJngBoRC7cdDVJ+0HGUCUujQ== ) ;; ADDITIONAL SECTION (27 records) c.gtld-servers.net. 172800 IN A 192.26.92.30 c.gtld-servers.net. 172800 IN AAAA 2001:503:83eb::30 j.gtld-servers.net. 172800 IN A 192.48.79.30 j.gtld-servers.net. 172800 IN AAAA 2001:502:7094::30 b.gtld-servers.net. 172800 IN A 192.33.14.30 b.gtld-servers.net. 172800 IN AAAA 2001:503:231d::2:30 d.gtld-servers.net. 172800 IN A 192.31.80.30 d.gtld-servers.net. 172800 IN AAAA 2001:500:856e::30 g.gtld-servers.net. 172800 IN A 192.42.93.30 g.gtld-servers.net. 172800 IN AAAA 2001:503:eea3::30 i.gtld-servers.net. 172800 IN A 192.43.172.30 i.gtld-servers.net. 172800 IN AAAA 2001:503:39c1::30 e.gtld-servers.net. 172800 IN A 192.12.94.30 e.gtld-servers.net. 172800 IN AAAA 2001:502:1ca1::30 f.gtld-servers.net. 172800 IN A 192.35.51.30 f.gtld-servers.net. 172800 IN AAAA 2001:503:d414::30 h.gtld-servers.net. 172800 IN A 192.54.112.30 h.gtld-servers.net. 172800 IN AAAA 2001:502:8cc::30 m.gtld-servers.net. 172800 IN A 192.55.83.30 m.gtld-servers.net. 172800 IN AAAA 2001:501:b1f9::30 k.gtld-servers.net. 172800 IN A 192.52.178.30 k.gtld-servers.net. 172800 IN AAAA 2001:503:d2d::30 l.gtld-servers.net. 172800 IN A 192.41.162.30 l.gtld-servers.net. 172800 IN AAAA 2001:500:d937::30 a.gtld-servers.net. 172800 IN A 192.5.6.30 a.gtld-servers.net. 172800 IN AAAA 2001:503:a83e::2:30 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found 2 DS records for internetgremlin.com in the com zone
	DS=13776/SHA-256 has algorithm ECDSAP256SHA256
	DS=13776/SHA-1 has algorithm ECDSAP256SHA256
	Found 1 RRSIGs over DS RRset
	`internetgremlin.com. 86400 IN RRSIG ( DS 8 2 86400 20210323043250 20210316032250 58540 com. NiTlMx7RteRY5lY7wXih2KFloBQKHg9FlQvnq0phB4LQPSw/wz+MRlA+OeHeDy+SBAP0Po01MqaX szBDW9cfWlGKxEMgw2f0upUL5Ur8eWZRv08SehJ+33xTTDD/Zu4j0hP7hNmyp1eAO5kTUMAyJJBx 0NqRdZ+Ys2uSFT5sa3nWG1Ooiqg2dJV1aeiTZ+pv+4cIBDXuskmXjVTmr0lCmQ== )`
	RRSIG=58540 and DNSKEY=58540 verifies the DS RRset
	DS=13776/SHA-256 is now in the chain-of-trust
	`internetgremlin.com. 86400 IN DS ( 13776 13 2 06d58f2379beaf245ed7b835726fa641bbd9f817e6c795bd4ff799a38373e01e )`
	`internetgremlin.com. 86400 IN DS ( 13776 13 1 5564153c26517218ff33f6c494a41934bc553714 )`
	Query to 2.rhye.uk for internetgremlin.com/DNSKEY
	Received 438 bytes from 88.208.230.44
	;; Answer received from 88.208.230.44 (438 bytes) ;; HEADER SECTION ;; id = 30579 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 4 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; internetgremlin.com. IN DNSKEY ;; ANSWER SECTION (4 records) internetgremlin.com. 38400 IN DNSKEY ( 257 3 13 sSGLLp8qYQ66HSRdZ9pZq4tGSxgikWVwmshwGi4Qbeg1ZVPH+RJyZI+9y54TIv3JNdYcakf8pAPN BlI+uSPYZg== ) ; Key ID = 13776 internetgremlin.com. 38400 IN DNSKEY ( 256 3 13 ZH/yzG+V4Pw6mV/SS5CtBYHKK8VR0nR/QCV7MvztWSM3POIlZFp6R8KqlxPPlXVw1YftTlEfa9G/ tGmgaKpAwQ== ) ; Key ID = 44424 internetgremlin.com. 38400 IN RRSIG ( DNSKEY 13 2 38400 20210416082325 20210317082325 13776 internetgremlin.com. t/0iFpjlDqM+40RKLI9IWLw+3HgEpv2przedualRfGpeywehFW8SMSQAWU813gktcjLMjwvSrYRE ePicRTxM7Q== ) internetgremlin.com. 38400 IN RRSIG ( DNSKEY 13 2 38400 20210416082325 20210317082325 44424 internetgremlin.com. Y1tgjHCYz6qm9ZEFt21inoeWxSFw8VOHxZysOSFpMr3AhAGqr1pMbsvYFyhfgMK+aDnkCNa7Bmc9 tu/e307BXg== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found 2 DNSKEY records for internetgremlin.com
	`internetgremlin.com. 38400 IN DNSKEY ( 257 3 13 sSGLLp8qYQ66HSRdZ9pZq4tGSxgikWVwmshwGi4Qbeg1ZVPH+RJyZI+9y54TIv3JNdYcakf8pAPN BlI+uSPYZg== ) ; Key ID = 13776`
	`internetgremlin.com. 38400 IN DNSKEY ( 256 3 13 ZH/yzG+V4Pw6mV/SS5CtBYHKK8VR0nR/QCV7MvztWSM3POIlZFp6R8KqlxPPlXVw1YftTlEfa9G/ tGmgaKpAwQ== ) ; Key ID = 44424`
	DNSKEY=13776/SEP is now in the chain-of-trust
	DS=13776/SHA-256 verifies DNSKEY=13776/SEP
	DS=13776/SHA-1 verifies DNSKEY=13776/SEP
	Found 2 RRSIGs over DNSKEY RRset
	`internetgremlin.com. 38400 IN RRSIG ( DNSKEY 13 2 38400 20210416082325 20210317082325 13776 internetgremlin.com. t/0iFpjlDqM+40RKLI9IWLw+3HgEpv2przedualRfGpeywehFW8SMSQAWU813gktcjLMjwvSrYRE ePicRTxM7Q== )`
	`internetgremlin.com. 38400 IN RRSIG ( DNSKEY 13 2 38400 20210416082325 20210317082325 44424 internetgremlin.com. Y1tgjHCYz6qm9ZEFt21inoeWxSFw8VOHxZysOSFpMr3AhAGqr1pMbsvYFyhfgMK+aDnkCNa7Bmc9 tu/e307BXg== )`
	RRSIG=13776 and DNSKEY=13776/SEP verifies the DNSKEY RRset
	RRSIG=44424 and DNSKEY=44424 verifies the DNSKEY RRset
	DNSKEY=44424 is now in the chain-of-trust
	Query to 2.rhye.uk for ns4.internetgremlin.com/A
	Received 380 bytes from 88.208.230.44
	;; Answer received from 88.208.230.44 (380 bytes) ;; HEADER SECTION ;; id = 438 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NXDOMAIN ;; qdcount = 1 ancount = 0 nscount = 4 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; ns4.internetgremlin.com. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (4 records) internetgremlin.com. 38400 IN SOA ( 1.rhye.uk. hostmaster.rhye.uk. 2021031700 ;serial 10800 ;refresh 3600 ;retry 604800 ;expire 38400 ;minimum ) internetgremlin.com. 38400 IN RRSIG ( SOA 13 2 38400 20210416082325 20210317082325 44424 internetgremlin.com. DiogGUKP/6mv8F2RH8FrdBiaAO1iyFkAi/yycQL1CYRLzXlVXd63X/4WknTHJroYwC1zyxR1w60e apmD+UmXQA== ) internetgremlin.com. 38400 IN NSEC ( internetgremlin.com. NS SOA MX TXT RRSIG NSEC DNSKEY ) internetgremlin.com. 38400 IN RRSIG ( NSEC 13 2 38400 20210416082325 20210317082325 44424 internetgremlin.com. dBBrGpSJI3XP5LWj+MK1YFKmCpLy2SCPOnT7EaXtHOyDwAE+cLIJZaSpaClOTG90vIdiSfeQAI6x zfJ0LjP92Q== ) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Zone internetgremlin.com (88.208.230.44) returns NXDOMAIN for ns4.internetgremlin.com
	Checking NSEC records for an NXDOMAIN response
	Found 1 RRSIGs over NSEC RRset
	`internetgremlin.com. 38400 IN RRSIG ( NSEC 13 2 38400 20210416082325 20210317082325 44424 internetgremlin.com. dBBrGpSJI3XP5LWj+MK1YFKmCpLy2SCPOnT7EaXtHOyDwAE+cLIJZaSpaClOTG90vIdiSfeQAI6x zfJ0LjP92Q== )`
	RRSIG=44424 and DNSKEY=44424 verifies the NSEC RRset
	NSEC proves no records exist with name ns4.internetgremlin.com
	Found 1 RRSIGs over NSEC RRset
	`internetgremlin.com. 38400 IN RRSIG ( NSEC 13 2 38400 20210416082325 20210317082325 44424 internetgremlin.com. dBBrGpSJI3XP5LWj+MK1YFKmCpLy2SCPOnT7EaXtHOyDwAE+cLIJZaSpaClOTG90vIdiSfeQAI6x zfJ0LjP92Q== )`
	RRSIG=44424 and DNSKEY=44424 verifies the NSEC RRset
	NSEC proves no records exist with name *.internetgremlin.com

Move your mouse over any or symbols for remediation hints.

Want a second opinion? Test ns4.internetgremlin.com at dnsviz.net.

DNSSEC Analyzer

↓ Advanced options ↑ Advanced options

Trust Anchor:
Name Servers: