DNSSEC Analyzer - www.uol.com.br

Domain Name:

Time: 2021-01-26 12:48:32 UTC, NTP stratum 4

Analyzing DNSSEC problems for www.uol.com.br

DS=20326/SHA-256 is now in the chain-of-trust

	Checking DS between Trust Anchor and .
	`. IN DS ( 20326 8 2 e06d44b80b8f1d39a95c0b0d7c65d08458e880409bbc683457104237c7f8ec8d )`
	Query to i.root-servers.net for ./DNSKEY
	Received 865 bytes from 192.36.148.17
	;; Answer received from 192.36.148.17 (865 bytes) ;; HEADER SECTION ;; id = 2938 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; . IN DNSKEY ;; ANSWER SECTION (3 records) . 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; Key ID = 20326 . 172800 IN DNSKEY ( 256 3 8 AwEAAbKGKkqc1VAvQr48iPf9Nd39f337MitggxF0AB9kLKRNSuq9joOEPC/R6PD/4lTzUms8U9oP +aiF0rVC2rGOKSdOLxPHRLA3ameMFT2/3bmVCFsRsn03IVTdN5VUAfczjqjmA0t9NM7bbN5oVzuQ L3P1FyQb1q6HX4M1qg+htMNEd9PdlPLMFcrUg5fcYtTr2llVkO1Xo3lAdrjmmxfGeIyQnskpwPyW 88J527DEytmgPo5KzLBYLMoL2Q41PK0ul0rs7yN+g5IG4LnJOcjew1yrmHXrp/OzrpsO4FkicufY t/ygfQKkT5HYbr/yFgeZAfaF80nYyc7wgDYxOeHdiRk= ) ; Key ID = 42351 . 172800 IN RRSIG ( DNSKEY 8 0 172800 20210211000000 20210121000000 20326 . hdO/MozPh54eM3Ow9qSXrpqt0L3hj2RfqHeuDimtgMLSR3V16Xqm9k2ctaT4qyCZb51OtiuE+1Uu imx3Dj83myjz5mOGo0z1f1VEwV6QTuPkZeVecZAFCzsuVTlpUT1OdZQhnwvzIIPYBLlG3TOTQuPt UY9v1LcyoxYWEYy+SDdaQo1CGu4Ochy1aleL40pHWaqk0Swl0lLcgykgVWS3ZpCDL+R50cXg7z4i 5GnpMzxy48Yf4ED+Ja/W+x9ZOSmWnRmCjCGrTbY943AgJjCYEBbHEdJYo9PTYJrMp+x75U1LVSVp zpfI7OXd5yvH7AA8b83yyks+Sv+G6w8y05oZNw== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found 2 DNSKEY records for .
	`. 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; Key ID = 20326`
	`. 172800 IN DNSKEY ( 256 3 8 AwEAAbKGKkqc1VAvQr48iPf9Nd39f337MitggxF0AB9kLKRNSuq9joOEPC/R6PD/4lTzUms8U9oP +aiF0rVC2rGOKSdOLxPHRLA3ameMFT2/3bmVCFsRsn03IVTdN5VUAfczjqjmA0t9NM7bbN5oVzuQ L3P1FyQb1q6HX4M1qg+htMNEd9PdlPLMFcrUg5fcYtTr2llVkO1Xo3lAdrjmmxfGeIyQnskpwPyW 88J527DEytmgPo5KzLBYLMoL2Q41PK0ul0rs7yN+g5IG4LnJOcjew1yrmHXrp/OzrpsO4FkicufY t/ygfQKkT5HYbr/yFgeZAfaF80nYyc7wgDYxOeHdiRk= ) ; Key ID = 42351`
	DNSKEY=20326/SEP is now in the chain-of-trust
	DS=20326/SHA-256 verifies DNSKEY=20326/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`. 172800 IN RRSIG ( DNSKEY 8 0 172800 20210211000000 20210121000000 20326 . hdO/MozPh54eM3Ow9qSXrpqt0L3hj2RfqHeuDimtgMLSR3V16Xqm9k2ctaT4qyCZb51OtiuE+1Uu imx3Dj83myjz5mOGo0z1f1VEwV6QTuPkZeVecZAFCzsuVTlpUT1OdZQhnwvzIIPYBLlG3TOTQuPt UY9v1LcyoxYWEYy+SDdaQo1CGu4Ochy1aleL40pHWaqk0Swl0lLcgykgVWS3ZpCDL+R50cXg7z4i 5GnpMzxy48Yf4ED+Ja/W+x9ZOSmWnRmCjCGrTbY943AgJjCYEBbHEdJYo9PTYJrMp+x75U1LVSVp zpfI7OXd5yvH7AA8b83yyks+Sv+G6w8y05oZNw== )`
	RRSIG=20326 and DNSKEY=20326/SEP verifies the DNSKEY RRset
	DNSKEY=42351 is now in the chain-of-trust
	Query to m.root-servers.net for www.uol.com.br/A
	Received 742 bytes from 202.12.27.33
	;; Answer received from 202.12.27.33 (742 bytes) ;; HEADER SECTION ;; id = 45925 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 8 arcount = 13 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; www.uol.com.br. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (8 records) br. 172800 IN NS a.dns.br. br. 172800 IN NS d.dns.br. br. 172800 IN NS f.dns.br. br. 172800 IN NS b.dns.br. br. 172800 IN NS c.dns.br. br. 172800 IN NS e.dns.br. br. 86400 IN DS ( 2471 13 2 5e4f35998b8f909557fa119c4cbfdca2d660a26f069ef006b403758a07d1a2e4 ) br. 86400 IN RRSIG ( DS 8 1 86400 20210208050000 20210126040000 42351 . ag7NJfc2uHNPtY3pVET7cNrx7QrPpsoiH/xjsk2pEY25LYR+Q4Z6dIjMc86+zVj6MW7bTlB0WNm7 T1rsFRmBzonjFxUgstAHF4ZoPs1fL1OwGmaEFV+swjUJz0+PdJ9dahCyxhPZfCjoVwWIPy3gwKCN YxppY9AXeBI9vCwgu83LPySG0V7ka8/j3rU5Bw/Iq8wzb+N/3dQy/myZ/BaQwpOMpbsINMBU7N3k 4OXyagKgK51GPrOIEEgiAqOr/VxiU+svmXPWamR+tt+Dxdw1c0pHrHSUNxXBg8nXt62p2dvVlXqA T2NRzxhjoyQvKivMzEqSiLBQuUXKVBDxfOnJOA== ) ;; ADDITIONAL SECTION (13 records) a.dns.br. 172800 IN A 200.219.148.10 b.dns.br. 172800 IN A 200.189.41.10 c.dns.br. 172800 IN A 200.192.233.10 d.dns.br. 172800 IN A 200.219.154.10 e.dns.br. 172800 IN A 200.229.248.10 f.dns.br. 172800 IN A 200.219.159.10 a.dns.br. 172800 IN AAAA 2001:12f8:6::10 b.dns.br. 172800 IN AAAA 2001:12f8:8::10 c.dns.br. 172800 IN AAAA 2001:12f8:a::10 d.dns.br. 172800 IN AAAA 2001:12f8:4::10 e.dns.br. 172800 IN AAAA 2001:12f8:2::10 f.dns.br. 172800 IN AAAA 2001:12f8:c::10 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Query to e.root-servers.net for br/DNSKEY
	Received 730 bytes from 192.203.230.10
	;; Answer received from 192.203.230.10 (730 bytes) ;; HEADER SECTION ;; id = 22179 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 8 arcount = 13 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; br. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (8 records) br. 172800 IN NS a.dns.br. br. 172800 IN NS b.dns.br. br. 172800 IN NS c.dns.br. br. 172800 IN NS d.dns.br. br. 172800 IN NS e.dns.br. br. 172800 IN NS f.dns.br. br. 86400 IN DS ( 2471 13 2 5e4f35998b8f909557fa119c4cbfdca2d660a26f069ef006b403758a07d1a2e4 ) br. 86400 IN RRSIG ( DS 8 1 86400 20210208050000 20210126040000 42351 . ag7NJfc2uHNPtY3pVET7cNrx7QrPpsoiH/xjsk2pEY25LYR+Q4Z6dIjMc86+zVj6MW7bTlB0WNm7 T1rsFRmBzonjFxUgstAHF4ZoPs1fL1OwGmaEFV+swjUJz0+PdJ9dahCyxhPZfCjoVwWIPy3gwKCN YxppY9AXeBI9vCwgu83LPySG0V7ka8/j3rU5Bw/Iq8wzb+N/3dQy/myZ/BaQwpOMpbsINMBU7N3k 4OXyagKgK51GPrOIEEgiAqOr/VxiU+svmXPWamR+tt+Dxdw1c0pHrHSUNxXBg8nXt62p2dvVlXqA T2NRzxhjoyQvKivMzEqSiLBQuUXKVBDxfOnJOA== ) ;; ADDITIONAL SECTION (13 records) a.dns.br. 172800 IN A 200.219.148.10 b.dns.br. 172800 IN A 200.189.41.10 c.dns.br. 172800 IN A 200.192.233.10 d.dns.br. 172800 IN A 200.219.154.10 e.dns.br. 172800 IN A 200.229.248.10 f.dns.br. 172800 IN A 200.219.159.10 a.dns.br. 172800 IN AAAA 2001:12f8:6::10 b.dns.br. 172800 IN AAAA 2001:12f8:8::10 c.dns.br. 172800 IN AAAA 2001:12f8:a::10 d.dns.br. 172800 IN AAAA 2001:12f8:4::10 e.dns.br. 172800 IN AAAA 2001:12f8:2::10 f.dns.br. 172800 IN AAAA 2001:12f8:c::10 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found child zone br

	Checking DS between . and br
	Query to l.root-servers.net for br/DS
	Received 366 bytes from 199.7.83.42
	;; Answer received from 199.7.83.42 (366 bytes) ;; HEADER SECTION ;; id = 45730 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; br. IN DS ;; ANSWER SECTION (2 records) br. 86400 IN DS ( 2471 13 2 5e4f35998b8f909557fa119c4cbfdca2d660a26f069ef006b403758a07d1a2e4 ) br. 86400 IN RRSIG ( DS 8 1 86400 20210208050000 20210126040000 42351 . ag7NJfc2uHNPtY3pVET7cNrx7QrPpsoiH/xjsk2pEY25LYR+Q4Z6dIjMc86+zVj6MW7bTlB0WNm7 T1rsFRmBzonjFxUgstAHF4ZoPs1fL1OwGmaEFV+swjUJz0+PdJ9dahCyxhPZfCjoVwWIPy3gwKCN YxppY9AXeBI9vCwgu83LPySG0V7ka8/j3rU5Bw/Iq8wzb+N/3dQy/myZ/BaQwpOMpbsINMBU7N3k 4OXyagKgK51GPrOIEEgiAqOr/VxiU+svmXPWamR+tt+Dxdw1c0pHrHSUNxXBg8nXt62p2dvVlXqA T2NRzxhjoyQvKivMzEqSiLBQuUXKVBDxfOnJOA== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found 1 DS records for br in the . zone
	DS=2471/SHA-256 has algorithm ECDSAP256SHA256
	Found 1 RRSIGs over DS RRset
	`br. 86400 IN RRSIG ( DS 8 1 86400 20210208050000 20210126040000 42351 . ag7NJfc2uHNPtY3pVET7cNrx7QrPpsoiH/xjsk2pEY25LYR+Q4Z6dIjMc86+zVj6MW7bTlB0WNm7 T1rsFRmBzonjFxUgstAHF4ZoPs1fL1OwGmaEFV+swjUJz0+PdJ9dahCyxhPZfCjoVwWIPy3gwKCN YxppY9AXeBI9vCwgu83LPySG0V7ka8/j3rU5Bw/Iq8wzb+N/3dQy/myZ/BaQwpOMpbsINMBU7N3k 4OXyagKgK51GPrOIEEgiAqOr/VxiU+svmXPWamR+tt+Dxdw1c0pHrHSUNxXBg8nXt62p2dvVlXqA T2NRzxhjoyQvKivMzEqSiLBQuUXKVBDxfOnJOA== )`
	RRSIG=42351 and DNSKEY=42351 verifies the DS RRset
	DS=2471/SHA-256 is now in the chain-of-trust
	`br. 86400 IN DS ( 2471 13 2 5e4f35998b8f909557fa119c4cbfdca2d660a26f069ef006b403758a07d1a2e4 )`
	Query to a.dns.br for br/DNSKEY
	Received 289 bytes from 200.219.148.10
	;; Answer received from 200.219.148.10 (289 bytes) ;; HEADER SECTION ;; id = 41460 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; br. IN DNSKEY ;; ANSWER SECTION (3 records) br. 21600 IN DNSKEY ( 257 3 13 i9GgZ+/z2Y7VbG3AHrh7KD7FUHGxmCKHfoVGv/zZ3DAcXTVnAywWTopCBxqZas4JkzaPdAGd0rVt RsKGRDhiFg== ) ; Key ID = 2471 br. 21600 IN DNSKEY ( 256 3 13 4TiOsBhhIkgto+wVKl9r8rKaITB7+aE2DI6y6+4q8PyyXezoFxxNq7Eaazg+p8GekidIKslsIgOI pl0GJ19wEA== ) ; Key ID = 20940 br. 21600 IN RRSIG ( DNSKEY 13 1 21600 20210214120000 20210124120000 2471 br. H6UUNtXcQdmi62zh7xw0WWNqqTmDgeeSJ2MecBiTO3s0oJAa5QhaZrEVk2rROapZHYzCUN3KfR0P KNk/UCP/8A== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found 2 DNSKEY records for br
	`br. 21600 IN DNSKEY ( 257 3 13 i9GgZ+/z2Y7VbG3AHrh7KD7FUHGxmCKHfoVGv/zZ3DAcXTVnAywWTopCBxqZas4JkzaPdAGd0rVt RsKGRDhiFg== ) ; Key ID = 2471`
	`br. 21600 IN DNSKEY ( 256 3 13 4TiOsBhhIkgto+wVKl9r8rKaITB7+aE2DI6y6+4q8PyyXezoFxxNq7Eaazg+p8GekidIKslsIgOI pl0GJ19wEA== ) ; Key ID = 20940`
	DNSKEY=2471/SEP is now in the chain-of-trust
	DS=2471/SHA-256 verifies DNSKEY=2471/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`br. 21600 IN RRSIG ( DNSKEY 13 1 21600 20210214120000 20210124120000 2471 br. H6UUNtXcQdmi62zh7xw0WWNqqTmDgeeSJ2MecBiTO3s0oJAa5QhaZrEVk2rROapZHYzCUN3KfR0P KNk/UCP/8A== )`
	RRSIG=2471 and DNSKEY=2471/SEP verifies the DNSKEY RRset
	DNSKEY=20940 is now in the chain-of-trust
	Query to d.dns.br for www.uol.com.br/A
	Received 537 bytes from 200.219.154.10
	;; Answer received from 200.219.154.10 (537 bytes) ;; HEADER SECTION ;; id = 2466 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 7 arcount = 4 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; www.uol.com.br. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (7 records) uol.com.br. 3600 IN NS eliot.uol.com.br. uol.com.br. 3600 IN NS borges.uol.com.br. uol.com.br. 3600 IN NS charles.uol.com.br. qdotitdjsg852t547sfmrskqlu96n6oj.com.br. 900 IN NSEC3 ( 1 1 10 6fab79d7c6b65098cf44 qdouscj24s1ckbpgg6htha7vq2aav2h2 NS SOA RRSIG DNSKEY NSEC3PARAM ) qdotitdjsg852t547sfmrskqlu96n6oj.com.br. 900 IN RRSIG ( NSEC3 13 3 900 20210209124509 20210126114509 4166 com.br. LDIDF5tdK1YdK1YuqYSRHJPmjAyeOu+ag7nWmUdI2yLVwf9S7uiZKDp1rovm98PdH2UYKL169qST s1YweXp2Og== ) j8a41p9q04t8n5qdgqdr8898mt21g03p.com.br. 900 IN NSEC3 ( 1 1 10 6fab79d7c6b65098cf44 j8a50ded34kdq1fc7qbhgj84c7obvqov NS DS RRSIG ) j8a41p9q04t8n5qdgqdr8898mt21g03p.com.br. 900 IN RRSIG ( NSEC3 13 3 900 20210205020509 20210122010509 4166 com.br. ccbRdss8GIEesBf90dZpcUE2gim7Kd/Zoq/6IxEvYbV1YBZpXZyIGA4Cu4ASW/GGpXZtd1dqw2R5 65WJ3NVuNA== ) ;; ADDITIONAL SECTION (4 records) eliot.uol.com.br. 3600 IN A 200.221.11.98 borges.uol.com.br. 3600 IN A 200.147.255.105 charles.uol.com.br. 3600 IN A 200.147.38.8 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Query to b.dns.br for com.br/DNSKEY
	Received 217 bytes from 200.189.41.10
	;; Answer received from 200.189.41.10 (217 bytes) ;; HEADER SECTION ;; id = 14601 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; com.br. IN DNSKEY ;; ANSWER SECTION (2 records) com.br. 21600 IN DNSKEY ( 257 3 13 CzdvGlYbrg3le8BmL817pE+0woEimynijx+b0xsULjJ3/yNUTioGRLVFlF6Z0czJ2H1s3qo2TOdk ZFE+uTYeJw== ) ; Key ID = 4166 com.br. 21600 IN RRSIG ( DNSKEY 13 2 21600 20210209124509 20210126114509 4166 com.br. 4It8/Op8EXbJTjw3lgodFfr46tQ61V+TgjPhSTynCziZkDQ5AB2SyZ1L3IiCS8AAbYfxC4gHOxc5 bVfjyTQXvA== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found child zone com.br
	Attempting to learn nameservers for com.br
	Query to c.dns.br for com.br/NS
	Received 237 bytes from 200.192.233.10
	;; Answer received from 200.192.233.10 (237 bytes) ;; HEADER SECTION ;; id = 41501 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 7 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; com.br. IN NS ;; ANSWER SECTION (7 records) com.br. 172800 IN NS a.dns.br. com.br. 172800 IN NS b.dns.br. com.br. 172800 IN NS c.dns.br. com.br. 172800 IN NS d.dns.br. com.br. 172800 IN NS e.dns.br. com.br. 172800 IN NS f.dns.br. com.br. 172800 IN RRSIG ( NS 13 2 172800 20210209124509 20210126114509 4166 com.br. l6xj9h/wMZmy2xV6/+RnpW5wUCJ74aOFgUIsr69CllwD1aOVIZT7/+QWLssG0bHanuYCXSX4QZc8 7x5fRyP6Ww== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found com.br nameservers: a.dns.br, b.dns.br, c.dns.br, d.dns.br, e.dns.br, f.dns.br

com.br

	Checking DS between br and com.br
	Query to c.dns.br for com.br/DS
	Received 181 bytes from 200.192.233.10
	;; Answer received from 200.192.233.10 (181 bytes) ;; HEADER SECTION ;; id = 62930 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; com.br. IN DS ;; ANSWER SECTION (2 records) com.br. 21600 IN DS ( 4166 13 2 c316cdbd48145cddafe32977cdcc5c50de72bb6f09dcadf20ea165500a2728f7 ) com.br. 21600 IN RRSIG ( DS 13 2 21600 20210207120509 20210124110509 20940 br. MOEhXt0NV+L0uR/yrFEf+er50kIBc+x5FLnCmS9u1cbC8awZQNNImazaUa9uXDxQPZ69PdPcm0OW SpR3TKeaDg== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found 1 DS records for com.br in the br zone
	DS=4166/SHA-256 has algorithm ECDSAP256SHA256
	Found 1 RRSIGs over DS RRset
	`com.br. 21600 IN RRSIG ( DS 13 2 21600 20210207120509 20210124110509 20940 br. MOEhXt0NV+L0uR/yrFEf+er50kIBc+x5FLnCmS9u1cbC8awZQNNImazaUa9uXDxQPZ69PdPcm0OW SpR3TKeaDg== )`
	RRSIG=20940 and DNSKEY=20940 verifies the DS RRset
	DS=4166/SHA-256 is now in the chain-of-trust
	`com.br. 21600 IN DS ( 4166 13 2 c316cdbd48145cddafe32977cdcc5c50de72bb6f09dcadf20ea165500a2728f7 )`
	Query to e.dns.br for com.br/DNSKEY
	Received 217 bytes from 200.229.248.10
	;; Answer received from 200.229.248.10 (217 bytes) ;; HEADER SECTION ;; id = 38492 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; com.br. IN DNSKEY ;; ANSWER SECTION (2 records) com.br. 21600 IN DNSKEY ( 257 3 13 CzdvGlYbrg3le8BmL817pE+0woEimynijx+b0xsULjJ3/yNUTioGRLVFlF6Z0czJ2H1s3qo2TOdk ZFE+uTYeJw== ) ; Key ID = 4166 com.br. 21600 IN RRSIG ( DNSKEY 13 2 21600 20210209124509 20210126114509 4166 com.br. 4It8/Op8EXbJTjw3lgodFfr46tQ61V+TgjPhSTynCziZkDQ5AB2SyZ1L3IiCS8AAbYfxC4gHOxc5 bVfjyTQXvA== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found 1 DNSKEY records for com.br
	`com.br. 21600 IN DNSKEY ( 257 3 13 CzdvGlYbrg3le8BmL817pE+0woEimynijx+b0xsULjJ3/yNUTioGRLVFlF6Z0czJ2H1s3qo2TOdk ZFE+uTYeJw== ) ; Key ID = 4166`
	DNSKEY=4166/SEP is now in the chain-of-trust
	DS=4166/SHA-256 verifies DNSKEY=4166/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`com.br. 21600 IN RRSIG ( DNSKEY 13 2 21600 20210209124509 20210126114509 4166 com.br. 4It8/Op8EXbJTjw3lgodFfr46tQ61V+TgjPhSTynCziZkDQ5AB2SyZ1L3IiCS8AAbYfxC4gHOxc5 bVfjyTQXvA== )`
	RRSIG=4166 and DNSKEY=4166/SEP verifies the DNSKEY RRset
	Query to e.dns.br for www.uol.com.br/A
	Received 543 bytes from 200.229.248.10
	;; Answer received from 200.229.248.10 (543 bytes) ;; HEADER SECTION ;; id = 18899 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 7 arcount = 4 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; www.uol.com.br. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (7 records) uol.com.br. 3600 IN NS borges.uol.com.br. uol.com.br. 3600 IN NS eliot.uol.com.br. uol.com.br. 3600 IN NS charles.uol.com.br. qdotitdjsg852t547sfmrskqlu96n6oj.com.br. 900 IN NSEC3 ( 1 1 10 6fab79d7c6b65098cf44 qdouscj24s1ckbpgg6htha7vq2aav2h2 NS SOA RRSIG DNSKEY NSEC3PARAM ) qdotitdjsg852t547sfmrskqlu96n6oj.com.br. 900 IN RRSIG ( NSEC3 13 3 900 20210209124509 20210126114509 4166 com.br. LDIDF5tdK1YdK1YuqYSRHJPmjAyeOu+ag7nWmUdI2yLVwf9S7uiZKDp1rovm98PdH2UYKL169qST s1YweXp2Og== ) j8a41p9q04t8n5qdgqdr8898mt21g03p.com.br. 900 IN NSEC3 ( 1 1 10 6fab79d7c6b65098cf44 j8a50ded34kdq1fc7qbhgj84c7obvqov NS DS RRSIG ) j8a41p9q04t8n5qdgqdr8898mt21g03p.com.br. 900 IN RRSIG ( NSEC3 13 3 900 20210205020509 20210122010509 4166 com.br. ccbRdss8GIEesBf90dZpcUE2gim7Kd/Zoq/6IxEvYbV1YBZpXZyIGA4Cu4ASW/GGpXZtd1dqw2R5 65WJ3NVuNA== ) ;; ADDITIONAL SECTION (4 records) charles.uol.com.br. 3600 IN A 200.147.38.8 borges.uol.com.br. 3600 IN A 200.147.255.105 eliot.uol.com.br. 3600 IN A 200.221.11.98 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Query to e.dns.br for uol.com.br/DNSKEY
	Received 533 bytes from 200.229.248.10
	;; Answer received from 200.229.248.10 (533 bytes) ;; HEADER SECTION ;; id = 54805 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 7 arcount = 4 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; uol.com.br. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (7 records) uol.com.br. 3600 IN NS borges.uol.com.br. uol.com.br. 3600 IN NS eliot.uol.com.br. uol.com.br. 3600 IN NS charles.uol.com.br. qdotitdjsg852t547sfmrskqlu96n6oj.com.br. 900 IN NSEC3 ( 1 1 10 6fab79d7c6b65098cf44 qdouscj24s1ckbpgg6htha7vq2aav2h2 NS SOA RRSIG DNSKEY NSEC3PARAM ) qdotitdjsg852t547sfmrskqlu96n6oj.com.br. 900 IN RRSIG ( NSEC3 13 3 900 20210209124509 20210126114509 4166 com.br. LDIDF5tdK1YdK1YuqYSRHJPmjAyeOu+ag7nWmUdI2yLVwf9S7uiZKDp1rovm98PdH2UYKL169qST s1YweXp2Og== ) j8a41p9q04t8n5qdgqdr8898mt21g03p.com.br. 900 IN NSEC3 ( 1 1 10 6fab79d7c6b65098cf44 j8a50ded34kdq1fc7qbhgj84c7obvqov NS DS RRSIG ) j8a41p9q04t8n5qdgqdr8898mt21g03p.com.br. 900 IN RRSIG ( NSEC3 13 3 900 20210205020509 20210122010509 4166 com.br. ccbRdss8GIEesBf90dZpcUE2gim7Kd/Zoq/6IxEvYbV1YBZpXZyIGA4Cu4ASW/GGpXZtd1dqw2R5 65WJ3NVuNA== ) ;; ADDITIONAL SECTION (4 records) charles.uol.com.br. 3600 IN A 200.147.38.8 borges.uol.com.br. 3600 IN A 200.147.255.105 eliot.uol.com.br. 3600 IN A 200.221.11.98 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found child zone uol.com.br

uol.com.br

	Checking DS between com.br and uol.com.br
	Query to b.dns.br for uol.com.br/DS
	Received 590 bytes from 200.189.41.10
	;; Answer received from 200.189.41.10 (590 bytes) ;; HEADER SECTION ;; id = 10064 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 6 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; uol.com.br. IN DS ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (6 records) qdotitdjsg852t547sfmrskqlu96n6oj.com.br. 900 IN NSEC3 ( 1 1 10 6fab79d7c6b65098cf44 qdouscj24s1ckbpgg6htha7vq2aav2h2 NS SOA RRSIG DNSKEY NSEC3PARAM ) qdotitdjsg852t547sfmrskqlu96n6oj.com.br. 900 IN RRSIG ( NSEC3 13 3 900 20210209124509 20210126114509 4166 com.br. LDIDF5tdK1YdK1YuqYSRHJPmjAyeOu+ag7nWmUdI2yLVwf9S7uiZKDp1rovm98PdH2UYKL169qST s1YweXp2Og== ) com.br. 900 IN SOA ( a.dns.br. hostmaster.registro.br. 2021026306 ;serial 1800 ;refresh 900 ;retry 604800 ;expire 900 ;minimum ) com.br. 900 IN RRSIG ( SOA 13 2 172800 20210209124509 20210126114509 4166 com.br. 26W/wGt1jFRlD51W16Sud4ltVYgKGQcdIe5bmXfIqiPxjzquW3URm7hXrRtWh4OxD/oxcYXNqc3s zYxCGPlNBw== ) j8a41p9q04t8n5qdgqdr8898mt21g03p.com.br. 900 IN NSEC3 ( 1 1 10 6fab79d7c6b65098cf44 j8a50ded34kdq1fc7qbhgj84c7obvqov NS DS RRSIG ) j8a41p9q04t8n5qdgqdr8898mt21g03p.com.br. 900 IN RRSIG ( NSEC3 13 3 900 20210205020509 20210122010509 4166 com.br. ccbRdss8GIEesBf90dZpcUE2gim7Kd/Zoq/6IxEvYbV1YBZpXZyIGA4Cu4ASW/GGpXZtd1dqw2R5 65WJ3NVuNA== ) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	No DS records found for uol.com.br in the com.br zone
	Query to borges.uol.com.br for uol.com.br/DNSKEY
	Received 86 bytes from 200.147.255.105
	;; Answer received from 200.147.255.105 (86 bytes) ;; HEADER SECTION ;; id = 62662 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 1 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; uol.com.br. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (1 record) uol.com.br. 900 IN SOA ( eliot.uol.com.br. root.uol.com.br. 2016047023 ;serial 7200 ;refresh 3600 ;retry 432000 ;expire 900 ;minimum ) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	No DNSKEY records found
	Query to borges.uol.com.br for www.uol.com.br/A
	Received 85 bytes from 200.147.255.105
	;; Answer received from 200.147.255.105 (85 bytes) ;; HEADER SECTION ;; id = 17810 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 1 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; www.uol.com.br. IN A ;; ANSWER SECTION (1 record) www.uol.com.br. 60 IN CNAME dftex7xfha8fh.cloudfront.net. ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	uol.com.br is authoritative for www.uol.com.br
	Query to charles.uol.com.br for www.uol.com.br/DNSKEY
	Received 90 bytes from 200.147.38.8
	;; Answer received from 200.147.38.8 (90 bytes) ;; HEADER SECTION ;; id = 22082 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 1 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; www.uol.com.br. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (1 record) uol.com.br. 900 IN SOA ( eliot.uol.com.br. root.uol.com.br. 2016047023 ;serial 7200 ;refresh 3600 ;retry 432000 ;expire 900 ;minimum ) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	www.uol.com.br is a CNAME to dftex7xfha8fh.cloudfront.net
	No RRSIGs found

	Query to i.root-servers.net for dftex7xfha8fh.cloudfront.net/A
	Received 1191 bytes from 192.36.148.17
	;; Answer received from 192.36.148.17 (1191 bytes) ;; HEADER SECTION ;; id = 17163 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 15 arcount = 27 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; dftex7xfha8fh.cloudfront.net. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (15 records) net. 172800 IN NS m.gtld-servers.net. net. 172800 IN NS l.gtld-servers.net. net. 172800 IN NS b.gtld-servers.net. net. 172800 IN NS f.gtld-servers.net. net. 172800 IN NS i.gtld-servers.net. net. 172800 IN NS h.gtld-servers.net. net. 172800 IN NS j.gtld-servers.net. net. 172800 IN NS c.gtld-servers.net. net. 172800 IN NS k.gtld-servers.net. net. 172800 IN NS d.gtld-servers.net. net. 172800 IN NS g.gtld-servers.net. net. 172800 IN NS e.gtld-servers.net. net. 172800 IN NS a.gtld-servers.net. net. 86400 IN DS ( 35886 8 2 7862b27f5f516ebe19680444d4ce5e762981931842c465f00236401d8bd973ee ) net. 86400 IN RRSIG ( DS 8 1 86400 20210208050000 20210126040000 42351 . ZwhWB5yeV8EgdkmPxugW5y9kKrIMhC7DlEMmSrkquZpJMW3Flhb96hervp7/GL0sE8FnRfEtfb6R 8ClnlOamvSHADRUiaUg0a7YB0PO5j55OqKv/hrhigOKVboPXzUbvLJ0YOp83PT/Yt+xd+jM62hgB iSOsJjPHuJcrzYGGMIBPnpR+slTx9EYPZMI/kUxubypnnE3GFwZK4yxWH3aQbn0WxZoo0qkMVYSx 1N5wDHZjX3smwmcBoYHu8kdCjVtEOUU9OCTN9g33lAJe5At37HMgYRYwIap/lJp9hO3gfqSr8GoW xNjk37v3FkUsdrmnHLgZQ9Hxd0B8LRWL13HTWQ== ) ;; ADDITIONAL SECTION (27 records) m.gtld-servers.net. 172800 IN A 192.55.83.30 l.gtld-servers.net. 172800 IN A 192.41.162.30 k.gtld-servers.net. 172800 IN A 192.52.178.30 j.gtld-servers.net. 172800 IN A 192.48.79.30 i.gtld-servers.net. 172800 IN A 192.43.172.30 h.gtld-servers.net. 172800 IN A 192.54.112.30 g.gtld-servers.net. 172800 IN A 192.42.93.30 f.gtld-servers.net. 172800 IN A 192.35.51.30 e.gtld-servers.net. 172800 IN A 192.12.94.30 d.gtld-servers.net. 172800 IN A 192.31.80.30 c.gtld-servers.net. 172800 IN A 192.26.92.30 b.gtld-servers.net. 172800 IN A 192.33.14.30 a.gtld-servers.net. 172800 IN A 192.5.6.30 m.gtld-servers.net. 172800 IN AAAA 2001:501:b1f9::30 l.gtld-servers.net. 172800 IN AAAA 2001:500:d937::30 k.gtld-servers.net. 172800 IN AAAA 2001:503:d2d::30 j.gtld-servers.net. 172800 IN AAAA 2001:502:7094::30 i.gtld-servers.net. 172800 IN AAAA 2001:503:39c1::30 h.gtld-servers.net. 172800 IN AAAA 2001:502:8cc::30 g.gtld-servers.net. 172800 IN AAAA 2001:503:eea3::30 f.gtld-servers.net. 172800 IN AAAA 2001:503:d414::30 e.gtld-servers.net. 172800 IN AAAA 2001:502:1ca1::30 d.gtld-servers.net. 172800 IN AAAA 2001:500:856e::30 c.gtld-servers.net. 172800 IN AAAA 2001:503:83eb::30 b.gtld-servers.net. 172800 IN AAAA 2001:503:231d::2:30 a.gtld-servers.net. 172800 IN AAAA 2001:503:a83e::2:30 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Query to a.root-servers.net for net/DNSKEY
	Received 1160 bytes from 198.41.0.4
	;; Answer received from 198.41.0.4 (1160 bytes) ;; HEADER SECTION ;; id = 10829 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 15 arcount = 27 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; net. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (15 records) net. 172800 IN NS e.gtld-servers.net. net. 172800 IN NS f.gtld-servers.net. net. 172800 IN NS m.gtld-servers.net. net. 172800 IN NS i.gtld-servers.net. net. 172800 IN NS j.gtld-servers.net. net. 172800 IN NS b.gtld-servers.net. net. 172800 IN NS a.gtld-servers.net. net. 172800 IN NS c.gtld-servers.net. net. 172800 IN NS k.gtld-servers.net. net. 172800 IN NS h.gtld-servers.net. net. 172800 IN NS l.gtld-servers.net. net. 172800 IN NS g.gtld-servers.net. net. 172800 IN NS d.gtld-servers.net. net. 86400 IN DS ( 35886 8 2 7862b27f5f516ebe19680444d4ce5e762981931842c465f00236401d8bd973ee ) net. 86400 IN RRSIG ( DS 8 1 86400 20210208050000 20210126040000 42351 . ZwhWB5yeV8EgdkmPxugW5y9kKrIMhC7DlEMmSrkquZpJMW3Flhb96hervp7/GL0sE8FnRfEtfb6R 8ClnlOamvSHADRUiaUg0a7YB0PO5j55OqKv/hrhigOKVboPXzUbvLJ0YOp83PT/Yt+xd+jM62hgB iSOsJjPHuJcrzYGGMIBPnpR+slTx9EYPZMI/kUxubypnnE3GFwZK4yxWH3aQbn0WxZoo0qkMVYSx 1N5wDHZjX3smwmcBoYHu8kdCjVtEOUU9OCTN9g33lAJe5At37HMgYRYwIap/lJp9hO3gfqSr8GoW xNjk37v3FkUsdrmnHLgZQ9Hxd0B8LRWL13HTWQ== ) ;; ADDITIONAL SECTION (27 records) e.gtld-servers.net. 172800 IN A 192.12.94.30 e.gtld-servers.net. 172800 IN AAAA 2001:502:1ca1::30 f.gtld-servers.net. 172800 IN A 192.35.51.30 f.gtld-servers.net. 172800 IN AAAA 2001:503:d414::30 m.gtld-servers.net. 172800 IN A 192.55.83.30 m.gtld-servers.net. 172800 IN AAAA 2001:501:b1f9::30 i.gtld-servers.net. 172800 IN A 192.43.172.30 i.gtld-servers.net. 172800 IN AAAA 2001:503:39c1::30 j.gtld-servers.net. 172800 IN A 192.48.79.30 j.gtld-servers.net. 172800 IN AAAA 2001:502:7094::30 b.gtld-servers.net. 172800 IN A 192.33.14.30 b.gtld-servers.net. 172800 IN AAAA 2001:503:231d::2:30 a.gtld-servers.net. 172800 IN A 192.5.6.30 a.gtld-servers.net. 172800 IN AAAA 2001:503:a83e::2:30 c.gtld-servers.net. 172800 IN A 192.26.92.30 c.gtld-servers.net. 172800 IN AAAA 2001:503:83eb::30 k.gtld-servers.net. 172800 IN A 192.52.178.30 k.gtld-servers.net. 172800 IN AAAA 2001:503:d2d::30 h.gtld-servers.net. 172800 IN A 192.54.112.30 h.gtld-servers.net. 172800 IN AAAA 2001:502:8cc::30 l.gtld-servers.net. 172800 IN A 192.41.162.30 l.gtld-servers.net. 172800 IN AAAA 2001:500:d937::30 g.gtld-servers.net. 172800 IN A 192.42.93.30 g.gtld-servers.net. 172800 IN AAAA 2001:503:eea3::30 d.gtld-servers.net. 172800 IN A 192.31.80.30 d.gtld-servers.net. 172800 IN AAAA 2001:500:856e::30 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found child zone net

net

	Checking DS between . and net
	Query to j.root-servers.net for net/DS
	Received 367 bytes from 192.58.128.30
	;; Answer received from 192.58.128.30 (367 bytes) ;; HEADER SECTION ;; id = 44824 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1472 ;; option: ;; QUESTION SECTION (1 record) ;; net. IN DS ;; ANSWER SECTION (2 records) net. 86400 IN DS ( 35886 8 2 7862b27f5f516ebe19680444d4ce5e762981931842c465f00236401d8bd973ee ) net. 86400 IN RRSIG ( DS 8 1 86400 20210208050000 20210126040000 42351 . ZwhWB5yeV8EgdkmPxugW5y9kKrIMhC7DlEMmSrkquZpJMW3Flhb96hervp7/GL0sE8FnRfEtfb6R 8ClnlOamvSHADRUiaUg0a7YB0PO5j55OqKv/hrhigOKVboPXzUbvLJ0YOp83PT/Yt+xd+jM62hgB iSOsJjPHuJcrzYGGMIBPnpR+slTx9EYPZMI/kUxubypnnE3GFwZK4yxWH3aQbn0WxZoo0qkMVYSx 1N5wDHZjX3smwmcBoYHu8kdCjVtEOUU9OCTN9g33lAJe5At37HMgYRYwIap/lJp9hO3gfqSr8GoW xNjk37v3FkUsdrmnHLgZQ9Hxd0B8LRWL13HTWQ== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1472 ;; option:
	Found 1 DS records for net in the . zone
	DS=35886/SHA-256 has algorithm RSASHA256
	Found 1 RRSIGs over DS RRset
	`net. 86400 IN RRSIG ( DS 8 1 86400 20210208050000 20210126040000 42351 . ZwhWB5yeV8EgdkmPxugW5y9kKrIMhC7DlEMmSrkquZpJMW3Flhb96hervp7/GL0sE8FnRfEtfb6R 8ClnlOamvSHADRUiaUg0a7YB0PO5j55OqKv/hrhigOKVboPXzUbvLJ0YOp83PT/Yt+xd+jM62hgB iSOsJjPHuJcrzYGGMIBPnpR+slTx9EYPZMI/kUxubypnnE3GFwZK4yxWH3aQbn0WxZoo0qkMVYSx 1N5wDHZjX3smwmcBoYHu8kdCjVtEOUU9OCTN9g33lAJe5At37HMgYRYwIap/lJp9hO3gfqSr8GoW xNjk37v3FkUsdrmnHLgZQ9Hxd0B8LRWL13HTWQ== )`
	RRSIG=42351 and DNSKEY=42351 verifies the DS RRset
	DS=35886/SHA-256 is now in the chain-of-trust
	`net. 86400 IN DS ( 35886 8 2 7862b27f5f516ebe19680444d4ce5e762981931842c465f00236401d8bd973ee )`
	Query to c.gtld-servers.net for net/DNSKEY
	Received 775 bytes from 192.26.92.30
	;; Answer received from 192.26.92.30 (775 bytes) ;; HEADER SECTION ;; id = 17481 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; net. IN DNSKEY ;; ANSWER SECTION (3 records) net. 86400 IN DNSKEY ( 257 3 8 AQOYBnzqWXIEj6mlgXg4LWC0HP2n8eK8XqgHlmJ/69iuIHsa1TrHDG6TcOra/pyeGKwH0nKZhTmX SuUFGh9BCNiwVDuyyb6OBGy2Nte9Kr8NwWg4q+zhSoOf4D+gC9dEzg0yFdwT0DKEvmNPt0K4jbQD S4Yimb+uPKuF6yieWWrPYYCrv8C9KC8JMze2uT6NuWBfsl2fDUoV4l65qMww06D7n+p7RbdwWkAZ 0fA63mXVXBZF6kpDtsYD7SUB9jhhfLQE/r85bvg3FaSs5Wi2BaqN06SzGWI1DHu7axthIOeHwg00 zxlhTpoYCH0ldoQz+S65zWYi/fRJiyLSBb6JZOvn ) ; Key ID = 35886 net. 86400 IN DNSKEY ( 256 3 8 AQO3ZB3ZsOinKfuX7U5vTo8/x4DnLpamAurL/87RhyK3vifJv688ky3tvtknBUkGmVS1Gf477JMa qHo8ZXImJwQR+TbkpCAgo60qF0I6NIdJS0PQ35if3D1KeQ3EbZDVJ+puQh3mGjkssXWE+1qa1vbY 6M8gT4cW+iIeLKGt5ieAbUTbp1Pvx0PZGLkL7wDOu4vqwuIslm1g2brrrHaLSp25 ) ; Key ID = 30944 net. 86400 IN RRSIG ( DNSKEY 8 1 86400 20210203172830 20210119172330 35886 net. EtqYRGnOcwkbhRHmxo3zdku9C0wKjycnnLnLc794zPIJhnkw2rmMO0Ym3wo2qQ072bSLiG2unbr+ UqenfQoV3nz847QvKPx3Hdw0e4p6UBROs3uZ80RlACpb5mdgyx/ieErFpGUtSHd0aOjtUzeSzzxK h8efeZa+vx0/SOJvo/xQ1a/+7pEUQPzq1sTljq1MUtKwNgto3zoUnDI+tZ1tD6i9BkoXxLWXfQCw gL5wgXmsMJNY8K0h5v5YetVuNq+jbEsqUtUVRWszZ+3G3NOs4Kq121DIlKpJoY4Z2Ibjg4VInNwG Qj/HzH0xfoX+F++gt0H6RhilQg4OaiKd9U2Uhw== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found 2 DNSKEY records for net
	`net. 86400 IN DNSKEY ( 257 3 8 AQOYBnzqWXIEj6mlgXg4LWC0HP2n8eK8XqgHlmJ/69iuIHsa1TrHDG6TcOra/pyeGKwH0nKZhTmX SuUFGh9BCNiwVDuyyb6OBGy2Nte9Kr8NwWg4q+zhSoOf4D+gC9dEzg0yFdwT0DKEvmNPt0K4jbQD S4Yimb+uPKuF6yieWWrPYYCrv8C9KC8JMze2uT6NuWBfsl2fDUoV4l65qMww06D7n+p7RbdwWkAZ 0fA63mXVXBZF6kpDtsYD7SUB9jhhfLQE/r85bvg3FaSs5Wi2BaqN06SzGWI1DHu7axthIOeHwg00 zxlhTpoYCH0ldoQz+S65zWYi/fRJiyLSBb6JZOvn ) ; Key ID = 35886`
	`net. 86400 IN DNSKEY ( 256 3 8 AQO3ZB3ZsOinKfuX7U5vTo8/x4DnLpamAurL/87RhyK3vifJv688ky3tvtknBUkGmVS1Gf477JMa qHo8ZXImJwQR+TbkpCAgo60qF0I6NIdJS0PQ35if3D1KeQ3EbZDVJ+puQh3mGjkssXWE+1qa1vbY 6M8gT4cW+iIeLKGt5ieAbUTbp1Pvx0PZGLkL7wDOu4vqwuIslm1g2brrrHaLSp25 ) ; Key ID = 30944`
	DNSKEY=35886/SEP is now in the chain-of-trust
	DS=35886/SHA-256 verifies DNSKEY=35886/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`net. 86400 IN RRSIG ( DNSKEY 8 1 86400 20210203172830 20210119172330 35886 net. EtqYRGnOcwkbhRHmxo3zdku9C0wKjycnnLnLc794zPIJhnkw2rmMO0Ym3wo2qQ072bSLiG2unbr+ UqenfQoV3nz847QvKPx3Hdw0e4p6UBROs3uZ80RlACpb5mdgyx/ieErFpGUtSHd0aOjtUzeSzzxK h8efeZa+vx0/SOJvo/xQ1a/+7pEUQPzq1sTljq1MUtKwNgto3zoUnDI+tZ1tD6i9BkoXxLWXfQCw gL5wgXmsMJNY8K0h5v5YetVuNq+jbEsqUtUVRWszZ+3G3NOs4Kq121DIlKpJoY4Z2Ibjg4VInNwG Qj/HzH0xfoX+F++gt0H6RhilQg4OaiKd9U2Uhw== )`
	RRSIG=35886 and DNSKEY=35886/SEP verifies the DNSKEY RRset
	DNSKEY=30944 is now in the chain-of-trust
	Query to d.gtld-servers.net for dftex7xfha8fh.cloudfront.net/A
	Received 759 bytes from 192.31.80.30
	;; Answer received from 192.31.80.30 (759 bytes) ;; HEADER SECTION ;; id = 36342 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 8 arcount = 2 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; dftex7xfha8fh.cloudfront.net. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (8 records) cloudfront.net. 172800 IN NS ns-666.awsdns-19.net. cloudfront.net. 172800 IN NS ns-418.awsdns-52.com. cloudfront.net. 172800 IN NS ns-1597.awsdns-07.co.uk. cloudfront.net. 172800 IN NS ns-1306.awsdns-35.org. A1RT98BS5QGC9NFI51S9HCI47ULJG6JH.net. 86400 IN NSEC3 ( 1 1 0 - a1ruuffjkct2q54p78f8ejgj8jbk7i8b NS SOA RRSIG DNSKEY NSEC3PARAM ) A1RT98BS5QGC9NFI51S9HCI47ULJG6JH.net. 86400 IN RRSIG ( NSEC3 8 2 86400 20210201084426 20210125073426 30944 net. AEV3xWFevulpR1PUmMuXCHmbYFnYkLORnG+eyB4Jn5g4miXLbDVgqjGo6Sr1KLArznHmmmiLkzvB fpkItSVtkSq5kn5W3vs6kF8lqK4qnko0qNaPesttR4IuYTvb21ZpnXxEgLa6VCY8WL6zZnfNPR7F s0G8rcgaAFqpl6uny+lWjc7uCVxIMo4PmzKqBUw2BhOi/PzcH+y/IrNudu+fWA== ) FADE6S6MDABDC65F1RVT5GEBPRL23T3I.net. 86400 IN NSEC3 ( 1 1 0 - fadgoj3kk8saql4te1npvm0esegd5pm5 NS DS RRSIG ) FADE6S6MDABDC65F1RVT5GEBPRL23T3I.net. 86400 IN RRSIG ( NSEC3 8 2 86400 20210202084029 20210126073029 30944 net. VmCJWAMDdsZfQHiTTLHxGkYuS9QP7iM9UEd5VUcYOwWYYofLvaoiDHUhcAVqG4H5ZYo7zHdB7Hqf jBFWgiU5Ay6kdi8jv4EdVZZwHxG7QtExbQFCZGVnRNYLwNp5IxPifzvKBkkv95IXkJATZDvEhsXF YB6eqtCCj0UFuMlIGuJP6xFak/9uJNlYq+zmvdb0qbYjenN+2Uy4Ozpdt/X9KQ== ) ;; ADDITIONAL SECTION (2 records) ns-666.awsdns-19.net. 172800 IN A 205.251.194.154 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Query to d.gtld-servers.net for cloudfront.net/DNSKEY
	Received 745 bytes from 192.31.80.30
	;; Answer received from 192.31.80.30 (745 bytes) ;; HEADER SECTION ;; id = 42896 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 8 arcount = 2 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; cloudfront.net. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (8 records) cloudfront.net. 172800 IN NS ns-666.awsdns-19.net. cloudfront.net. 172800 IN NS ns-418.awsdns-52.com. cloudfront.net. 172800 IN NS ns-1597.awsdns-07.co.uk. cloudfront.net. 172800 IN NS ns-1306.awsdns-35.org. A1RT98BS5QGC9NFI51S9HCI47ULJG6JH.net. 86400 IN NSEC3 ( 1 1 0 - a1ruuffjkct2q54p78f8ejgj8jbk7i8b NS SOA RRSIG DNSKEY NSEC3PARAM ) A1RT98BS5QGC9NFI51S9HCI47ULJG6JH.net. 86400 IN RRSIG ( NSEC3 8 2 86400 20210201084426 20210125073426 30944 net. AEV3xWFevulpR1PUmMuXCHmbYFnYkLORnG+eyB4Jn5g4miXLbDVgqjGo6Sr1KLArznHmmmiLkzvB fpkItSVtkSq5kn5W3vs6kF8lqK4qnko0qNaPesttR4IuYTvb21ZpnXxEgLa6VCY8WL6zZnfNPR7F s0G8rcgaAFqpl6uny+lWjc7uCVxIMo4PmzKqBUw2BhOi/PzcH+y/IrNudu+fWA== ) FADE6S6MDABDC65F1RVT5GEBPRL23T3I.net. 86400 IN NSEC3 ( 1 1 0 - fadgoj3kk8saql4te1npvm0esegd5pm5 NS DS RRSIG ) FADE6S6MDABDC65F1RVT5GEBPRL23T3I.net. 86400 IN RRSIG ( NSEC3 8 2 86400 20210202084029 20210126073029 30944 net. VmCJWAMDdsZfQHiTTLHxGkYuS9QP7iM9UEd5VUcYOwWYYofLvaoiDHUhcAVqG4H5ZYo7zHdB7Hqf jBFWgiU5Ay6kdi8jv4EdVZZwHxG7QtExbQFCZGVnRNYLwNp5IxPifzvKBkkv95IXkJATZDvEhsXF YB6eqtCCj0UFuMlIGuJP6xFak/9uJNlYq+zmvdb0qbYjenN+2Uy4Ozpdt/X9KQ== ) ;; ADDITIONAL SECTION (2 records) ns-666.awsdns-19.net. 172800 IN A 205.251.194.154 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found child zone cloudfront.net

cloudfront.net

	Checking DS between net and cloudfront.net
	Query to c.gtld-servers.net for cloudfront.net/DS
	Received 860 bytes from 192.26.92.30
	;; Answer received from 192.26.92.30 (860 bytes) ;; HEADER SECTION ;; id = 51417 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 6 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; cloudfront.net. IN DS ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (6 records) A1RT98BS5QGC9NFI51S9HCI47ULJG6JH.net. 86400 IN NSEC3 ( 1 1 0 - a1ruuffjkct2q54p78f8ejgj8jbk7i8b NS SOA RRSIG DNSKEY NSEC3PARAM ) A1RT98BS5QGC9NFI51S9HCI47ULJG6JH.net. 86400 IN RRSIG ( NSEC3 8 2 86400 20210201084426 20210125073426 30944 net. AEV3xWFevulpR1PUmMuXCHmbYFnYkLORnG+eyB4Jn5g4miXLbDVgqjGo6Sr1KLArznHmmmiLkzvB fpkItSVtkSq5kn5W3vs6kF8lqK4qnko0qNaPesttR4IuYTvb21ZpnXxEgLa6VCY8WL6zZnfNPR7F s0G8rcgaAFqpl6uny+lWjc7uCVxIMo4PmzKqBUw2BhOi/PzcH+y/IrNudu+fWA== ) net. 900 IN SOA ( a.gtld-servers.net. nstld.verisign-grs.com. 1611665289 ;serial 1800 ;refresh 900 ;retry 604800 ;expire 86400 ;minimum ) net. 900 IN RRSIG ( SOA 8 1 900 20210202124809 20210126113809 30944 net. erHsbfSkQEDjrrvBl5UVgBGjSI1V2kuZiEkkWypLWDJH3qwoljy0CIkN+gnqQcWHCWXOpK0/LGZq fd38bGTHs8Rdm989NJnvI6R9Stz/08wcqJo4nST3mcIdVc0yr/pdjJj5+zV21hNe7Nqiol9pd8Yz rdWNMxUYmfkeSmyHRlli5bR3c1vzns1bW3QmFu/8t0BMJbENlEkKqbXz0CR2+A== ) FADE6S6MDABDC65F1RVT5GEBPRL23T3I.net. 86400 IN NSEC3 ( 1 1 0 - fadgoj3kk8saql4te1npvm0esegd5pm5 NS DS RRSIG ) FADE6S6MDABDC65F1RVT5GEBPRL23T3I.net. 86400 IN RRSIG ( NSEC3 8 2 86400 20210202084029 20210126073029 30944 net. VmCJWAMDdsZfQHiTTLHxGkYuS9QP7iM9UEd5VUcYOwWYYofLvaoiDHUhcAVqG4H5ZYo7zHdB7Hqf jBFWgiU5Ay6kdi8jv4EdVZZwHxG7QtExbQFCZGVnRNYLwNp5IxPifzvKBkkv95IXkJATZDvEhsXF YB6eqtCCj0UFuMlIGuJP6xFak/9uJNlYq+zmvdb0qbYjenN+2Uy4Ozpdt/X9KQ== ) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	No DS records found for cloudfront.net in the net zone
	Query to ns-1306.awsdns-35.org for cloudfront.net/DNSKEY
	Received 110 bytes from 205.251.197.26
	;; Answer received from 205.251.197.26 (110 bytes) ;; HEADER SECTION ;; id = 38223 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 1 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 1 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; cloudfront.net. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (1 record) cloudfront.net. 60 IN SOA ( ns-418.awsdns-52.com. hostmaster.cloudfront.net. 1377556270 ;serial 16384 ;refresh 2048 ;retry 1048576 ;expire 60 ;minimum ) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	No DNSKEY records found
	Query to ns-418.awsdns-52.com for dftex7xfha8fh.cloudfront.net/A
	Received 194 bytes from 205.251.193.162
	;; Answer received from 205.251.193.162 (194 bytes) ;; HEADER SECTION ;; id = 60506 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 1 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 4 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; dftex7xfha8fh.cloudfront.net. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (4 records) dftex7xfha8fh.cloudfront.net. 1831 IN NS ns-1021.awsdns-63.net. dftex7xfha8fh.cloudfront.net. 1831 IN NS ns-1434.awsdns-51.org. dftex7xfha8fh.cloudfront.net. 1831 IN NS ns-1917.awsdns-47.co.uk. dftex7xfha8fh.cloudfront.net. 1831 IN NS ns-47.awsdns-05.com. ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Query to ns-1306.awsdns-35.org for dftex7xfha8fh.cloudfront.net/DNSKEY
	Received 194 bytes from 205.251.197.26
	;; Answer received from 205.251.197.26 (194 bytes) ;; HEADER SECTION ;; id = 18048 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 1 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 4 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; dftex7xfha8fh.cloudfront.net. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (4 records) dftex7xfha8fh.cloudfront.net. 1831 IN NS ns-1021.awsdns-63.net. dftex7xfha8fh.cloudfront.net. 1831 IN NS ns-1434.awsdns-51.org. dftex7xfha8fh.cloudfront.net. 1831 IN NS ns-1917.awsdns-47.co.uk. dftex7xfha8fh.cloudfront.net. 1831 IN NS ns-47.awsdns-05.com. ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found child zone dftex7xfha8fh.cloudfront.net

dftex7xfha8fh.cloudfront.net

	Checking DS between cloudfront.net and dftex7xfha8fh.cloudfront.net
	Query to ns-1597.awsdns-07.co.uk for dftex7xfha8fh.cloudfront.net/DS
	Received 124 bytes from 205.251.198.61
	;; Answer received from 205.251.198.61 (124 bytes) ;; HEADER SECTION ;; id = 26042 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 1 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 1 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; dftex7xfha8fh.cloudfront.net. IN DS ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (1 record) cloudfront.net. 60 IN SOA ( ns-418.awsdns-52.com. hostmaster.cloudfront.net. 1377556270 ;serial 16384 ;refresh 2048 ;retry 1048576 ;expire 60 ;minimum ) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	No DS records found for dftex7xfha8fh.cloudfront.net in the cloudfront.net zone
	Query to ns-47.awsdns-05.com for dftex7xfha8fh.cloudfront.net/DNSKEY
	Received 137 bytes from 205.251.192.47
	;; Answer received from 205.251.192.47 (137 bytes) ;; HEADER SECTION ;; id = 37430 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 1 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 1 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; dftex7xfha8fh.cloudfront.net. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (1 record) dftex7xfha8fh.cloudfront.net. 60 IN SOA ( ns-47.awsdns-05.com. awsdns-hostmaster.amazon.com. 1 ;serial 7200 ;refresh 900 ;retry 1209600 ;expire 86400 ;minimum ) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	No DNSKEY records found
	Query to ns-1434.awsdns-51.org for dftex7xfha8fh.cloudfront.net/A
	Received 258 bytes from 205.251.197.154
	;; Answer received from 205.251.197.154 (258 bytes) ;; HEADER SECTION ;; id = 54352 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 1 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 4 nscount = 4 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; dftex7xfha8fh.cloudfront.net. IN A ;; ANSWER SECTION (4 records) dftex7xfha8fh.cloudfront.net. 60 IN A 54.239.152.25 dftex7xfha8fh.cloudfront.net. 60 IN A 54.239.152.37 dftex7xfha8fh.cloudfront.net. 60 IN A 54.239.152.111 dftex7xfha8fh.cloudfront.net. 60 IN A 54.239.152.117 ;; AUTHORITY SECTION (4 records) dftex7xfha8fh.cloudfront.net. 172800 IN NS ns-1021.awsdns-63.net. dftex7xfha8fh.cloudfront.net. 172800 IN NS ns-1434.awsdns-51.org. dftex7xfha8fh.cloudfront.net. 172800 IN NS ns-1917.awsdns-47.co.uk. dftex7xfha8fh.cloudfront.net. 172800 IN NS ns-47.awsdns-05.com. ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	dftex7xfha8fh.cloudfront.net is authoritative for dftex7xfha8fh.cloudfront.net
	Query to ns-1917.awsdns-47.co.uk for dftex7xfha8fh.cloudfront.net/SOA
	Received 255 bytes from 205.251.199.125
	;; Answer received from 205.251.199.125 (255 bytes) ;; HEADER SECTION ;; id = 64373 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 1 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 1 nscount = 4 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; dftex7xfha8fh.cloudfront.net. IN SOA ;; ANSWER SECTION (1 record) dftex7xfha8fh.cloudfront.net. 60 IN SOA ( ns-47.awsdns-05.com. awsdns-hostmaster.amazon.com. 1 ;serial 7200 ;refresh 900 ;retry 1209600 ;expire 86400 ;minimum ) ;; AUTHORITY SECTION (4 records) dftex7xfha8fh.cloudfront.net. 172800 IN NS ns-1021.awsdns-63.net. dftex7xfha8fh.cloudfront.net. 172800 IN NS ns-1434.awsdns-51.org. dftex7xfha8fh.cloudfront.net. 172800 IN NS ns-1917.awsdns-47.co.uk. dftex7xfha8fh.cloudfront.net. 172800 IN NS ns-47.awsdns-05.com. ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Query to ns-1021.awsdns-63.net for dftex7xfha8fh.cloudfront.net/SOA
	Received 255 bytes from 205.251.195.253
	;; Answer received from 205.251.195.253 (255 bytes) ;; HEADER SECTION ;; id = 16805 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 1 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 1 nscount = 4 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; dftex7xfha8fh.cloudfront.net. IN SOA ;; ANSWER SECTION (1 record) dftex7xfha8fh.cloudfront.net. 60 IN SOA ( ns-47.awsdns-05.com. awsdns-hostmaster.amazon.com. 1 ;serial 7200 ;refresh 900 ;retry 1209600 ;expire 86400 ;minimum ) ;; AUTHORITY SECTION (4 records) dftex7xfha8fh.cloudfront.net. 172800 IN NS ns-1021.awsdns-63.net. dftex7xfha8fh.cloudfront.net. 172800 IN NS ns-1434.awsdns-51.org. dftex7xfha8fh.cloudfront.net. 172800 IN NS ns-1917.awsdns-47.co.uk. dftex7xfha8fh.cloudfront.net. 172800 IN NS ns-47.awsdns-05.com. ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Query to ns-47.awsdns-05.com for dftex7xfha8fh.cloudfront.net/SOA
	Received 255 bytes from 205.251.192.47
	;; Answer received from 205.251.192.47 (255 bytes) ;; HEADER SECTION ;; id = 11963 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 1 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 1 nscount = 4 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; dftex7xfha8fh.cloudfront.net. IN SOA ;; ANSWER SECTION (1 record) dftex7xfha8fh.cloudfront.net. 60 IN SOA ( ns-47.awsdns-05.com. awsdns-hostmaster.amazon.com. 1 ;serial 7200 ;refresh 900 ;retry 1209600 ;expire 86400 ;minimum ) ;; AUTHORITY SECTION (4 records) dftex7xfha8fh.cloudfront.net. 172800 IN NS ns-1021.awsdns-63.net. dftex7xfha8fh.cloudfront.net. 172800 IN NS ns-1434.awsdns-51.org. dftex7xfha8fh.cloudfront.net. 172800 IN NS ns-1917.awsdns-47.co.uk. dftex7xfha8fh.cloudfront.net. 172800 IN NS ns-47.awsdns-05.com. ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Query to ns-1434.awsdns-51.org for dftex7xfha8fh.cloudfront.net/SOA
	Received 255 bytes from 205.251.197.154
	;; Answer received from 205.251.197.154 (255 bytes) ;; HEADER SECTION ;; id = 56664 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 1 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 1 nscount = 4 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; dftex7xfha8fh.cloudfront.net. IN SOA ;; ANSWER SECTION (1 record) dftex7xfha8fh.cloudfront.net. 60 IN SOA ( ns-47.awsdns-05.com. awsdns-hostmaster.amazon.com. 1 ;serial 7200 ;refresh 900 ;retry 1209600 ;expire 86400 ;minimum ) ;; AUTHORITY SECTION (4 records) dftex7xfha8fh.cloudfront.net. 172800 IN NS ns-1021.awsdns-63.net. dftex7xfha8fh.cloudfront.net. 172800 IN NS ns-1434.awsdns-51.org. dftex7xfha8fh.cloudfront.net. 172800 IN NS ns-1917.awsdns-47.co.uk. dftex7xfha8fh.cloudfront.net. 172800 IN NS ns-47.awsdns-05.com. ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Query to ns-1434.awsdns-51.org for dftex7xfha8fh.cloudfront.net/A
	Received 258 bytes from 205.251.197.154
	;; Answer received from 205.251.197.154 (258 bytes) ;; HEADER SECTION ;; id = 40613 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 1 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 4 nscount = 4 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; dftex7xfha8fh.cloudfront.net. IN A ;; ANSWER SECTION (4 records) dftex7xfha8fh.cloudfront.net. 60 IN A 54.239.152.111 dftex7xfha8fh.cloudfront.net. 60 IN A 54.239.152.117 dftex7xfha8fh.cloudfront.net. 60 IN A 54.239.152.37 dftex7xfha8fh.cloudfront.net. 60 IN A 54.239.152.25 ;; AUTHORITY SECTION (4 records) dftex7xfha8fh.cloudfront.net. 172800 IN NS ns-1021.awsdns-63.net. dftex7xfha8fh.cloudfront.net. 172800 IN NS ns-1434.awsdns-51.org. dftex7xfha8fh.cloudfront.net. 172800 IN NS ns-1917.awsdns-47.co.uk. dftex7xfha8fh.cloudfront.net. 172800 IN NS ns-47.awsdns-05.com. ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	dftex7xfha8fh.cloudfront.net A RR has value 54.239.152.111
	dftex7xfha8fh.cloudfront.net A RR has value 54.239.152.117
	dftex7xfha8fh.cloudfront.net A RR has value 54.239.152.37
	dftex7xfha8fh.cloudfront.net A RR has value 54.239.152.25
	No RRSIGs found

Move your mouse over any or symbols for remediation hints.

Want a second opinion? Test www.uol.com.br at dnsviz.net.

DNSSEC Analyzer

↓ Advanced options ↑ Advanced options

Trust Anchor:
Name Servers: