DNSSEC Analyzer - IDTHEFT.GOV

Domain Name:

Time: 2020-08-14 01:56:06 UTC, NTP stratum 4

Analyzing DNSSEC problems for IDTHEFT.GOV

DS=20326/SHA-256 is now in the chain-of-trust

	Checking DS between Trust Anchor and .
	`. IN DS ( 20326 8 2 e06d44b80b8f1d39a95c0b0d7c65d08458e880409bbc683457104237c7f8ec8d )`
	Query to j.root-servers.net for ./DNSKEY
	Received 864 bytes from 192.58.128.30
	;; Answer received from 192.58.128.30 (864 bytes) ;; HEADER SECTION ;; id = 44831 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; . IN DNSKEY ;; ANSWER SECTION (3 records) . 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; Key ID = 20326 . 172800 IN DNSKEY ( 256 3 8 AwEAAdauOGxLhfAKFTTZwGhBXbk793QKdWIQRjiSftWdusCwkPhNyJrIjwtNffCWXGLlZAbpcs41 4RE3oS1qVwV+AdXsO92SBu5haGlxMUk0NqZO7Xlf84/wrzGZVRRouPo5pNX/CKS8Mv9UOi0olKGC u31dNfh8qCszWZcloLDgeLzSnQSkvFoGe69vNCfh7feESKedkBC2qRz0BZv9+oJI0IY/3D7WEnV0 NOlf8gSHozhfJFJ/ZAKtvw/Q3ogrVJFk0LyVaU/NVtVA5FM4pVMIRID7pfrPi78aAzG7b/Wh/Pce 4jPAIpS3dApq25YkvMuPvfB91NMf9FemKwlp78PBVcM= ) ; Key ID = 46594 . 172800 IN RRSIG ( DNSKEY 8 0 172800 20200831000000 20200810000000 20326 . FyZ8LAbEV4Jbpm2/xcE8wZu+OSatuV+1xEbRaRLfTWsjvtrPnrKZTW7cnn1yphgDD9fSHA7gAA0c tS85lRSBxr24Du7Sh+KCaGKKbs3EnSIoTzMXK0mnSVJYL3yHOyofxXe/z3ZDAaBqOGQR2wkhEKih UhNJmPEaPDXUeOr0JwYgQRoEf6PdHXld7fBC1DjiEMhHA9sXsriuG3oLUxgJdZ1fslynQjTky769 ywLkpTF/IuX2nnko+RomXuBospuQdNcXaUi1ymfTE2i3xGbEvRZYGSI4DRbxvUK4u8Lu2rNJmXct vRsBvwcuWpIL182DkbGgsDdsarVRLtobfOwMGg== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found 2 DNSKEY records for .
	`. 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; Key ID = 20326`
	`. 172800 IN DNSKEY ( 256 3 8 AwEAAdauOGxLhfAKFTTZwGhBXbk793QKdWIQRjiSftWdusCwkPhNyJrIjwtNffCWXGLlZAbpcs41 4RE3oS1qVwV+AdXsO92SBu5haGlxMUk0NqZO7Xlf84/wrzGZVRRouPo5pNX/CKS8Mv9UOi0olKGC u31dNfh8qCszWZcloLDgeLzSnQSkvFoGe69vNCfh7feESKedkBC2qRz0BZv9+oJI0IY/3D7WEnV0 NOlf8gSHozhfJFJ/ZAKtvw/Q3ogrVJFk0LyVaU/NVtVA5FM4pVMIRID7pfrPi78aAzG7b/Wh/Pce 4jPAIpS3dApq25YkvMuPvfB91NMf9FemKwlp78PBVcM= ) ; Key ID = 46594`
	DNSKEY=20326/SEP is now in the chain-of-trust
	DS=20326/SHA-256 verifies DNSKEY=20326/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`. 172800 IN RRSIG ( DNSKEY 8 0 172800 20200831000000 20200810000000 20326 . FyZ8LAbEV4Jbpm2/xcE8wZu+OSatuV+1xEbRaRLfTWsjvtrPnrKZTW7cnn1yphgDD9fSHA7gAA0c tS85lRSBxr24Du7Sh+KCaGKKbs3EnSIoTzMXK0mnSVJYL3yHOyofxXe/z3ZDAaBqOGQR2wkhEKih UhNJmPEaPDXUeOr0JwYgQRoEf6PdHXld7fBC1DjiEMhHA9sXsriuG3oLUxgJdZ1fslynQjTky769 ywLkpTF/IuX2nnko+RomXuBospuQdNcXaUi1ymfTE2i3xGbEvRZYGSI4DRbxvUK4u8Lu2rNJmXct vRsBvwcuWpIL182DkbGgsDdsarVRLtobfOwMGg== )`
	RRSIG=20326 and DNSKEY=20326/SEP verifies the DNSKEY RRset
	DNSKEY=46594 is now in the chain-of-trust
	Query to g.root-servers.net for IDTHEFT.GOV/A
	Received 669 bytes from 192.112.36.4
	;; Answer received from 192.112.36.4 (669 bytes) ;; HEADER SECTION ;; id = 53880 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 7 arcount = 9 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; IDTHEFT.GOV. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (7 records) gov. 172800 IN NS d.gov-servers.net. gov. 172800 IN NS b.gov-servers.net. gov. 172800 IN NS a.gov-servers.net. gov. 172800 IN NS c.gov-servers.net. gov. 86400 IN DS ( 7698 8 2 6bc949e638442ead0bdaf0935763c8d003760384ff15ebbd5ce86bb5559561f0 ) gov. 86400 IN DS 7698 8 1 6f109b46a80cea9613dc86d5a3e065520505aafe gov. 86400 IN RRSIG ( DS 8 1 86400 20200826200000 20200813190000 46594 . FRfeY/XKEq1xDgm7tlZEUYpeRhwAky7dEzF6l86g+6ixxzFqwVYLNiI5+P7K/DBhzlr2oo2+4uIj Xo7VOn8hJX+gd4jB1BI0ctZib5T1+lh7qaCkEqsUrKFd8CTzo9f0/c4Z2MqVIT5iAwQM/YNv87tA PxulqbYLB0S5KRi0w0ZTxkdEB5ZDKXzw5hGWmwRjhRuSXDfZPOh6OW2HNnaX2LM2HLmsk55n7SuK MpeDm9T0yEb7ZqCqPJFOpeUhKekPa9CcjGKDFmJ4pghYYxCxDzXvTvWIfnfaDN8/cbCMB+TeM2Vj VWDS0hlJvLGQkQ20anheeEreU6vuPp9Wvfw9Jw== ) ;; ADDITIONAL SECTION (9 records) a.gov-servers.net. 172800 IN A 69.36.157.30 b.gov-servers.net. 172800 IN A 209.112.123.30 c.gov-servers.net. 172800 IN A 69.36.153.30 d.gov-servers.net. 172800 IN A 81.19.194.30 a.gov-servers.net. 172800 IN AAAA 2001:500:4431::2:30 b.gov-servers.net. 172800 IN AAAA 2620:74:27::2:30 c.gov-servers.net. 172800 IN AAAA 2620:74:28::2:30 d.gov-servers.net. 172800 IN AAAA 2620:74:29::2:30 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Query to k.root-servers.net for GOV/DNSKEY
	Received 658 bytes from 193.0.14.129
	;; Answer received from 193.0.14.129 (658 bytes) ;; HEADER SECTION ;; id = 50149 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 7 arcount = 9 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; GOV. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (7 records) GOV. 172800 IN NS a.gov-servers.net. GOV. 172800 IN NS b.gov-servers.net. GOV. 172800 IN NS c.gov-servers.net. GOV. 172800 IN NS d.gov-servers.net. GOV. 86400 IN DS 7698 8 1 6f109b46a80cea9613dc86d5a3e065520505aafe GOV. 86400 IN DS ( 7698 8 2 6bc949e638442ead0bdaf0935763c8d003760384ff15ebbd5ce86bb5559561f0 ) GOV. 86400 IN RRSIG ( DS 8 1 86400 20200826200000 20200813190000 46594 . FRfeY/XKEq1xDgm7tlZEUYpeRhwAky7dEzF6l86g+6ixxzFqwVYLNiI5+P7K/DBhzlr2oo2+4uIj Xo7VOn8hJX+gd4jB1BI0ctZib5T1+lh7qaCkEqsUrKFd8CTzo9f0/c4Z2MqVIT5iAwQM/YNv87tA PxulqbYLB0S5KRi0w0ZTxkdEB5ZDKXzw5hGWmwRjhRuSXDfZPOh6OW2HNnaX2LM2HLmsk55n7SuK MpeDm9T0yEb7ZqCqPJFOpeUhKekPa9CcjGKDFmJ4pghYYxCxDzXvTvWIfnfaDN8/cbCMB+TeM2Vj VWDS0hlJvLGQkQ20anheeEreU6vuPp9Wvfw9Jw== ) ;; ADDITIONAL SECTION (9 records) a.gov-servers.net. 172800 IN A 69.36.157.30 b.gov-servers.net. 172800 IN A 209.112.123.30 c.gov-servers.net. 172800 IN A 69.36.153.30 d.gov-servers.net. 172800 IN A 81.19.194.30 a.gov-servers.net. 172800 IN AAAA 2001:500:4431::2:30 b.gov-servers.net. 172800 IN AAAA 2620:74:27::2:30 c.gov-servers.net. 172800 IN AAAA 2620:74:28::2:30 d.gov-servers.net. 172800 IN AAAA 2620:74:29::2:30 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found child zone GOV

GOV

	Checking DS between . and GOV
	Query to g.root-servers.net for GOV/DS
	Received 406 bytes from 192.112.36.4
	;; Answer received from 192.112.36.4 (406 bytes) ;; HEADER SECTION ;; id = 2829 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; GOV. IN DS ;; ANSWER SECTION (3 records) gov. 86400 IN DS ( 7698 8 2 6bc949e638442ead0bdaf0935763c8d003760384ff15ebbd5ce86bb5559561f0 ) gov. 86400 IN DS 7698 8 1 6f109b46a80cea9613dc86d5a3e065520505aafe gov. 86400 IN RRSIG ( DS 8 1 86400 20200826200000 20200813190000 46594 . FRfeY/XKEq1xDgm7tlZEUYpeRhwAky7dEzF6l86g+6ixxzFqwVYLNiI5+P7K/DBhzlr2oo2+4uIj Xo7VOn8hJX+gd4jB1BI0ctZib5T1+lh7qaCkEqsUrKFd8CTzo9f0/c4Z2MqVIT5iAwQM/YNv87tA PxulqbYLB0S5KRi0w0ZTxkdEB5ZDKXzw5hGWmwRjhRuSXDfZPOh6OW2HNnaX2LM2HLmsk55n7SuK MpeDm9T0yEb7ZqCqPJFOpeUhKekPa9CcjGKDFmJ4pghYYxCxDzXvTvWIfnfaDN8/cbCMB+TeM2Vj VWDS0hlJvLGQkQ20anheeEreU6vuPp9Wvfw9Jw== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found 2 DS records for GOV in the . zone
	DS=7698/SHA-256 has algorithm RSASHA256
	DS=7698/SHA-1 has algorithm RSASHA256
	Found 1 RRSIGs over DS RRset
	`gov. 86400 IN RRSIG ( DS 8 1 86400 20200826200000 20200813190000 46594 . FRfeY/XKEq1xDgm7tlZEUYpeRhwAky7dEzF6l86g+6ixxzFqwVYLNiI5+P7K/DBhzlr2oo2+4uIj Xo7VOn8hJX+gd4jB1BI0ctZib5T1+lh7qaCkEqsUrKFd8CTzo9f0/c4Z2MqVIT5iAwQM/YNv87tA PxulqbYLB0S5KRi0w0ZTxkdEB5ZDKXzw5hGWmwRjhRuSXDfZPOh6OW2HNnaX2LM2HLmsk55n7SuK MpeDm9T0yEb7ZqCqPJFOpeUhKekPa9CcjGKDFmJ4pghYYxCxDzXvTvWIfnfaDN8/cbCMB+TeM2Vj VWDS0hlJvLGQkQ20anheeEreU6vuPp9Wvfw9Jw== )`
	RRSIG=46594 and DNSKEY=46594 verifies the DS RRset
	DS=7698/SHA-256 is now in the chain-of-trust
	`gov. 86400 IN DS ( 7698 8 2 6bc949e638442ead0bdaf0935763c8d003760384ff15ebbd5ce86bb5559561f0 )`
	`gov. 86400 IN DS 7698 8 1 6f109b46a80cea9613dc86d5a3e065520505aafe`
	Query to c.gov-servers.net for GOV/DNSKEY
	Received 777 bytes from 69.36.153.30
	;; Answer received from 69.36.153.30 (777 bytes) ;; HEADER SECTION ;; id = 33698 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; GOV. IN DNSKEY ;; ANSWER SECTION (3 records) GOV. 86400 IN DNSKEY ( 257 3 8 AQO8daaz7B+yshOfL60rytKd9aOSujgponEw3fwBMEC3/+e9XzHw2k+VKnbJTZ+QaVtpfUd1q9HK ZIv/ck83Gl5TjYKE5jtUZ2kpEDZfVNGv6yx0smtWAXv1nCJS9ohnyOTd397eMojGDHqkEC+uojES cZheEkMxzgCZwDAs+/CSU7mSuHtCRZn19xlZUd5Gv7yDQ3mbOUwuy30oSk0z1Q5UUPpoihOugIZH FX6Jk7NLiW2wlqfq9qhV4zj7TiBiJY0mCc4zHN8/aq2VKDHp2Na7mWzvKyTy+SYQkBQ/08LbPwj9 YMc+uCzKL6sU/ObHv17EFhD8aPDftTHZvV9L+OZr ) ; Key ID = 7698 GOV. 86400 IN DNSKEY ( 256 3 8 AwEAAegdXlD9lumYfYK1EZkZgTXd/IgQSNnvRkdpQa8KXFujLQRrJ2+yqhamuyJq2HZ3k8yYqEER PmtKiuBYWIFw5on1Q0zUn3sO1/14bvKPcI5nbrpJXnlH672yS7FcSeWn14SRe9VzX1Y4/16QXtKh 2gC1Ot1nO0SUqjxdvY5lSDzcdJMRTJws3UjIK3f0uHMw+F5PuHpLWI5zZXir6KUuj2M= ) ; Key ID = 26665 GOV. 86400 IN RRSIG ( DNSKEY 8 1 86400 20200822190254 20200807185754 7698 gov. gTJuEq5ZJKGbbiG4aBERDA6OchpSLAQP0PTIrfnoYefiGL3vmkV+xqI8nQ9ZJ5cHkwaEK6ECNin8 UbmEX/Q7vYMnQbCI4drJ/LaburOqW8wpyA6IgqbehmaYtEiXoOT+QGMnXejS+gNn2BJORqUik9vR TQRjm21x/m0bdK37/QqWkiS0WCrabfN7g5UopcZuYD6UB5w9o+83utxRjMJi5tfdxi489yx74+NV P96khjCFtRvCQcnNGQlnOlEKZvHK4KoeLk4rwXtIn/FHMFTRrh2m99v5P7REzq40UHeTGNWuuZII adQu43KIsI6sJspwwOfH+FzNDILQ0NpbhJTlQQ== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found 2 DNSKEY records for GOV
	`GOV. 86400 IN DNSKEY ( 257 3 8 AQO8daaz7B+yshOfL60rytKd9aOSujgponEw3fwBMEC3/+e9XzHw2k+VKnbJTZ+QaVtpfUd1q9HK ZIv/ck83Gl5TjYKE5jtUZ2kpEDZfVNGv6yx0smtWAXv1nCJS9ohnyOTd397eMojGDHqkEC+uojES cZheEkMxzgCZwDAs+/CSU7mSuHtCRZn19xlZUd5Gv7yDQ3mbOUwuy30oSk0z1Q5UUPpoihOugIZH FX6Jk7NLiW2wlqfq9qhV4zj7TiBiJY0mCc4zHN8/aq2VKDHp2Na7mWzvKyTy+SYQkBQ/08LbPwj9 YMc+uCzKL6sU/ObHv17EFhD8aPDftTHZvV9L+OZr ) ; Key ID = 7698`
	`GOV. 86400 IN DNSKEY ( 256 3 8 AwEAAegdXlD9lumYfYK1EZkZgTXd/IgQSNnvRkdpQa8KXFujLQRrJ2+yqhamuyJq2HZ3k8yYqEER PmtKiuBYWIFw5on1Q0zUn3sO1/14bvKPcI5nbrpJXnlH672yS7FcSeWn14SRe9VzX1Y4/16QXtKh 2gC1Ot1nO0SUqjxdvY5lSDzcdJMRTJws3UjIK3f0uHMw+F5PuHpLWI5zZXir6KUuj2M= ) ; Key ID = 26665`
	DNSKEY=7698/SEP is now in the chain-of-trust
	DS=7698/SHA-256 verifies DNSKEY=7698/SEP
	DS=7698/SHA-1 verifies DNSKEY=7698/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`GOV. 86400 IN RRSIG ( DNSKEY 8 1 86400 20200822190254 20200807185754 7698 gov. gTJuEq5ZJKGbbiG4aBERDA6OchpSLAQP0PTIrfnoYefiGL3vmkV+xqI8nQ9ZJ5cHkwaEK6ECNin8 UbmEX/Q7vYMnQbCI4drJ/LaburOqW8wpyA6IgqbehmaYtEiXoOT+QGMnXejS+gNn2BJORqUik9vR TQRjm21x/m0bdK37/QqWkiS0WCrabfN7g5UopcZuYD6UB5w9o+83utxRjMJi5tfdxi489yx74+NV P96khjCFtRvCQcnNGQlnOlEKZvHK4KoeLk4rwXtIn/FHMFTRrh2m99v5P7REzq40UHeTGNWuuZII adQu43KIsI6sJspwwOfH+FzNDILQ0NpbhJTlQQ== )`
	RRSIG=7698 and DNSKEY=7698/SEP verifies the DNSKEY RRset
	DNSKEY=26665 is now in the chain-of-trust
	Query to b.gov-servers.net for IDTHEFT.GOV/A
	Received 386 bytes from 209.112.123.30
	;; Answer received from 209.112.123.30 (386 bytes) ;; HEADER SECTION ;; id = 54722 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 6 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; IDTHEFT.GOV. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (6 records) IDTHEFT.GOV. 86400 IN NS dns3.l-secb.net. IDTHEFT.GOV. 86400 IN NS dns1.l-secb.net. IDTHEFT.GOV. 86400 IN NS dns2.l-secb.net. IDTHEFT.GOV. 3600 IN DS ( 15502 8 2 e7dd4f317a9b135f912d87b2da225f756c3906257e085e01a774b565f66931ec ) IDTHEFT.GOV. 3600 IN DS 15502 8 1 f7bf41b8ebbaa0755b40b0e5f4ad8ac20eeb1c35 IDTHEFT.GOV. 3600 IN RRSIG ( DS 8 2 3600 20200820221008 20200813221008 26665 gov. a14E5LGuaUptGaoMakd4OOvIIY0z43jkCzOCfy+o42YmGeoSmwlemA53c/DN/h2vmasRep33gKfS wWSKqsrVELWWCEgaZiG7ZOtI6Wk1E8FyzfMjqQyVo8BH/fkF/zIWn551mv2zBm0NC5WrP2PhzuED SEMTLqAfdLNlQKYdeWwXlvkIx9kpJYeptblUfwolDCnNZ9zOAIuVvBljRmz99Q== ) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Query to c.gov-servers.net for IDTHEFT.GOV/DNSKEY
	Received 386 bytes from 69.36.153.30
	;; Answer received from 69.36.153.30 (386 bytes) ;; HEADER SECTION ;; id = 59943 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 6 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; IDTHEFT.GOV. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (6 records) IDTHEFT.GOV. 86400 IN NS dns3.l-secb.net. IDTHEFT.GOV. 86400 IN NS dns1.l-secb.net. IDTHEFT.GOV. 86400 IN NS dns2.l-secb.net. IDTHEFT.GOV. 3600 IN DS ( 15502 8 2 e7dd4f317a9b135f912d87b2da225f756c3906257e085e01a774b565f66931ec ) IDTHEFT.GOV. 3600 IN DS 15502 8 1 f7bf41b8ebbaa0755b40b0e5f4ad8ac20eeb1c35 IDTHEFT.GOV. 3600 IN RRSIG ( DS 8 2 3600 20200820221008 20200813221008 26665 gov. a14E5LGuaUptGaoMakd4OOvIIY0z43jkCzOCfy+o42YmGeoSmwlemA53c/DN/h2vmasRep33gKfS wWSKqsrVELWWCEgaZiG7ZOtI6Wk1E8FyzfMjqQyVo8BH/fkF/zIWn551mv2zBm0NC5WrP2PhzuED SEMTLqAfdLNlQKYdeWwXlvkIx9kpJYeptblUfwolDCnNZ9zOAIuVvBljRmz99Q== ) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found child zone IDTHEFT.GOV

IDTHEFT.GOV

	Checking DS between GOV and IDTHEFT.GOV
	Query to c.gov-servers.net for IDTHEFT.GOV/DS
	Received 319 bytes from 69.36.153.30
	;; Answer received from 69.36.153.30 (319 bytes) ;; HEADER SECTION ;; id = 19731 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; IDTHEFT.GOV. IN DS ;; ANSWER SECTION (3 records) IDTHEFT.GOV. 3600 IN DS ( 15502 8 2 e7dd4f317a9b135f912d87b2da225f756c3906257e085e01a774b565f66931ec ) IDTHEFT.GOV. 3600 IN DS 15502 8 1 f7bf41b8ebbaa0755b40b0e5f4ad8ac20eeb1c35 IDTHEFT.GOV. 3600 IN RRSIG ( DS 8 2 3600 20200820221008 20200813221008 26665 gov. a14E5LGuaUptGaoMakd4OOvIIY0z43jkCzOCfy+o42YmGeoSmwlemA53c/DN/h2vmasRep33gKfS wWSKqsrVELWWCEgaZiG7ZOtI6Wk1E8FyzfMjqQyVo8BH/fkF/zIWn551mv2zBm0NC5WrP2PhzuED SEMTLqAfdLNlQKYdeWwXlvkIx9kpJYeptblUfwolDCnNZ9zOAIuVvBljRmz99Q== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found 2 DS records for IDTHEFT.GOV in the GOV zone
	DS=15502/SHA-256 has algorithm RSASHA256
	DS=15502/SHA-1 has algorithm RSASHA256
	Found 1 RRSIGs over DS RRset
	`IDTHEFT.GOV. 3600 IN RRSIG ( DS 8 2 3600 20200820221008 20200813221008 26665 gov. a14E5LGuaUptGaoMakd4OOvIIY0z43jkCzOCfy+o42YmGeoSmwlemA53c/DN/h2vmasRep33gKfS wWSKqsrVELWWCEgaZiG7ZOtI6Wk1E8FyzfMjqQyVo8BH/fkF/zIWn551mv2zBm0NC5WrP2PhzuED SEMTLqAfdLNlQKYdeWwXlvkIx9kpJYeptblUfwolDCnNZ9zOAIuVvBljRmz99Q== )`
	RRSIG=26665 and DNSKEY=26665 verifies the DS RRset
	DS=15502/SHA-256 is now in the chain-of-trust
	`IDTHEFT.GOV. 3600 IN DS ( 15502 8 2 e7dd4f317a9b135f912d87b2da225f756c3906257e085e01a774b565f66931ec )`
	`IDTHEFT.GOV. 3600 IN DS 15502 8 1 f7bf41b8ebbaa0755b40b0e5f4ad8ac20eeb1c35`
	Query to dns2.l-secb.net for IDTHEFT.GOV/DNSKEY
	Received 1253 bytes from 205.130.212.37
	;; Answer received from 205.130.212.37 (1253 bytes) ;; HEADER SECTION ;; id = 64420 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 6 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; IDTHEFT.GOV. IN DNSKEY ;; ANSWER SECTION (6 records) IDTHEFT.GOV. 86400 IN DNSKEY ( 256 3 8 AwEAAcUsNJtxiNRbLRF5HsqauNXWczn9RF59994uhXhgJykwzx7PiArJLDh3CFQUng8jXP4dGcwD Z0ur64X41udueqL7zccKIAg+GpNw/TdrsI7B27K84osDiIcIVx2Nix5LF/s82zPfMIAs/cj7/8uH zU0nOalfPvunH3foAuQRZGlD ) ; Key ID = 2205 IDTHEFT.GOV. 86400 IN DNSKEY ( 256 3 8 AwEAAbDJRNA/19xNMR4AAfABEQgF5t3DpXrhrKBAGq/WmcVSD9qc4z2QVyJnEZpckWiakGC4yjbT +ydzTtTRfZ+Rc0mgr7DoqMmjSS7+o5rzIdUjRC8ESnvHMifK7HMFVeahJOCYmF+/TnkznPjKgEY1 4RU5CM16JMTIYoJUQxHOsXc9 ) ; Key ID = 30768 IDTHEFT.GOV. 86400 IN DNSKEY ( 257 3 8 AwEAAbewh2iyKUqmPikJkvd2FKJK3H/cBB3wJBe45EJYoOCVHbY6RzvAU11SMdYMyE30W8yXov+V 8D+u5SyYOBCCVXe3BxXD3cwb9D6/P3UJF5Flt83YYaqaFiG+rexr5CP2RGjBa3JVDvBOCY/+ftlR a9M3MfCSRAy7xfyC1L4srFKu2hfvxwAoUEOFtE8TVEw9Vi8nXwSqND51+faG6jgo8CNMOHjHLsVQ ue7bvv+VYSzzJGJ8NCCgkPAMhgmMQM9HJu3zkImb5iK0yyJAFxl1r199lMAIlzRyLXaA4RB/tvqB ZWBcYqw6C3retZ/hZN694lh/CjgIQb6j6/aF3BLa778= ) ; Key ID = 15502 IDTHEFT.GOV. 86400 IN RRSIG ( DNSKEY 8 2 86400 20200816164407 20200809164407 2205 idtheft.gov. Q2L2qZ9LtR60PC8CJ4NgXwDEMmpgNWUXw0CyYC0wFAeXiwi/c579HRW3oiQWUbmky6MAGd8kuinE kRKQ3Tjcb7rvr+HB8L9C7B6zIwm9xQ/ojqLu8M0dwjxAmqytkQGmq68P3rtqwTAggmUyu/PApOnw IF73a45k6oK5VbyMS6M= ) IDTHEFT.GOV. 86400 IN RRSIG ( DNSKEY 8 2 86400 20200816164407 20200809164407 30768 idtheft.gov. lCB0YZcW4gKvYmeWYyzExGK4NphQ0lB8MGipRN4YAcYfRBxBXDcpettTpiK2rXI2cZzBeDoIJubV hIZHQGyO8HL2XBGUUMmoSHszm70AAD4bbQs9dTahX4C8BPrYk2MP7oAgutZeJm5yHbZ6b4K/hThA HFrobU7PVqIuZjagW1Y= ) IDTHEFT.GOV. 86400 IN RRSIG ( DNSKEY 8 2 86400 20200816164407 20200809164407 15502 idtheft.gov. KzsRl+YCSf/aJk7oiDn9+YRhEQ7IjP0bpP92Aeqj/6iki69lO9LE4mqTDNn5oqTWl2FHcu/9ay+0 sabNxWmLP0OBy5LsH6f8NwoFKbR7cfIKabNyQUvLnM2cPUl3ktbeKzHocv1z77eNtA8LUkl9Vf/B P4pLbqqFypnkk7yVQBBvhvRH2X/96Bt8pzHrgrV2pRGV4cVTcNsgSwxoRVW3mKnWdp2TADXS78mD rRxTeRZKDzUqKHAcT/LmrDBy6u+ApFFcOn/kBaEU5IPKJmqLvudDui67uIC5XC9eL6AHEJP6LDl1 OuModFV+YWVBDafz+AImGA/5/5EhaES2HmRNnA== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found 3 DNSKEY records for IDTHEFT.GOV
	`IDTHEFT.GOV. 86400 IN DNSKEY ( 256 3 8 AwEAAcUsNJtxiNRbLRF5HsqauNXWczn9RF59994uhXhgJykwzx7PiArJLDh3CFQUng8jXP4dGcwD Z0ur64X41udueqL7zccKIAg+GpNw/TdrsI7B27K84osDiIcIVx2Nix5LF/s82zPfMIAs/cj7/8uH zU0nOalfPvunH3foAuQRZGlD ) ; Key ID = 2205`
	`IDTHEFT.GOV. 86400 IN DNSKEY ( 256 3 8 AwEAAbDJRNA/19xNMR4AAfABEQgF5t3DpXrhrKBAGq/WmcVSD9qc4z2QVyJnEZpckWiakGC4yjbT +ydzTtTRfZ+Rc0mgr7DoqMmjSS7+o5rzIdUjRC8ESnvHMifK7HMFVeahJOCYmF+/TnkznPjKgEY1 4RU5CM16JMTIYoJUQxHOsXc9 ) ; Key ID = 30768`
	`IDTHEFT.GOV. 86400 IN DNSKEY ( 257 3 8 AwEAAbewh2iyKUqmPikJkvd2FKJK3H/cBB3wJBe45EJYoOCVHbY6RzvAU11SMdYMyE30W8yXov+V 8D+u5SyYOBCCVXe3BxXD3cwb9D6/P3UJF5Flt83YYaqaFiG+rexr5CP2RGjBa3JVDvBOCY/+ftlR a9M3MfCSRAy7xfyC1L4srFKu2hfvxwAoUEOFtE8TVEw9Vi8nXwSqND51+faG6jgo8CNMOHjHLsVQ ue7bvv+VYSzzJGJ8NCCgkPAMhgmMQM9HJu3zkImb5iK0yyJAFxl1r199lMAIlzRyLXaA4RB/tvqB ZWBcYqw6C3retZ/hZN694lh/CjgIQb6j6/aF3BLa778= ) ; Key ID = 15502`
	DNSKEY=15502/SEP is now in the chain-of-trust
	DS=15502/SHA-256 verifies DNSKEY=15502/SEP
	DS=15502/SHA-1 verifies DNSKEY=15502/SEP
	Found 3 RRSIGs over DNSKEY RRset
	`IDTHEFT.GOV. 86400 IN RRSIG ( DNSKEY 8 2 86400 20200816164407 20200809164407 2205 idtheft.gov. Q2L2qZ9LtR60PC8CJ4NgXwDEMmpgNWUXw0CyYC0wFAeXiwi/c579HRW3oiQWUbmky6MAGd8kuinE kRKQ3Tjcb7rvr+HB8L9C7B6zIwm9xQ/ojqLu8M0dwjxAmqytkQGmq68P3rtqwTAggmUyu/PApOnw IF73a45k6oK5VbyMS6M= )`
	`IDTHEFT.GOV. 86400 IN RRSIG ( DNSKEY 8 2 86400 20200816164407 20200809164407 30768 idtheft.gov. lCB0YZcW4gKvYmeWYyzExGK4NphQ0lB8MGipRN4YAcYfRBxBXDcpettTpiK2rXI2cZzBeDoIJubV hIZHQGyO8HL2XBGUUMmoSHszm70AAD4bbQs9dTahX4C8BPrYk2MP7oAgutZeJm5yHbZ6b4K/hThA HFrobU7PVqIuZjagW1Y= )`
	`IDTHEFT.GOV. 86400 IN RRSIG ( DNSKEY 8 2 86400 20200816164407 20200809164407 15502 idtheft.gov. KzsRl+YCSf/aJk7oiDn9+YRhEQ7IjP0bpP92Aeqj/6iki69lO9LE4mqTDNn5oqTWl2FHcu/9ay+0 sabNxWmLP0OBy5LsH6f8NwoFKbR7cfIKabNyQUvLnM2cPUl3ktbeKzHocv1z77eNtA8LUkl9Vf/B P4pLbqqFypnkk7yVQBBvhvRH2X/96Bt8pzHrgrV2pRGV4cVTcNsgSwxoRVW3mKnWdp2TADXS78mD rRxTeRZKDzUqKHAcT/LmrDBy6u+ApFFcOn/kBaEU5IPKJmqLvudDui67uIC5XC9eL6AHEJP6LDl1 OuModFV+YWVBDafz+AImGA/5/5EhaES2HmRNnA== )`
	RRSIG=2205 and DNSKEY=2205 verifies the DNSKEY RRset
	RRSIG=30768 and DNSKEY=30768 verifies the DNSKEY RRset
	RRSIG=15502 and DNSKEY=15502/SEP verifies the DNSKEY RRset
	DNSKEY=2205 is now in the chain-of-trust
	DNSKEY=30768 is now in the chain-of-trust
	Query to dns1.l-secb.net for IDTHEFT.GOV/A
	Received 398 bytes from 198.77.70.37
	;; Answer received from 198.77.70.37 (398 bytes) ;; HEADER SECTION ;; id = 4353 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; IDTHEFT.GOV. IN A ;; ANSWER SECTION (3 records) IDTHEFT.GOV. 30 IN A 35.161.201.74 IDTHEFT.GOV. 30 IN RRSIG ( A 8 2 30 20200820144624 20200813144624 2205 idtheft.gov. iwrevhgW9uHbCbkkddNgJmOinqJ6JR7RY3atIKjmAhNTbpynSMFlKGrKljkkX39UOty1/2kmYybl XhhBzhmfCuFG3UYvhAJqkDZL6FFnc/a07l7ATVXpnqNCSN5mHPewmqxfKwLaTYXWLkBLDb7MaTPw FO+azWHzfYZ0HtDhVso= ) IDTHEFT.GOV. 30 IN RRSIG ( A 8 2 30 20200816165537 20200809165537 30768 idtheft.gov. H27AS1myGnpURajFJbL9lbirXD8Ap8UWqiPoFa8bGcuUPcJMytfQhZM3cUbIm7D8usRC3BUrD/oN /4QcTpyTibglHNk02ZBw/6GJOfsqhd5nX5Um+aiHg4eky/L2mIt/om/kwtwThBWWQoFX4lWxl0a8 K3bGkhAg5iefGpnhZ8U= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	IDTHEFT.GOV is authoritative for IDTHEFT.GOV
	Found RRSIG signed by idtheft.gov zone
	Query to dns2.l-secb.net for IDTHEFT.GOV/SOA
	Received 970 bytes from 205.130.212.37
	;; Answer received from 205.130.212.37 (970 bytes) ;; HEADER SECTION ;; id = 4000 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 5 arcount = 7 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; IDTHEFT.GOV. IN SOA ;; ANSWER SECTION (3 records) IDTHEFT.GOV. 43200 IN SOA ( dns1.l-secb.net. hostmaster.l-secb.net. 2019102101 ;serial 10800 ;refresh 3600 ;retry 2419200 ;expire 900 ;minimum ) IDTHEFT.GOV. 43200 IN RRSIG ( SOA 8 2 43200 20200817040900 20200810040900 2205 idtheft.gov. GI/uQ02ss/xgSamURdrQzBsw/kt99+5SgL95fA+KhQ8O2Z9DxYLsP3qgEPpS5SZzLfoN/Peg36rx pRZhBvQJJrXJrugcFEUx85hON5NF23Hc/WwdXNEr1OZPy6hL3taJRGmVIDZ7MMerohDxZxt+p7S+ UxrzcW3ICkvxVFHRjus= ) IDTHEFT.GOV. 43200 IN RRSIG ( SOA 8 2 43200 20200817040900 20200810040900 30768 idtheft.gov. R8Tgr6phcDwXrwIZmHoXXIHgQbunWfM95hwqi9Hes63/cpXjqgKsZbLMW1WVlBG6T+8sPv9LHhkF s1fpoQQq6qiKX6GokSFcx+Kdg/2TmgJ3lTSjPuKMrqXtYSlXoF8qm+DKyD2/f4x1V3O3WYZN0o6T Tr0o4FQzjdGop6xTMZE= ) ;; AUTHORITY SECTION (5 records) IDTHEFT.GOV. 43200 IN NS dns2.l-secb.net. IDTHEFT.GOV. 43200 IN NS dns1.l-secb.net. IDTHEFT.GOV. 43200 IN NS dns3.l-secb.net. IDTHEFT.GOV. 43200 IN RRSIG ( NS 8 2 43200 20200820154009 20200813154009 2205 idtheft.gov. ZpUgRahXcteA18LdshbaZtb6Q5PowSZlHh/soO0GnpdeRMG4iT+ltVffm7VH5kjByzOy3+m4bDx8 F9evAOBbcD6tJEub8gvfmIPTP8/c/+D/4NjtzDDXVGiSODKnZrfKsinsVpN81Q/rtMbfamEGxFI2 4AM+JbqMj/tbJ12SQIw= ) IDTHEFT.GOV. 43200 IN RRSIG ( NS 8 2 43200 20200816200738 20200809200738 30768 idtheft.gov. fb9jmPkgTsxPL5BeUWKkkc7UmHnAazIf832E6yVux6VZjZ/3NqkV0b/VZ6VG4896zdT8SfW5msqk +lyvlIzvIvFLO6JQUtoNOUSxoK7tuEVsEAacaHyvm3krBXWBJDoiBFrIMIrVJf1gVz2ELXOkE2Ve CWgxpthxTO2mznUuTxo= ) ;; ADDITIONAL SECTION (7 records) dns1.l-secb.net. 43200 IN A 198.77.70.37 dns2.l-secb.net. 43200 IN A 205.130.212.37 dns3.l-secb.net. 43200 IN A 35.163.67.210 dns1.l-secb.net. 43200 IN AAAA 2001:1900:2268:770:198:77:70:37 dns2.l-secb.net. 43200 IN AAAA 2001:1900:2268:512:205:130:212:37 dns3.l-secb.net. 43200 IN AAAA 2600:1f14:a2e:4b00:35:163:67:210 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Query to dns1.l-secb.net for IDTHEFT.GOV/SOA
	Received 970 bytes from 198.77.70.37
	;; Answer received from 198.77.70.37 (970 bytes) ;; HEADER SECTION ;; id = 32790 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 5 arcount = 7 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; IDTHEFT.GOV. IN SOA ;; ANSWER SECTION (3 records) IDTHEFT.GOV. 43200 IN SOA ( dns1.l-secb.net. hostmaster.l-secb.net. 2019102101 ;serial 10800 ;refresh 3600 ;retry 2419200 ;expire 900 ;minimum ) IDTHEFT.GOV. 43200 IN RRSIG ( SOA 8 2 43200 20200817181324 20200810181324 2205 idtheft.gov. bf04Ine8f+KZtqk8g6jO43OAkXaRtpLMfJo6cGlVSScUlE7/sFCo5gXgaXGQUCT91A1xxUdtLEg4 vAOEeyLqLEUrvK/6lgX4yBiK36JVSgQAvLhTw0JJ4fep1GXh6O+U4oFBJ5jy4GK77JFHBG/KQ0ue Adme+qigc6yeHbTIIDs= ) IDTHEFT.GOV. 43200 IN RRSIG ( SOA 8 2 43200 20200817181324 20200810181324 30768 idtheft.gov. JF1olvdCN+6c51ze+1qcWF58fCEsvuKimwoU6XqmRUYPkG12rHAKjm8cyjFoElJTfzdZCtRvbAJP O4KdxKXTjsSIqn+v8LfuOuonD3574/dfoThDyZrYg1lmtHbfG4hH+s1kMRK60SDZLoNvPXRwsdZM 8FBPRNuIjYz7DPSgZ2s= ) ;; AUTHORITY SECTION (5 records) IDTHEFT.GOV. 43200 IN NS dns2.l-secb.net. IDTHEFT.GOV. 43200 IN NS dns3.l-secb.net. IDTHEFT.GOV. 43200 IN NS dns1.l-secb.net. IDTHEFT.GOV. 43200 IN RRSIG ( NS 8 2 43200 20200816121133 20200809121133 2205 idtheft.gov. l3thw6Y8u7An4T6xzx+cYAt1upO7AnkqeZlh9CJjpgXlnaulGQAiNytSN52rDTDGYnF1X5NYhwiY 3ljDToPCbiknnOm4MxGqrFtbj2yV2XtI7rZ33ivWfMBz+vjsZbM/0hlHGscp5rUGTFoQBuCqNctA CVQ/aGdoUrdF+LIVqFI= ) IDTHEFT.GOV. 43200 IN RRSIG ( NS 8 2 43200 20200816221100 20200809221100 30768 idtheft.gov. NlEv2FR+K/4UZ+YnYlk3RnfWUGfg5l49M9c7cleQt56Gx5rY4FGnM6tXnVyRIakczzSlUoSY9WXz 7tAhXt9NECnj9hl7VrohmoyXTjWr5XNnyprBQddpED+9FQ9qrV3Enm0A7wpNjoUbHlItf/0V/cAp fmiZrRpIFVVNnNLAHYc= ) ;; ADDITIONAL SECTION (7 records) dns1.l-secb.net. 43200 IN A 198.77.70.37 dns2.l-secb.net. 43200 IN A 205.130.212.37 dns3.l-secb.net. 43200 IN A 35.163.67.210 dns1.l-secb.net. 43200 IN AAAA 2001:1900:2268:770:198:77:70:37 dns2.l-secb.net. 43200 IN AAAA 2001:1900:2268:512:205:130:212:37 dns3.l-secb.net. 43200 IN AAAA 2600:1f14:a2e:4b00:35:163:67:210 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Query to dns3.l-secb.net for IDTHEFT.GOV/SOA
	Received 970 bytes from 35.163.67.210
	;; Answer received from 35.163.67.210 (970 bytes) ;; HEADER SECTION ;; id = 43546 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 5 arcount = 7 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; IDTHEFT.GOV. IN SOA ;; ANSWER SECTION (3 records) IDTHEFT.GOV. 43200 IN SOA ( dns1.l-secb.net. hostmaster.l-secb.net. 2019102101 ;serial 10800 ;refresh 3600 ;retry 2419200 ;expire 900 ;minimum ) IDTHEFT.GOV. 43200 IN RRSIG ( SOA 8 2 43200 20200817233830 20200810233830 2205 idtheft.gov. IL1JnSbgCXfUia5m5GXFqrIh7KZsaMRDoosZwLM87XweOo1PfrBsPneouovFawba4dBDWc1W0QDO 9m6NA8DOPBnptjWqMofKy5Frtk4U4Esjj4gmVExJgMeUWCXcdQ0bpX12/l7QK2zbKm3eACqi+7au fTyWaOxTU1g+rILWajw= ) IDTHEFT.GOV. 43200 IN RRSIG ( SOA 8 2 43200 20200817020554 20200810020554 30768 idtheft.gov. gBjNCa3DC+5BWTCHff+z/0VJ46h7W93hNQ+c4V3fGXN7jG8o1hK+rKdZAFOog4sZgrwfBgjZofmv DDOuu534e087ogRkQwDoJz3CUcAsis/Fn7D2rjRHhLTOISwQSlI5Oj/ANId3RbF6wNVHLoneWG+a tJhZk0Aq3OdoAcx5yQY= ) ;; AUTHORITY SECTION (5 records) IDTHEFT.GOV. 43200 IN NS dns1.l-secb.net. IDTHEFT.GOV. 43200 IN NS dns2.l-secb.net. IDTHEFT.GOV. 43200 IN NS dns3.l-secb.net. IDTHEFT.GOV. 43200 IN RRSIG ( NS 8 2 43200 20200820213005 20200813213005 2205 idtheft.gov. HeGeEqdfgS/MFM8Mrlb8Jv4UDNzPv/mIvIKbuc84TOH51YAxX5fGK2ZrRNKrPkxyxQh4obbP8kzQ nYAgM1aOt/J9nd4rIvTaC06YoqHPBKT7RlePwD/FEbayz9Q8KpB+o+o9yUxBrTNCcyGf85OIgwnf PEIEdmg8ASs4AN1gQ5s= ) IDTHEFT.GOV. 43200 IN RRSIG ( NS 8 2 43200 20200816190250 20200809190250 30768 idtheft.gov. T08rI1tVqFBg9Y/ZdJ5EbcHyEPM8L+L9/ORpUQTUIRXWc8qQbRjGa+5rqb8UqamVx5zu1X0oA76l H3ZcsZA43DGRbWamuA6FTYNsT7gnEWBNsLmmbeRo0vyDW+ravrQJP/04+SqLKCqEJNjHhxFK9wkO W/cDsIugO3SIL1ydghI= ) ;; ADDITIONAL SECTION (7 records) dns1.l-secb.net. 43200 IN A 198.77.70.37 dns2.l-secb.net. 43200 IN A 205.130.212.37 dns3.l-secb.net. 43200 IN A 35.163.67.210 dns1.l-secb.net. 43200 IN AAAA 2001:1900:2268:770:198:77:70:37 dns2.l-secb.net. 43200 IN AAAA 2001:1900:2268:512:205:130:212:37 dns3.l-secb.net. 43200 IN AAAA 2600:1f14:a2e:4b00:35:163:67:210 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Query to dns1.l-secb.net for IDTHEFT.GOV/A
	Received 398 bytes from 198.77.70.37
	;; Answer received from 198.77.70.37 (398 bytes) ;; HEADER SECTION ;; id = 33858 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; IDTHEFT.GOV. IN A ;; ANSWER SECTION (3 records) IDTHEFT.GOV. 30 IN A 18.204.180.152 IDTHEFT.GOV. 30 IN RRSIG ( A 8 2 30 20200820115545 20200813115545 2205 idtheft.gov. eO5ZqqNv4Jn/3twq9UFv8r4Mdiv5nozTxT8PjzPP8v9DoyJUWuRDP48i2xarN8TZIg5Zxneuv1W3 ost+dxz6KcwkykOGvWB37MzMWa4SY68bd5TYeIadme7iH9xDIWJWnc55fzWgsC0Mum0KzaTD44XA FtcQ+qTCYB4iuhxVuns= ) IDTHEFT.GOV. 30 IN RRSIG ( A 8 2 30 20200816171405 20200809171405 30768 idtheft.gov. XLaw61dK0NZWVhgoFJbqeYmV9xgpsd0clu8Ln27Lemomm6U3Rnbq4MbMDhY4u5wHt8ghjxfB5E2w ySSA4msNisKVuK7wBTJ5qYkqBBlzOXJtef4/r/vy8EO8rrYcsnvHwCfJBuBYzcDjlASRrjVAEaco Vu6djXg6sAqSNNTUm7A= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	IDTHEFT.GOV A RR has value 18.204.180.152
	Found 2 RRSIGs over A RRset
	`IDTHEFT.GOV. 30 IN RRSIG ( A 8 2 30 20200820115545 20200813115545 2205 idtheft.gov. eO5ZqqNv4Jn/3twq9UFv8r4Mdiv5nozTxT8PjzPP8v9DoyJUWuRDP48i2xarN8TZIg5Zxneuv1W3 ost+dxz6KcwkykOGvWB37MzMWa4SY68bd5TYeIadme7iH9xDIWJWnc55fzWgsC0Mum0KzaTD44XA FtcQ+qTCYB4iuhxVuns= )`
	`IDTHEFT.GOV. 30 IN RRSIG ( A 8 2 30 20200816171405 20200809171405 30768 idtheft.gov. XLaw61dK0NZWVhgoFJbqeYmV9xgpsd0clu8Ln27Lemomm6U3Rnbq4MbMDhY4u5wHt8ghjxfB5E2w ySSA4msNisKVuK7wBTJ5qYkqBBlzOXJtef4/r/vy8EO8rrYcsnvHwCfJBuBYzcDjlASRrjVAEaco Vu6djXg6sAqSNNTUm7A= )`
	RRSIG=2205 and DNSKEY=2205 verifies the A RRset
	RRSIG=30768 and DNSKEY=30768 verifies the A RRset

Move your mouse over any or symbols for remediation hints.

Want a second opinion? Test IDTHEFT.GOV at dnsviz.net.

DNSSEC Analyzer

↓ Advanced options ↑ Advanced options

Trust Anchor:
Name Servers: