DNSSEC Analyzer - IDTHEFT.GOV

Domain Name:

Time: 2021-04-22 01:46:44 UTC, NTP stratum 4

Analyzing DNSSEC problems for IDTHEFT.GOV

DS=20326/SHA-256 is now in the chain-of-trust

	Checking DS between Trust Anchor and .
	`. IN DS ( 20326 8 2 e06d44b80b8f1d39a95c0b0d7c65d08458e880409bbc683457104237c7f8ec8d )`
	Query to h.root-servers.net for ./DNSKEY
	Received 864 bytes from 198.97.190.53
	;; Answer received from 198.97.190.53 (864 bytes) ;; HEADER SECTION ;; id = 39197 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option: ;; QUESTION SECTION (1 record) ;; . IN DNSKEY ;; ANSWER SECTION (3 records) . 172800 IN DNSKEY ( 256 3 8 AwEAAa+HvD7XXjmL+1htThUQyZW7oWGnjzKHJASg3TSR5Bmu5LfnSVW7fxqZa2oAYo2ionIQWyqA j/loApzg8GNMhyIibftPJso54uWRQ2GaoMrwLD5SLu676kf7urJq6nqdjNC0aJM/C888li69lVH6 tiu2tZm1NH3cmgfnMUJpD60bsrDUqs7XwftmNkdkHa4ltQbM3UNPyfTaNBQYoH3wpOpSjdk3tyDR nreBO6Idrw+DGf/rve4sL3qiSaXfYIkcwAwozxR34iHU5dbCDs8S6FmZYhoSVKVgNSUkudxhd9/6 RrZkYRgvwRsQXl3UwsacU1DsXcORqIC+7NlQ6M2OJVU= ) ; Key ID = 14631 . 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; Key ID = 20326 . 172800 IN RRSIG ( DNSKEY 8 0 172800 20210512000000 20210421000000 20326 . bx5MOQGiU0gAwVPCF6fPBYdApVZCvs4fZ3603lzlRdtiHNsNSk2j/mVU7UD6oZkA/q/AIucEPGMD Lua0HNNnfhW8QsYssPHURJpcOUhgt17GinADGwADQYSI6fH12kFnb5wIZ/jznJ58dCdJDr0E7tg6 GarIqeu190nLM+sp75CNlKEG3HrrdSIGLWY8CFU1wLcU43ZAXaCiO5D6XwV8j7WUOs0n8XB48JzO yq4nZ/9Pt6Nl1QWT1UMrGZPPpBBeBKFeggIiGmDuzCn/nrk8F5zuN8f8RvhCxJZi1Kf6rEB0l79X XZ+JnpyjIJrNSNsDxeTQkO5NgXOrols1Gxv/QA== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option:
	Found 2 DNSKEY records for .
	`. 172800 IN DNSKEY ( 256 3 8 AwEAAa+HvD7XXjmL+1htThUQyZW7oWGnjzKHJASg3TSR5Bmu5LfnSVW7fxqZa2oAYo2ionIQWyqA j/loApzg8GNMhyIibftPJso54uWRQ2GaoMrwLD5SLu676kf7urJq6nqdjNC0aJM/C888li69lVH6 tiu2tZm1NH3cmgfnMUJpD60bsrDUqs7XwftmNkdkHa4ltQbM3UNPyfTaNBQYoH3wpOpSjdk3tyDR nreBO6Idrw+DGf/rve4sL3qiSaXfYIkcwAwozxR34iHU5dbCDs8S6FmZYhoSVKVgNSUkudxhd9/6 RrZkYRgvwRsQXl3UwsacU1DsXcORqIC+7NlQ6M2OJVU= ) ; Key ID = 14631`
	`. 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; Key ID = 20326`
	DNSKEY=20326/SEP is now in the chain-of-trust
	DS=20326/SHA-256 verifies DNSKEY=20326/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`. 172800 IN RRSIG ( DNSKEY 8 0 172800 20210512000000 20210421000000 20326 . bx5MOQGiU0gAwVPCF6fPBYdApVZCvs4fZ3603lzlRdtiHNsNSk2j/mVU7UD6oZkA/q/AIucEPGMD Lua0HNNnfhW8QsYssPHURJpcOUhgt17GinADGwADQYSI6fH12kFnb5wIZ/jznJ58dCdJDr0E7tg6 GarIqeu190nLM+sp75CNlKEG3HrrdSIGLWY8CFU1wLcU43ZAXaCiO5D6XwV8j7WUOs0n8XB48JzO yq4nZ/9Pt6Nl1QWT1UMrGZPPpBBeBKFeggIiGmDuzCn/nrk8F5zuN8f8RvhCxJZi1Kf6rEB0l79X XZ+JnpyjIJrNSNsDxeTQkO5NgXOrols1Gxv/QA== )`
	RRSIG=20326 and DNSKEY=20326/SEP verifies the DNSKEY RRset
	DNSKEY=14631 is now in the chain-of-trust
	Query to c.root-servers.net for IDTHEFT.GOV/A
	Received 633 bytes from 192.33.4.12
	;; Answer received from 192.33.4.12 (633 bytes) ;; HEADER SECTION ;; id = 4838 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 6 arcount = 9 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option: ;; QUESTION SECTION (1 record) ;; IDTHEFT.GOV. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (6 records) gov. 172800 IN NS d.gov-servers.net. gov. 172800 IN NS a.gov-servers.net. gov. 172800 IN NS b.gov-servers.net. gov. 172800 IN NS c.gov-servers.net. gov. 86400 IN DS ( 7698 8 2 6bc949e638442ead0bdaf0935763c8d003760384ff15ebbd5ce86bb5559561f0 ) gov. 86400 IN RRSIG ( DS 8 1 86400 20210504220000 20210421210000 14631 . neNcEL5svdpJboSvCA+APK3KufuPIO46bPXaX0L+wE2H1nrU6g8caNctZy4c+dh1PPC37fu6Vv7p Ms2kWW/AIWLClxMB949tRwGiWv2oSJs7I0QK8qpNtq0NiYbq2Z0j/ZZTuvhj4Hw3eSZkJbJfmacp iQ0+6xBoYa2wsmaslO76AFzjBwJYgOkjGYmMpsPsLdl3rwuuZK2XkTR0eXUo0RlplxqE+E6Ps8tl tK/7wlsSFpwWn0Vrt8ntcGulTsa5Mb4nCTAiGWJohceq+4hpIk8ZiDKhrUpR9czZzqPOgXB0dyBF qjkZzYnrvdcdQJgODAxt78pylFWJCRnGxKc56w== ) ;; ADDITIONAL SECTION (9 records) a.gov-servers.net. 172800 IN A 69.36.157.30 b.gov-servers.net. 172800 IN A 209.112.123.30 c.gov-servers.net. 172800 IN A 69.36.153.30 d.gov-servers.net. 172800 IN A 81.19.194.30 a.gov-servers.net. 172800 IN AAAA 2001:500:4431::2:30 b.gov-servers.net. 172800 IN AAAA 2620:74:27::2:30 c.gov-servers.net. 172800 IN AAAA 2620:74:28::2:30 d.gov-servers.net. 172800 IN AAAA 2620:74:29::2:30 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option:
	Query to b.root-servers.net for GOV/DNSKEY
	Received 622 bytes from 199.9.14.201
	;; Answer received from 199.9.14.201 (622 bytes) ;; HEADER SECTION ;; id = 3412 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 6 arcount = 9 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option: ;; QUESTION SECTION (1 record) ;; GOV. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (6 records) GOV. 172800 IN NS a.gov-servers.net. GOV. 172800 IN NS b.gov-servers.net. GOV. 172800 IN NS c.gov-servers.net. GOV. 172800 IN NS d.gov-servers.net. GOV. 86400 IN DS ( 7698 8 2 6bc949e638442ead0bdaf0935763c8d003760384ff15ebbd5ce86bb5559561f0 ) GOV. 86400 IN RRSIG ( DS 8 1 86400 20210504220000 20210421210000 14631 . neNcEL5svdpJboSvCA+APK3KufuPIO46bPXaX0L+wE2H1nrU6g8caNctZy4c+dh1PPC37fu6Vv7p Ms2kWW/AIWLClxMB949tRwGiWv2oSJs7I0QK8qpNtq0NiYbq2Z0j/ZZTuvhj4Hw3eSZkJbJfmacp iQ0+6xBoYa2wsmaslO76AFzjBwJYgOkjGYmMpsPsLdl3rwuuZK2XkTR0eXUo0RlplxqE+E6Ps8tl tK/7wlsSFpwWn0Vrt8ntcGulTsa5Mb4nCTAiGWJohceq+4hpIk8ZiDKhrUpR9czZzqPOgXB0dyBF qjkZzYnrvdcdQJgODAxt78pylFWJCRnGxKc56w== ) ;; ADDITIONAL SECTION (9 records) a.gov-servers.net. 172800 IN A 69.36.157.30 a.gov-servers.net. 172800 IN AAAA 2001:500:4431::2:30 b.gov-servers.net. 172800 IN A 209.112.123.30 b.gov-servers.net. 172800 IN AAAA 2620:74:27::2:30 c.gov-servers.net. 172800 IN A 69.36.153.30 c.gov-servers.net. 172800 IN AAAA 2620:74:28::2:30 d.gov-servers.net. 172800 IN A 81.19.194.30 d.gov-servers.net. 172800 IN AAAA 2620:74:29::2:30 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option:
	Found child zone GOV

GOV

	Checking DS between . and GOV
	Query to g.root-servers.net for GOV/DS
	Received 370 bytes from 192.112.36.4
	;; Answer received from 192.112.36.4 (370 bytes) ;; HEADER SECTION ;; id = 34871 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option: ;; QUESTION SECTION (1 record) ;; GOV. IN DS ;; ANSWER SECTION (2 records) gov. 86400 IN DS ( 7698 8 2 6bc949e638442ead0bdaf0935763c8d003760384ff15ebbd5ce86bb5559561f0 ) gov. 86400 IN RRSIG ( DS 8 1 86400 20210504220000 20210421210000 14631 . neNcEL5svdpJboSvCA+APK3KufuPIO46bPXaX0L+wE2H1nrU6g8caNctZy4c+dh1PPC37fu6Vv7p Ms2kWW/AIWLClxMB949tRwGiWv2oSJs7I0QK8qpNtq0NiYbq2Z0j/ZZTuvhj4Hw3eSZkJbJfmacp iQ0+6xBoYa2wsmaslO76AFzjBwJYgOkjGYmMpsPsLdl3rwuuZK2XkTR0eXUo0RlplxqE+E6Ps8tl tK/7wlsSFpwWn0Vrt8ntcGulTsa5Mb4nCTAiGWJohceq+4hpIk8ZiDKhrUpR9czZzqPOgXB0dyBF qjkZzYnrvdcdQJgODAxt78pylFWJCRnGxKc56w== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option:
	Found 1 DS records for GOV in the . zone
	DS=7698/SHA-256 has algorithm RSASHA256
	Found 1 RRSIGs over DS RRset
	`gov. 86400 IN RRSIG ( DS 8 1 86400 20210504220000 20210421210000 14631 . neNcEL5svdpJboSvCA+APK3KufuPIO46bPXaX0L+wE2H1nrU6g8caNctZy4c+dh1PPC37fu6Vv7p Ms2kWW/AIWLClxMB949tRwGiWv2oSJs7I0QK8qpNtq0NiYbq2Z0j/ZZTuvhj4Hw3eSZkJbJfmacp iQ0+6xBoYa2wsmaslO76AFzjBwJYgOkjGYmMpsPsLdl3rwuuZK2XkTR0eXUo0RlplxqE+E6Ps8tl tK/7wlsSFpwWn0Vrt8ntcGulTsa5Mb4nCTAiGWJohceq+4hpIk8ZiDKhrUpR9czZzqPOgXB0dyBF qjkZzYnrvdcdQJgODAxt78pylFWJCRnGxKc56w== )`
	RRSIG=14631 and DNSKEY=14631 verifies the DS RRset
	DS=7698/SHA-256 is now in the chain-of-trust
	`gov. 86400 IN DS ( 7698 8 2 6bc949e638442ead0bdaf0935763c8d003760384ff15ebbd5ce86bb5559561f0 )`
	Query to a.gov-servers.net for GOV/DNSKEY
	Received 777 bytes from 69.36.157.30
	;; Answer received from 69.36.157.30 (777 bytes) ;; HEADER SECTION ;; id = 30729 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; GOV. IN DNSKEY ;; ANSWER SECTION (3 records) GOV. 86400 IN DNSKEY ( 257 3 8 AQO8daaz7B+yshOfL60rytKd9aOSujgponEw3fwBMEC3/+e9XzHw2k+VKnbJTZ+QaVtpfUd1q9HK ZIv/ck83Gl5TjYKE5jtUZ2kpEDZfVNGv6yx0smtWAXv1nCJS9ohnyOTd397eMojGDHqkEC+uojES cZheEkMxzgCZwDAs+/CSU7mSuHtCRZn19xlZUd5Gv7yDQ3mbOUwuy30oSk0z1Q5UUPpoihOugIZH FX6Jk7NLiW2wlqfq9qhV4zj7TiBiJY0mCc4zHN8/aq2VKDHp2Na7mWzvKyTy+SYQkBQ/08LbPwj9 YMc+uCzKL6sU/ObHv17EFhD8aPDftTHZvV9L+OZr ) ; Key ID = 7698 GOV. 86400 IN DNSKEY ( 256 3 8 AwEAAbexj/PgN9RGQ1TokFnYjJ87/rMFIqE/rXjWtsmwzxteOcKIVCUJAAWg0pIZZer88omuCVrq +fAz0iBOgY48TRFWgyVFV9rm5esTGOEuCU6BTYj1Cb7zrpb/RayEw0yzVVZ0adT/AXbAsQhteTpV kgWK8K33gxq4wY70AK5KWdDCyj4v9uR6TS0mgbGdg7RzFCi8xeZoYP2PY5XOhAHFon0= ) ; Key ID = 48498 GOV. 86400 IN RRSIG ( DNSKEY 8 1 86400 20210504190254 20210419185754 7698 gov. ZUQqCCEYe1uWRzEtjSAi55l/uPdT1PBCAPVabl5T0bTDYGDYkEUq6tEFc/VB/eBfw2B2pGWSIGb5 hzuuYFXyRfbgM+uwLGpFejX5M1rIRxqMawk8jyalKiedBy2NaID8XUy6yB9zHTa3QfoaGgLjvH6l Zbj6346qKK7OqyYRriKnF0K2DWGjOgfmi7zmIV1HgQ/l4Fwm8EUcrIlPnhA+l6RT37PO3u5Af+Xy HHT5s8hoOwHRthbq0W3+fP1z3luZbFre5c4nR4/sReFkwUHp0JlsVBxOaHKvDqOGARhy5U8YIT8N V4j5TSyrf+7xO6W60UfdQRPymiBmBzNWTdgm2w== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found 2 DNSKEY records for GOV
	`GOV. 86400 IN DNSKEY ( 257 3 8 AQO8daaz7B+yshOfL60rytKd9aOSujgponEw3fwBMEC3/+e9XzHw2k+VKnbJTZ+QaVtpfUd1q9HK ZIv/ck83Gl5TjYKE5jtUZ2kpEDZfVNGv6yx0smtWAXv1nCJS9ohnyOTd397eMojGDHqkEC+uojES cZheEkMxzgCZwDAs+/CSU7mSuHtCRZn19xlZUd5Gv7yDQ3mbOUwuy30oSk0z1Q5UUPpoihOugIZH FX6Jk7NLiW2wlqfq9qhV4zj7TiBiJY0mCc4zHN8/aq2VKDHp2Na7mWzvKyTy+SYQkBQ/08LbPwj9 YMc+uCzKL6sU/ObHv17EFhD8aPDftTHZvV9L+OZr ) ; Key ID = 7698`
	`GOV. 86400 IN DNSKEY ( 256 3 8 AwEAAbexj/PgN9RGQ1TokFnYjJ87/rMFIqE/rXjWtsmwzxteOcKIVCUJAAWg0pIZZer88omuCVrq +fAz0iBOgY48TRFWgyVFV9rm5esTGOEuCU6BTYj1Cb7zrpb/RayEw0yzVVZ0adT/AXbAsQhteTpV kgWK8K33gxq4wY70AK5KWdDCyj4v9uR6TS0mgbGdg7RzFCi8xeZoYP2PY5XOhAHFon0= ) ; Key ID = 48498`
	DNSKEY=7698/SEP is now in the chain-of-trust
	DS=7698/SHA-256 verifies DNSKEY=7698/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`GOV. 86400 IN RRSIG ( DNSKEY 8 1 86400 20210504190254 20210419185754 7698 gov. ZUQqCCEYe1uWRzEtjSAi55l/uPdT1PBCAPVabl5T0bTDYGDYkEUq6tEFc/VB/eBfw2B2pGWSIGb5 hzuuYFXyRfbgM+uwLGpFejX5M1rIRxqMawk8jyalKiedBy2NaID8XUy6yB9zHTa3QfoaGgLjvH6l Zbj6346qKK7OqyYRriKnF0K2DWGjOgfmi7zmIV1HgQ/l4Fwm8EUcrIlPnhA+l6RT37PO3u5Af+Xy HHT5s8hoOwHRthbq0W3+fP1z3luZbFre5c4nR4/sReFkwUHp0JlsVBxOaHKvDqOGARhy5U8YIT8N V4j5TSyrf+7xO6W60UfdQRPymiBmBzNWTdgm2w== )`
	RRSIG=7698 and DNSKEY=7698/SEP verifies the DNSKEY RRset
	DNSKEY=48498 is now in the chain-of-trust
	Query to c.gov-servers.net for IDTHEFT.GOV/A
	Received 386 bytes from 69.36.153.30
	;; Answer received from 69.36.153.30 (386 bytes) ;; HEADER SECTION ;; id = 60984 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 6 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; IDTHEFT.GOV. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (6 records) IDTHEFT.GOV. 86400 IN NS dns3.l-secb.net. IDTHEFT.GOV. 86400 IN NS dns1.l-secb.net. IDTHEFT.GOV. 86400 IN NS dns2.l-secb.net. IDTHEFT.GOV. 3600 IN DS 24391 8 1 52730d0ed42f099a52fb76f3b612535ce2de0bae IDTHEFT.GOV. 3600 IN DS ( 24391 8 2 224c09512a9f44ec795195eb45215385dd04507d0532e46cd4776d010f2be422 ) IDTHEFT.GOV. 3600 IN RRSIG ( DS 8 2 3600 20210428231008 20210421231008 48498 gov. GrSuTFYGCkEmxNy7RyjZfCZaoFApX+4fC4A0gKw1FSyZslq19DhnbvpmX7Fs8ET+SA4QQwcLjdSF 4P15jcjBU9DW81bj5R283argWCj2bVXuQOotTKJ+hLvymGcFHSYljGXJ9fgFFTB0YqnRYILgqHRY SeQTzixN4ksLMGScmzEZtIrMrXD1hGkIpTWAVyDNzB7HOKlqPzwJXv3IYdkFVA== ) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Query to d.gov-servers.net for IDTHEFT.GOV/DNSKEY
	Received 386 bytes from 81.19.194.30
	;; Answer received from 81.19.194.30 (386 bytes) ;; HEADER SECTION ;; id = 20503 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 6 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; IDTHEFT.GOV. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (6 records) IDTHEFT.GOV. 86400 IN NS dns3.l-secb.net. IDTHEFT.GOV. 86400 IN NS dns1.l-secb.net. IDTHEFT.GOV. 86400 IN NS dns2.l-secb.net. IDTHEFT.GOV. 3600 IN DS 24391 8 1 52730d0ed42f099a52fb76f3b612535ce2de0bae IDTHEFT.GOV. 3600 IN DS ( 24391 8 2 224c09512a9f44ec795195eb45215385dd04507d0532e46cd4776d010f2be422 ) IDTHEFT.GOV. 3600 IN RRSIG ( DS 8 2 3600 20210428231008 20210421231008 48498 gov. GrSuTFYGCkEmxNy7RyjZfCZaoFApX+4fC4A0gKw1FSyZslq19DhnbvpmX7Fs8ET+SA4QQwcLjdSF 4P15jcjBU9DW81bj5R283argWCj2bVXuQOotTKJ+hLvymGcFHSYljGXJ9fgFFTB0YqnRYILgqHRY SeQTzixN4ksLMGScmzEZtIrMrXD1hGkIpTWAVyDNzB7HOKlqPzwJXv3IYdkFVA== ) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found child zone IDTHEFT.GOV

IDTHEFT.GOV

	Checking DS between GOV and IDTHEFT.GOV
	Query to d.gov-servers.net for IDTHEFT.GOV/DS
	Received 319 bytes from 81.19.194.30
	;; Answer received from 81.19.194.30 (319 bytes) ;; HEADER SECTION ;; id = 50647 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; IDTHEFT.GOV. IN DS ;; ANSWER SECTION (3 records) IDTHEFT.GOV. 3600 IN DS 24391 8 1 52730d0ed42f099a52fb76f3b612535ce2de0bae IDTHEFT.GOV. 3600 IN DS ( 24391 8 2 224c09512a9f44ec795195eb45215385dd04507d0532e46cd4776d010f2be422 ) IDTHEFT.GOV. 3600 IN RRSIG ( DS 8 2 3600 20210428231008 20210421231008 48498 gov. GrSuTFYGCkEmxNy7RyjZfCZaoFApX+4fC4A0gKw1FSyZslq19DhnbvpmX7Fs8ET+SA4QQwcLjdSF 4P15jcjBU9DW81bj5R283argWCj2bVXuQOotTKJ+hLvymGcFHSYljGXJ9fgFFTB0YqnRYILgqHRY SeQTzixN4ksLMGScmzEZtIrMrXD1hGkIpTWAVyDNzB7HOKlqPzwJXv3IYdkFVA== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found 2 DS records for IDTHEFT.GOV in the GOV zone
	DS=24391/SHA-1 has algorithm RSASHA256
	DS=24391/SHA-256 has algorithm RSASHA256
	Found 1 RRSIGs over DS RRset
	`IDTHEFT.GOV. 3600 IN RRSIG ( DS 8 2 3600 20210428231008 20210421231008 48498 gov. GrSuTFYGCkEmxNy7RyjZfCZaoFApX+4fC4A0gKw1FSyZslq19DhnbvpmX7Fs8ET+SA4QQwcLjdSF 4P15jcjBU9DW81bj5R283argWCj2bVXuQOotTKJ+hLvymGcFHSYljGXJ9fgFFTB0YqnRYILgqHRY SeQTzixN4ksLMGScmzEZtIrMrXD1hGkIpTWAVyDNzB7HOKlqPzwJXv3IYdkFVA== )`
	RRSIG=48498 and DNSKEY=48498 verifies the DS RRset
	DS=24391/SHA-1 is now in the chain-of-trust
	`IDTHEFT.GOV. 3600 IN DS 24391 8 1 52730d0ed42f099a52fb76f3b612535ce2de0bae`
	`IDTHEFT.GOV. 3600 IN DS ( 24391 8 2 224c09512a9f44ec795195eb45215385dd04507d0532e46cd4776d010f2be422 )`
	Query to dns3.l-secb.net for IDTHEFT.GOV/DNSKEY
	Received 1253 bytes from 35.163.67.210
	;; Answer received from 35.163.67.210 (1253 bytes) ;; HEADER SECTION ;; id = 37958 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 6 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; IDTHEFT.GOV. IN DNSKEY ;; ANSWER SECTION (6 records) IDTHEFT.GOV. 86400 IN DNSKEY ( 256 3 8 AwEAAbyqPLxm5IqCdBAFx/qRSHSP67RfjzR+hS6vvH9E9izc18RD3OWuF3oiCuAoTPelBSSlXRFb Fl8BMZpG452MnYlAonq60j7xXIJHTyhaZ5AbqrOpXCy6+10B5eyJzDs+3BskjkIps8O4AQIxdBUI qNrOXZyJNyIlcSWelvOidnWF ) ; Key ID = 11751 IDTHEFT.GOV. 86400 IN DNSKEY ( 256 3 8 AwEAAc6zwA3mrgnocYAOdR8v0GXW7R9lwQgWykuG8PX7+GABFDgL11AaV6vLKvGq66bUtxR+QV9C g0hDl4HcvDkYja/Wd/qDbxJZNtNVvpy0bne88TUHcs4dLGnME0AX3ZBW22OpaTA+Qc/ef66STr+C d5a42cKP46L4lSz/gugqdzoR ) ; Key ID = 55431 IDTHEFT.GOV. 86400 IN DNSKEY ( 257 3 8 AwEAAbVZG7jk44lOYSe9Jl9GA8JaHL/jeSkljiVzXzV5vDIa7lMfAg2LaOy89AO+ZeMw3RRgbZzz QoKosuKuovwqw1iaCww5/T1qCzv8qG6eofXy7iuEzTq2MondT22omvN8rvzg7XrcEkQXr1jvoTow bsFZhBWqqwT8AawGZzF5g8Imea7FOTVQEA0iOqyjAZhRoqEOfhk1DJzomn9bqLhD0YgwgmHRbBgL cJU9aRXL7ZU3iMvh6nhIoey408rsBTl+SvBQG4BOViOqXWQMMtEiMYtEnzVLQsQzYko46LkWYg6h mE7Ywj+MD0y+WYNm3okkRLJALzZ2Bz5wwYWS4T7tzIM= ) ; Key ID = 24391 IDTHEFT.GOV. 86400 IN RRSIG ( DNSKEY 8 2 86400 20210428164359 20210421164359 11751 idtheft.gov. Rak7cSQkbgdnpZGkoBYbf/EhUckAuuZLtly7C8TIKdCO5OfEuCiA2qZwYDUUaI77QmMCCjZYQqJs 97ooSqjahn/NbQ7bMO1pE1KF2MXb4oxxBBl37P3c4oAbNzI8FMQGGZTjph3qLofl0P246fXI4DDG aLJyBkdVU/2KZYyLNYE= ) IDTHEFT.GOV. 86400 IN RRSIG ( DNSKEY 8 2 86400 20210428164359 20210421164359 55431 idtheft.gov. KXt6X/dmfuRjbPeUYlDhJDyRypyBgnjwzFY1+mzwnxAzwlfoHHqnRHHIrt7SX1T/Zbc/gSGJcwHL goPoVu9r+xhpU4wmll3Lt2p7c9l1WLF1mb/2QWcW2cesq2i28kOtynwmi6MnjcHjR9NwuxTx13u/ KobBsW5nYvBGwuD3yT0= ) IDTHEFT.GOV. 86400 IN RRSIG ( DNSKEY 8 2 86400 20210428164359 20210421164359 24391 idtheft.gov. rkN+Qlgh1Byw4aZzM10xAEkuwM0rhIqpF8lRaROPSGH1HT8mRfcYn7btRnxSb2WnueN89t8JDglk VBCF30pXIgf9IYB0/g/1+HKw2DxpJ6eR6GOkL268dcz0b1r/rVyPRdCLPcWXFaBYJfBt2XDxIRJI lXDJNBsHhdKutabZSs+oaUmdi0ETqfeLYMOx2VmUJHx2lVHaAjeH3hANKleIwSwRmQbPVbV47xPZ +F4UJln2yn6NIk6IQ7VDwmecyl6aYaUeCogtt35vvTiiV10H3fLRUePRnTDZLACOziiq9MBOZhOB e9jnwuMgcR3htJnIrDSo6TTGboDJ6dUs2ylG3A== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found 3 DNSKEY records for IDTHEFT.GOV
	`IDTHEFT.GOV. 86400 IN DNSKEY ( 256 3 8 AwEAAbyqPLxm5IqCdBAFx/qRSHSP67RfjzR+hS6vvH9E9izc18RD3OWuF3oiCuAoTPelBSSlXRFb Fl8BMZpG452MnYlAonq60j7xXIJHTyhaZ5AbqrOpXCy6+10B5eyJzDs+3BskjkIps8O4AQIxdBUI qNrOXZyJNyIlcSWelvOidnWF ) ; Key ID = 11751`
	`IDTHEFT.GOV. 86400 IN DNSKEY ( 256 3 8 AwEAAc6zwA3mrgnocYAOdR8v0GXW7R9lwQgWykuG8PX7+GABFDgL11AaV6vLKvGq66bUtxR+QV9C g0hDl4HcvDkYja/Wd/qDbxJZNtNVvpy0bne88TUHcs4dLGnME0AX3ZBW22OpaTA+Qc/ef66STr+C d5a42cKP46L4lSz/gugqdzoR ) ; Key ID = 55431`
	`IDTHEFT.GOV. 86400 IN DNSKEY ( 257 3 8 AwEAAbVZG7jk44lOYSe9Jl9GA8JaHL/jeSkljiVzXzV5vDIa7lMfAg2LaOy89AO+ZeMw3RRgbZzz QoKosuKuovwqw1iaCww5/T1qCzv8qG6eofXy7iuEzTq2MondT22omvN8rvzg7XrcEkQXr1jvoTow bsFZhBWqqwT8AawGZzF5g8Imea7FOTVQEA0iOqyjAZhRoqEOfhk1DJzomn9bqLhD0YgwgmHRbBgL cJU9aRXL7ZU3iMvh6nhIoey408rsBTl+SvBQG4BOViOqXWQMMtEiMYtEnzVLQsQzYko46LkWYg6h mE7Ywj+MD0y+WYNm3okkRLJALzZ2Bz5wwYWS4T7tzIM= ) ; Key ID = 24391`
	DNSKEY=24391/SEP is now in the chain-of-trust
	DS=24391/SHA-1 verifies DNSKEY=24391/SEP
	DS=24391/SHA-256 verifies DNSKEY=24391/SEP
	Found 3 RRSIGs over DNSKEY RRset
	`IDTHEFT.GOV. 86400 IN RRSIG ( DNSKEY 8 2 86400 20210428164359 20210421164359 11751 idtheft.gov. Rak7cSQkbgdnpZGkoBYbf/EhUckAuuZLtly7C8TIKdCO5OfEuCiA2qZwYDUUaI77QmMCCjZYQqJs 97ooSqjahn/NbQ7bMO1pE1KF2MXb4oxxBBl37P3c4oAbNzI8FMQGGZTjph3qLofl0P246fXI4DDG aLJyBkdVU/2KZYyLNYE= )`
	`IDTHEFT.GOV. 86400 IN RRSIG ( DNSKEY 8 2 86400 20210428164359 20210421164359 55431 idtheft.gov. KXt6X/dmfuRjbPeUYlDhJDyRypyBgnjwzFY1+mzwnxAzwlfoHHqnRHHIrt7SX1T/Zbc/gSGJcwHL goPoVu9r+xhpU4wmll3Lt2p7c9l1WLF1mb/2QWcW2cesq2i28kOtynwmi6MnjcHjR9NwuxTx13u/ KobBsW5nYvBGwuD3yT0= )`
	`IDTHEFT.GOV. 86400 IN RRSIG ( DNSKEY 8 2 86400 20210428164359 20210421164359 24391 idtheft.gov. rkN+Qlgh1Byw4aZzM10xAEkuwM0rhIqpF8lRaROPSGH1HT8mRfcYn7btRnxSb2WnueN89t8JDglk VBCF30pXIgf9IYB0/g/1+HKw2DxpJ6eR6GOkL268dcz0b1r/rVyPRdCLPcWXFaBYJfBt2XDxIRJI lXDJNBsHhdKutabZSs+oaUmdi0ETqfeLYMOx2VmUJHx2lVHaAjeH3hANKleIwSwRmQbPVbV47xPZ +F4UJln2yn6NIk6IQ7VDwmecyl6aYaUeCogtt35vvTiiV10H3fLRUePRnTDZLACOziiq9MBOZhOB e9jnwuMgcR3htJnIrDSo6TTGboDJ6dUs2ylG3A== )`
	RRSIG=11751 and DNSKEY=11751 verifies the DNSKEY RRset
	RRSIG=55431 and DNSKEY=55431 verifies the DNSKEY RRset
	RRSIG=24391 and DNSKEY=24391/SEP verifies the DNSKEY RRset
	DNSKEY=11751 is now in the chain-of-trust
	DNSKEY=55431 is now in the chain-of-trust
	Query to dns3.l-secb.net for IDTHEFT.GOV/A
	Received 398 bytes from 35.163.67.210
	;; Answer received from 35.163.67.210 (398 bytes) ;; HEADER SECTION ;; id = 41585 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; IDTHEFT.GOV. IN A ;; ANSWER SECTION (3 records) IDTHEFT.GOV. 30 IN A 18.204.180.152 IDTHEFT.GOV. 30 IN RRSIG ( A 8 2 30 20210427195918 20210420195918 11751 idtheft.gov. XH84D4PwcUPqEWRe9Acscwkx1gz+1NssAqN1mhItWmVf4LYN2ACZUKb9mJpoLv44R5viHbRuHG/9 /NAOpXpbY8D32tKhPHfJpTEJoqdpcdbQXKLoY9BovQ8mi5jRDFLWSa+zzVXFkj1K49viCqXcFmqn Fs7EGVVDRdxDFrXUWTc= ) IDTHEFT.GOV. 30 IN RRSIG ( A 8 2 30 20210428171821 20210421171821 55431 idtheft.gov. pomj47WwDoNpE7LEtO0ULv/Um/v6sv9JW/CfFxcxYOBBuzm8Nf/G+B/BH2isd/cBOG5VBpAXBUHA TgoWVup0w0gv2XDpbvVxA5U8hq2PY4suyS2c60p2HtSj2Mkj2ai4BwH/dUEMLGLrzY4TndVHn6PN L66FZcUsFGFIjZn0CfA= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	dns3.l-secb.net is authoritative for IDTHEFT.GOV
	Found RRSIG signed by idtheft.gov zone
	Query to dns2.l-secb.net for IDTHEFT.GOV/SOA
	Received 970 bytes from 205.130.212.37
	;; Answer received from 205.130.212.37 (970 bytes) ;; HEADER SECTION ;; id = 36376 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 5 arcount = 7 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; IDTHEFT.GOV. IN SOA ;; ANSWER SECTION (3 records) IDTHEFT.GOV. 43200 IN SOA ( dns1.l-secb.net. hostmaster.l-secb.net. 2021020301 ;serial 10800 ;refresh 3600 ;retry 2419200 ;expire 900 ;minimum ) IDTHEFT.GOV. 43200 IN RRSIG ( SOA 8 2 43200 20210429014644 20210422014644 11751 idtheft.gov. FI/FFgsi2MjIw+AfecIfuNzdsOj8XNaYeFdG52zklGcDMH6mbYfgi/mlG4Z/h96loxH7ZRiMaNq4 VXvkmneC5E/ZQd+RsPbQfTJtFJGi3/Hxm+9G/vCxavKTLpCtiDpCqtCvFrx+EDlLBWdRPnkaHSjp sou3UBSs3QiMWQGS1+Q= ) IDTHEFT.GOV. 43200 IN RRSIG ( SOA 8 2 43200 20210429014644 20210422014644 55431 idtheft.gov. tvRaMY7Fs4scFpONzOy6ouZBbNRRUhG92ANPtAkA+ZpyptzG9PJVkPxDboKGQpR02BB70T/YUe+F 1SGmED6h5CoURXXjqcxhMPGbSa8wpFj6a/HQJuvT/YlYqqz5++c3CxxOfskuPdxBRWcolPmh9jqO t/yTcgml9M8xUdVcBIo= ) ;; AUTHORITY SECTION (5 records) IDTHEFT.GOV. 43200 IN NS dns2.l-secb.net. IDTHEFT.GOV. 43200 IN NS dns3.l-secb.net. IDTHEFT.GOV. 43200 IN NS dns1.l-secb.net. IDTHEFT.GOV. 43200 IN RRSIG ( NS 8 2 43200 20210428064315 20210421064315 11751 idtheft.gov. RuNZVnAsrXDoZGPpklBjhry4Omj+5IaScoA2Kx4J9dAA7oi82wJiyNz0S5nZ9CgkXxAZpmxZRbc8 2FpVCIksjQ3ujhjSEJUyELJQy9e7Bqibm1gaGW7CysUoI1yhumYhnp7Y3hlgrCbM68WKJ1fcqOIN CVzBuhgwNSifUE6i5Ig= ) IDTHEFT.GOV. 43200 IN RRSIG ( NS 8 2 43200 20210428180736 20210421180736 55431 idtheft.gov. Os5pPokYQrQd0jA0tcXX1QVmS8z9arYtj4mhoXqKu28OJvxpyThaXjxP6gCwojQqknVMXqsVGIbO PN+/wi7JfH8k3KseyoKum78adxWPOws2xKeGnJK/eh3R18zv1+W9m8nUfSFKlwKZOUrdh7w3sFx0 0n2ikJQyr/+Glk+EBCA= ) ;; ADDITIONAL SECTION (7 records) dns1.l-secb.net. 43200 IN A 198.77.70.37 dns2.l-secb.net. 43200 IN A 205.130.212.37 dns3.l-secb.net. 43200 IN A 35.163.67.210 dns1.l-secb.net. 43200 IN AAAA 2001:1900:2268:770:198:77:70:37 dns2.l-secb.net. 43200 IN AAAA 2001:1900:2268:512:205:130:212:37 dns3.l-secb.net. 43200 IN AAAA 2600:1f14:a2e:4b00:35:163:67:210 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Query to dns1.l-secb.net for IDTHEFT.GOV/SOA
	Received 970 bytes from 198.77.70.37
	;; Answer received from 198.77.70.37 (970 bytes) ;; HEADER SECTION ;; id = 19992 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 5 arcount = 7 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; IDTHEFT.GOV. IN SOA ;; ANSWER SECTION (3 records) IDTHEFT.GOV. 43200 IN SOA ( dns1.l-secb.net. hostmaster.l-secb.net. 2021020301 ;serial 10800 ;refresh 3600 ;retry 2419200 ;expire 900 ;minimum ) IDTHEFT.GOV. 43200 IN RRSIG ( SOA 8 2 43200 20210428064315 20210421064315 11751 idtheft.gov. WGTdLq+luOkHy+gQyKRYhIOC4GNjtTY5bq7c1EBfBFfDvONO2OO6bi7rGlT0biSlVweJMEZOlXLd KnrAv8oqkGzD/xGruxQdlJh4H4Phu1126/4f5kiYvY2imot2bmCL6T+MrTU4chWShgINHJJfFBMS g3B3FBn6gL9xj9KPTgE= ) IDTHEFT.GOV. 43200 IN RRSIG ( SOA 8 2 43200 20210428174333 20210421174333 55431 idtheft.gov. ZFGqqPgi9Gu8GE38D9UH4sn+amGOm8RGXDXV3qe8HDfkpkRkws/Q9ZLFoCQhhRypi5dmdoHGl1Ci 9DiJG46L1YDNJdg2QyPVnkkZBAu1eByVtzn1aeRu5VlnQ9boK86XTNBEYNkhNESmoJoqXZF/BjLh Ad1w1Lpzz07Wfe9C50I= ) ;; AUTHORITY SECTION (5 records) IDTHEFT.GOV. 43200 IN NS dns3.l-secb.net. IDTHEFT.GOV. 43200 IN NS dns1.l-secb.net. IDTHEFT.GOV. 43200 IN NS dns2.l-secb.net. IDTHEFT.GOV. 43200 IN RRSIG ( NS 8 2 43200 20210428022755 20210421022755 11751 idtheft.gov. dK6MnD481Ctlpc3VTmXbkRyQshCwwStxhTe0ztzGj6Gq5QEXpv21XvSgII4fzG1c5OXrUvR6UP3i lNKE7goXmlG/O7vfoA99pDeBvsIFvxgbc9n1ny08DqgEEXsrGxpOps1ZU33qnTOHAN4ztuG0mxA7 YcS6PLwQxxW8jCiWkaE= ) IDTHEFT.GOV. 43200 IN RRSIG ( NS 8 2 43200 20210428174333 20210421174333 55431 idtheft.gov. g3ELzIgB9FdbEkw5F3s3bXcUqgrHEqYsIM/4aVQpjFelUHsjZAo9AseEs1qTxy2ZMNmRfnCm+n1+ gN8aJfskERPQwhs6sX7u5ocBGJaXSm3I6Y5smdT5D+BbO69S5ep/pThC1tiSrX+UIeIKhcFuGpcb TzffpNa5cN0hku5M7uc= ) ;; ADDITIONAL SECTION (7 records) dns1.l-secb.net. 43200 IN A 198.77.70.37 dns2.l-secb.net. 43200 IN A 205.130.212.37 dns3.l-secb.net. 43200 IN A 35.163.67.210 dns1.l-secb.net. 43200 IN AAAA 2001:1900:2268:770:198:77:70:37 dns2.l-secb.net. 43200 IN AAAA 2001:1900:2268:512:205:130:212:37 dns3.l-secb.net. 43200 IN AAAA 2600:1f14:a2e:4b00:35:163:67:210 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Query to dns3.l-secb.net for IDTHEFT.GOV/A
	Received 398 bytes from 35.163.67.210
	;; Answer received from 35.163.67.210 (398 bytes) ;; HEADER SECTION ;; id = 58837 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; IDTHEFT.GOV. IN A ;; ANSWER SECTION (3 records) IDTHEFT.GOV. 30 IN A 18.204.180.152 IDTHEFT.GOV. 30 IN RRSIG ( A 8 2 30 20210427232324 20210420232324 11751 idtheft.gov. dI6SLuEfBeM4gILWgSU034Fuc6mqQ0B6Xf3Sb0AIvMEbnxBK63cHpbbJi7Il3SKxs0NJTovweWa1 adEdfFFUJX8aCOpp/jvaSHhA85j68sDmoiN8DQut4yrhUAwHma7MPd/jUReOJ0rX6b6jKPOXonNM Y2TdnZp3TIhX/MY8TJg= ) IDTHEFT.GOV. 30 IN RRSIG ( A 8 2 30 20210428165419 20210421165419 55431 idtheft.gov. izg36W/9CPhIYpS117zAzZ4VJsuNK9SX+D1YhaQ9Hf4BgtOgVZdI+bKFiewMcKKyAgAjEX9cMTV9 S93sZKYhNlRZ/NUmCBlmjiTF5zo1O1jnuLrtnGKKLwpyJy3AwmHotgrcbvOjmGVFnEWrTZkPQkHf sRMEE8+ugEq2Xmk8sO8= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	IDTHEFT.GOV A RR has value 18.204.180.152
	Found 2 RRSIGs over A RRset
	`IDTHEFT.GOV. 30 IN RRSIG ( A 8 2 30 20210427232324 20210420232324 11751 idtheft.gov. dI6SLuEfBeM4gILWgSU034Fuc6mqQ0B6Xf3Sb0AIvMEbnxBK63cHpbbJi7Il3SKxs0NJTovweWa1 adEdfFFUJX8aCOpp/jvaSHhA85j68sDmoiN8DQut4yrhUAwHma7MPd/jUReOJ0rX6b6jKPOXonNM Y2TdnZp3TIhX/MY8TJg= )`
	`IDTHEFT.GOV. 30 IN RRSIG ( A 8 2 30 20210428165419 20210421165419 55431 idtheft.gov. izg36W/9CPhIYpS117zAzZ4VJsuNK9SX+D1YhaQ9Hf4BgtOgVZdI+bKFiewMcKKyAgAjEX9cMTV9 S93sZKYhNlRZ/NUmCBlmjiTF5zo1O1jnuLrtnGKKLwpyJy3AwmHotgrcbvOjmGVFnEWrTZkPQkHf sRMEE8+ugEq2Xmk8sO8= )`
	RRSIG=11751 and DNSKEY=11751 verifies the A RRset
	RRSIG=55431 and DNSKEY=55431 verifies the A RRset

IDTHEFT.GOV

	Query to dns2.l-secb.net for IDTHEFT.GOV/A
	Received 398 bytes from 205.130.212.37
	;; Answer received from 205.130.212.37 (398 bytes) ;; HEADER SECTION ;; id = 57496 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; IDTHEFT.GOV. IN A ;; ANSWER SECTION (3 records) IDTHEFT.GOV. 30 IN A 18.204.180.152 IDTHEFT.GOV. 30 IN RRSIG ( A 8 2 30 20210427214008 20210420214008 11751 idtheft.gov. ho51s0ZCIJJRAYSfZ1sdrpeLXHats3lDaBcsYjQXPdLpKCOEJ66For4g44YSk7KzZWnnwVi8d0yU 9RPbAaQUOxjtR5XPu13/1R1Y2lQ3r+4HqCRJxXlU14Js5R7RFukBwQ41/TWJ++0SK3CbsgCypM+s 0pvYdmztCzceEdNPt6g= ) IDTHEFT.GOV. 30 IN RRSIG ( A 8 2 30 20210428165418 20210421165418 55431 idtheft.gov. zYL2/mQBa9Ilm73rGIyvkFRzs4ErhSAGjeXv+I0BoVBNtTDnOU/bf0sax4i8I3gT54D9BT8nR8YC sjwup0h0omQlbDcuunX5kXZekzjAbQJQ4dOZG2j4JzeP+tnUe92ANsf0FCDdyyZgzGa2sS8j/hnx d5lAfJF825GEPcZ3fNA= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	dns2.l-secb.net is authoritative for IDTHEFT.GOV
	Found RRSIG signed by idtheft.gov zone
	Query to dns2.l-secb.net for IDTHEFT.GOV/A
	Received 398 bytes from 205.130.212.37
	;; Answer received from 205.130.212.37 (398 bytes) ;; HEADER SECTION ;; id = 7597 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; IDTHEFT.GOV. IN A ;; ANSWER SECTION (3 records) IDTHEFT.GOV. 30 IN A 35.161.201.74 IDTHEFT.GOV. 30 IN RRSIG ( A 8 2 30 20210427191316 20210420191316 11751 idtheft.gov. MVJipVZfOw48XmMldq6myLwGyMvqDrE12Nuos0FCoNP0uAPu5t+31ibbKxqT9XLmK3q7s0t+MHxa uPsVSoRyBFb9C5ObqKG4OrfAP4YO+UZyzncx66ScUlwXCryG8s8cCgFiQ8mfV8a+85xnHD/L2JPZ MR25Xty3g1x2pWUDq+4= ) IDTHEFT.GOV. 30 IN RRSIG ( A 8 2 30 20210428170741 20210421170741 55431 idtheft.gov. WHljXVD9GeeZrXovO9AGwlodz9u0deIIEB4IXqUWg4t98AfoouD7HpSa9NKZjretJEe+/R8N5u9Y MycBNkiLdPB238hu4r3PXazuxOI66aIngTHPy0rvwtxUsctrE2q5uoXt+4FGuRMazgX/wjbseMg3 myfn2IGmZy9SEAvhpk0= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	IDTHEFT.GOV A RR has value 35.161.201.74
	Found 2 RRSIGs over A RRset
	`IDTHEFT.GOV. 30 IN RRSIG ( A 8 2 30 20210427191316 20210420191316 11751 idtheft.gov. MVJipVZfOw48XmMldq6myLwGyMvqDrE12Nuos0FCoNP0uAPu5t+31ibbKxqT9XLmK3q7s0t+MHxa uPsVSoRyBFb9C5ObqKG4OrfAP4YO+UZyzncx66ScUlwXCryG8s8cCgFiQ8mfV8a+85xnHD/L2JPZ MR25Xty3g1x2pWUDq+4= )`
	`IDTHEFT.GOV. 30 IN RRSIG ( A 8 2 30 20210428170741 20210421170741 55431 idtheft.gov. WHljXVD9GeeZrXovO9AGwlodz9u0deIIEB4IXqUWg4t98AfoouD7HpSa9NKZjretJEe+/R8N5u9Y MycBNkiLdPB238hu4r3PXazuxOI66aIngTHPy0rvwtxUsctrE2q5uoXt+4FGuRMazgX/wjbseMg3 myfn2IGmZy9SEAvhpk0= )`
	RRSIG=11751 and DNSKEY=11751 verifies the A RRset
	RRSIG=55431 and DNSKEY=55431 verifies the A RRset

IDTHEFT.GOV

	Query to dns1.l-secb.net for IDTHEFT.GOV/A
	Received 398 bytes from 198.77.70.37
	;; Answer received from 198.77.70.37 (398 bytes) ;; HEADER SECTION ;; id = 19364 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; IDTHEFT.GOV. IN A ;; ANSWER SECTION (3 records) IDTHEFT.GOV. 30 IN A 18.204.180.152 IDTHEFT.GOV. 30 IN RRSIG ( A 8 2 30 20210427200321 20210420200321 11751 idtheft.gov. oI00bKqiM8Ko6i5eNSweYpSfLTz6SbUidFmGPt4po2qqFUmlmUg0Y5UeXfmbN6DSws2gHkPnL0LR V7aEyKWgTDdu3ujdjqPgvyRewA+svnQginrZLH9FMOr1dJQ6l9dtRPRJSFsV6B9XIV6NNZWyewLp UYqoeWQxwn8hiICFs7c= ) IDTHEFT.GOV. 30 IN RRSIG ( A 8 2 30 20210428164815 20210421164815 55431 idtheft.gov. NA8b3Z9cyg7GchuqmdPLYN4lo5z9eyTQ1//YizWjDr9Wbs4meUC2/ikFMXob7ajI1nbzuvqA3vd0 cm+KEdhNzI82Qkm3dxFte5i3RXRfnBFDXKmHG7nU22E1FLYupOgklrQftXOVVTC6VdFvFlmAkub7 5F0WUgQ2X/gxTSRWmBc= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	dns1.l-secb.net is authoritative for IDTHEFT.GOV
	Found RRSIG signed by idtheft.gov zone
	Query to dns1.l-secb.net for IDTHEFT.GOV/A
	Received 398 bytes from 198.77.70.37
	;; Answer received from 198.77.70.37 (398 bytes) ;; HEADER SECTION ;; id = 65278 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; IDTHEFT.GOV. IN A ;; ANSWER SECTION (3 records) IDTHEFT.GOV. 30 IN A 18.204.180.152 IDTHEFT.GOV. 30 IN RRSIG ( A 8 2 30 20210427195313 20210420195313 11751 idtheft.gov. IzwVki0rwO7LNHS+DaoKaXIAhNuOYpcdbHndUtSDqKi8eWSmf7D5NIgFV397QHd4yOiT1JprKP+5 J2whdvq4FRrrq16Dit07p2PMElDULCp2p3y33g9ZpqLhFli8ehuoL0Fanr2kGoWzwahyqGyyIRD0 G7zqV5uuZQzSGTD9PL8= ) IDTHEFT.GOV. 30 IN RRSIG ( A 8 2 30 20210428171543 20210421171543 55431 idtheft.gov. IcuSBDllPZtgnx49wGbDnGMNzuT28VZJ/MxzS4FK7D9yMEuqoDJYd2UpeCJSP1Cw2BEVE1fjw8m/ OF+JP0X0dx3CA+rhRwyCruy7tbt0ZfUOW96PXmlXfRwXJiJ3RhKkevEQIWEN9T5476MUArgc9rKz /FL0IPhZ6XtFBKvudXc= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	IDTHEFT.GOV A RR has value 18.204.180.152
	Found 2 RRSIGs over A RRset
	`IDTHEFT.GOV. 30 IN RRSIG ( A 8 2 30 20210427195313 20210420195313 11751 idtheft.gov. IzwVki0rwO7LNHS+DaoKaXIAhNuOYpcdbHndUtSDqKi8eWSmf7D5NIgFV397QHd4yOiT1JprKP+5 J2whdvq4FRrrq16Dit07p2PMElDULCp2p3y33g9ZpqLhFli8ehuoL0Fanr2kGoWzwahyqGyyIRD0 G7zqV5uuZQzSGTD9PL8= )`
	`IDTHEFT.GOV. 30 IN RRSIG ( A 8 2 30 20210428171543 20210421171543 55431 idtheft.gov. IcuSBDllPZtgnx49wGbDnGMNzuT28VZJ/MxzS4FK7D9yMEuqoDJYd2UpeCJSP1Cw2BEVE1fjw8m/ OF+JP0X0dx3CA+rhRwyCruy7tbt0ZfUOW96PXmlXfRwXJiJ3RhKkevEQIWEN9T5476MUArgc9rKz /FL0IPhZ6XtFBKvudXc= )`
	RRSIG=11751 and DNSKEY=11751 verifies the A RRset
	RRSIG=55431 and DNSKEY=55431 verifies the A RRset

Move your mouse over any or symbols for remediation hints.

Want a second opinion? Test IDTHEFT.GOV at dnsviz.net.

DNSSEC Analyzer

↓ Advanced options ↑ Advanced options

Trust Anchor:
Name Servers: