DNSSEC Debugger - STOPFAKES.GOV

Back to Verisign Labs Tools

Domain Name:

Detail: more(+) / less(-)

Time: 2026-04-21 13:25:42 UTC

Analyzing DNSSEC problems for STOPFAKES.GOV

DS=20326/SHA-256 is now in the chain-of-trust

DS=38696/SHA-256 is now in the chain-of-trust

	Checking DS between Trust Anchor and .
	`. IN DS ( 20326 8 2 e06d44b80b8f1d39a95c0b0d7c65d08458e880409bbc683457104237c7f8ec8d )`
	`. IN DS ( 38696 8 2 683d2d0acb8c9b712a1948b27f741219298d0a450d612c483af444a4c0fb2b16 )`
	Query to a.root-servers.net for ./DNSKEY
	Received 1139 bytes from 198.41.0.4
	;; Response received from [198.41.0.4] 1139 octets ;; HEADER SECTION ;; id = 16740 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 4 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; . IN DNSKEY ;; ANSWER SECTION (4 records) . 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; keytag 20326 . 172800 IN DNSKEY ( 256 3 8 AwEAAb5dDYffpgAJ8VUGLwQtWXPlQWsjIFJtCM00/XaKU+8ln+ofah3q2KxEIjvzQg+nqdxRj+8e mtPne1mtYcbFWP4Q9E+DniOJLK09R05FuzvGbrG7DDdRDUX/cedFdV7O8pFEAYpJqYNR9BCTIAV9 73DO2biauKSA31b7I2lK/woxoR1tf5cqJ4SMbJUviuHicAEoUi2ATswloZNWd5T5thmEFZnxFx7D 5UgKCY7oflS7+GU7dNJwEtmFnWYVETHN0kHXVz6aguouaAZp706YXNIoR/iTgQhmsR7XX+wL0Z8Q M2LxQIyU6vRZ06IyuJMGRMiwkSuGElbumyBt12JZbrU= ) ; keytag 54393 . 172800 IN DNSKEY ( 257 3 8 AwEAAa96jeuknZlaeSrvyAJj6ZHv28hhOKkx3rLGXVaC6rXTsDc449/cidltpkyGwCJNnOAlFNKF 2jBosZBU5eeHspaQWOmOElZsjICMQMC3aeHbGiShvZsx4wMYSjH8e7Vrhbu6irwCzVBApESjbUdp WWmEnhathWu1jo+siFUiRAAxm9qyJNg/wOZqqzL/dL/q8PkcRU5oUKEpUge71M3ej2/7CPqpdVwu MoTvoB+ZOT4YeGyxMvHmbrxlFzGOHOijtzN+u1TQNatX2XBuzZNQ1K+s2CXkPIZo7s6JgZyvaBev YtxPvYLw4z9mR7K2vaF18UYH9Z9GNUUeayffKC73PYc= ) ; keytag 38696 . 172800 IN RRSIG ( DNSKEY 8 0 172800 20260512000000 20260421000000 20326 . QvSkyDkWG8iEuZYOE0DYqVepxjeSy+/OYdhrVakvBjxk4j3bjMQV1sXumjCBQdvxk7ISiGzCythX xG7extNG3exqPszcbu5F2yGP3HpdcZlPb5AJLRs66pfUFz8/nHDCymq2X9a/vNmm50EiG5fKSf/p ZzWEyPVcnb0pWFkGXHHjqWeZVJEXM+Xf04M4zQtfzcwOoSZ7csseLr7ukYmcAMqkW0YdqHlA/9RK BGKhRRtwM+Zisdmz6a4nveAIqcPoi9sSY2CTZauROG5GpiYKqjDvZhlPi1jBBX6LmE6UFgQgJxof Gph1+dXE9iEohtXmBxt580NFS/T9/UcgZan6Yg== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 3 DNSKEY records for .
	`. 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; keytag 20326`
	`. 172800 IN DNSKEY ( 256 3 8 AwEAAb5dDYffpgAJ8VUGLwQtWXPlQWsjIFJtCM00/XaKU+8ln+ofah3q2KxEIjvzQg+nqdxRj+8e mtPne1mtYcbFWP4Q9E+DniOJLK09R05FuzvGbrG7DDdRDUX/cedFdV7O8pFEAYpJqYNR9BCTIAV9 73DO2biauKSA31b7I2lK/woxoR1tf5cqJ4SMbJUviuHicAEoUi2ATswloZNWd5T5thmEFZnxFx7D 5UgKCY7oflS7+GU7dNJwEtmFnWYVETHN0kHXVz6aguouaAZp706YXNIoR/iTgQhmsR7XX+wL0Z8Q M2LxQIyU6vRZ06IyuJMGRMiwkSuGElbumyBt12JZbrU= ) ; keytag 54393`
	`. 172800 IN DNSKEY ( 257 3 8 AwEAAa96jeuknZlaeSrvyAJj6ZHv28hhOKkx3rLGXVaC6rXTsDc449/cidltpkyGwCJNnOAlFNKF 2jBosZBU5eeHspaQWOmOElZsjICMQMC3aeHbGiShvZsx4wMYSjH8e7Vrhbu6irwCzVBApESjbUdp WWmEnhathWu1jo+siFUiRAAxm9qyJNg/wOZqqzL/dL/q8PkcRU5oUKEpUge71M3ej2/7CPqpdVwu MoTvoB+ZOT4YeGyxMvHmbrxlFzGOHOijtzN+u1TQNatX2XBuzZNQ1K+s2CXkPIZo7s6JgZyvaBev YtxPvYLw4z9mR7K2vaF18UYH9Z9GNUUeayffKC73PYc= ) ; keytag 38696`
	DNSKEY=20326/SEP is now in the chain-of-trust
	DS=20326/SHA-256 verifies DNSKEY=20326/SEP
	DNSKEY=38696/SEP is now in the chain-of-trust
	DS=38696/SHA-256 verifies DNSKEY=38696/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`. 172800 IN RRSIG ( DNSKEY 8 0 172800 20260512000000 20260421000000 20326 . QvSkyDkWG8iEuZYOE0DYqVepxjeSy+/OYdhrVakvBjxk4j3bjMQV1sXumjCBQdvxk7ISiGzCythX xG7extNG3exqPszcbu5F2yGP3HpdcZlPb5AJLRs66pfUFz8/nHDCymq2X9a/vNmm50EiG5fKSf/p ZzWEyPVcnb0pWFkGXHHjqWeZVJEXM+Xf04M4zQtfzcwOoSZ7csseLr7ukYmcAMqkW0YdqHlA/9RK BGKhRRtwM+Zisdmz6a4nveAIqcPoi9sSY2CTZauROG5GpiYKqjDvZhlPi1jBBX6LmE6UFgQgJxof Gph1+dXE9iEohtXmBxt580NFS/T9/UcgZan6Yg== )`
	RRSIG=20326 and DNSKEY=20326/SEP verifies the DNSKEY RRset
	DNSKEY=54393 is now in the chain-of-trust
	Query to i.root-servers.net for STOPFAKES.GOV/A
	Received 623 bytes from 192.36.148.17
	;; Response received from [192.36.148.17] 623 octets ;; HEADER SECTION ;; id = 48504 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 6 arcount = 9 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; STOPFAKES.GOV. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (6 records) gov. 172800 IN NS d.ns.gov. gov. 172800 IN NS b.ns.gov. gov. 172800 IN NS a.ns.gov. gov. 172800 IN NS c.ns.gov. gov. 86400 IN DS ( 2536 13 2 0baf26b7bbf313a859046fd3b1ee49ddfba33934cfb3e717c21e2a2935c2f259 ) gov. 86400 IN RRSIG ( DS 8 1 86400 20260504050000 20260421040000 54393 . t9vRXsqoHdq+yBhjSreT8vVH8Mks2R4MxIvD0kRKyRkYYwDTd06KvVDmz4N1nbxBaqTxIxEHUiTP 33T1IFdxHcecrvB/wSAARcp9nhESJTk2hs4KHnafqKZbXzAXSW6T9TAaOfOHluvqIpelrZtFhLw1 OSEeAOGq3P9EsXMLVMOFTQ13laLaZySv2hqNlmE7a/sZrZJenEFypFil9Oq52zEq7AYHFXY8yIF8 K/W6e78Q5GkVSFZoUKDJf+zQR3wbjtgU2SLRU4PX3faOQfspokCUi2twXjWdFCGy/pZxmJ4AVfPW eRPy7jEG73C38WuIXpBUpzO+rhAERVkRTGPyNw== ) ;; ADDITIONAL SECTION (9 records) a.ns.gov. 172800 IN A 199.33.230.1 b.ns.gov. 172800 IN A 199.33.231.1 c.ns.gov. 172800 IN A 199.33.232.1 d.ns.gov. 172800 IN A 199.33.233.1 a.ns.gov. 172800 IN AAAA 2001:503:ff40::1 b.ns.gov. 172800 IN AAAA 2001:503:ff41::1 c.ns.gov. 172800 IN AAAA 2001:503:ff42::1 d.ns.gov. 172800 IN AAAA 2001:503:ff43::1 ;; { "EDNS-VERSION": 0 }
	Query to j.root-servers.net for GOV/DNSKEY
	Received 610 bytes from 192.58.128.30
	;; Response received from [192.58.128.30] 610 octets ;; HEADER SECTION ;; id = 31521 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 6 arcount = 9 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1472, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; GOV. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (6 records) GOV. 172800 IN NS a.ns.GOV. GOV. 172800 IN NS b.ns.GOV. GOV. 172800 IN NS c.ns.GOV. GOV. 172800 IN NS d.ns.GOV. GOV. 86400 IN DS ( 2536 13 2 0baf26b7bbf313a859046fd3b1ee49ddfba33934cfb3e717c21e2a2935c2f259 ) GOV. 86400 IN RRSIG ( DS 8 1 86400 20260504050000 20260421040000 54393 . t9vRXsqoHdq+yBhjSreT8vVH8Mks2R4MxIvD0kRKyRkYYwDTd06KvVDmz4N1nbxBaqTxIxEHUiTP 33T1IFdxHcecrvB/wSAARcp9nhESJTk2hs4KHnafqKZbXzAXSW6T9TAaOfOHluvqIpelrZtFhLw1 OSEeAOGq3P9EsXMLVMOFTQ13laLaZySv2hqNlmE7a/sZrZJenEFypFil9Oq52zEq7AYHFXY8yIF8 K/W6e78Q5GkVSFZoUKDJf+zQR3wbjtgU2SLRU4PX3faOQfspokCUi2twXjWdFCGy/pZxmJ4AVfPW eRPy7jEG73C38WuIXpBUpzO+rhAERVkRTGPyNw== ) ;; ADDITIONAL SECTION (9 records) a.ns.GOV. 172800 IN A 199.33.230.1 a.ns.GOV. 172800 IN AAAA 2001:503:ff40::1 b.ns.GOV. 172800 IN A 199.33.231.1 b.ns.GOV. 172800 IN AAAA 2001:503:ff41::1 c.ns.GOV. 172800 IN A 199.33.232.1 c.ns.GOV. 172800 IN AAAA 2001:503:ff42::1 d.ns.GOV. 172800 IN A 199.33.233.1 d.ns.GOV. 172800 IN AAAA 2001:503:ff43::1 ;; { "EDNS-VERSION": 0 }
	Found child zone GOV

GOV

	Checking DS between . and GOV
	Query to c.root-servers.net for GOV/DS
	Received 370 bytes from 192.33.4.12
	;; Response received from [192.33.4.12] 370 octets ;; HEADER SECTION ;; id = 56151 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; GOV. IN DS ;; ANSWER SECTION (2 records) gov. 86400 IN DS ( 2536 13 2 0baf26b7bbf313a859046fd3b1ee49ddfba33934cfb3e717c21e2a2935c2f259 ) gov. 86400 IN RRSIG ( DS 8 1 86400 20260504050000 20260421040000 54393 . t9vRXsqoHdq+yBhjSreT8vVH8Mks2R4MxIvD0kRKyRkYYwDTd06KvVDmz4N1nbxBaqTxIxEHUiTP 33T1IFdxHcecrvB/wSAARcp9nhESJTk2hs4KHnafqKZbXzAXSW6T9TAaOfOHluvqIpelrZtFhLw1 OSEeAOGq3P9EsXMLVMOFTQ13laLaZySv2hqNlmE7a/sZrZJenEFypFil9Oq52zEq7AYHFXY8yIF8 K/W6e78Q5GkVSFZoUKDJf+zQR3wbjtgU2SLRU4PX3faOQfspokCUi2twXjWdFCGy/pZxmJ4AVfPW eRPy7jEG73C38WuIXpBUpzO+rhAERVkRTGPyNw== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 1 DS records for GOV in the . zone
	DS=2536/SHA-256 has algorithm ECDSAP256SHA256
	Found 1 RRSIGs over DS RRset
	`gov. 86400 IN RRSIG ( DS 8 1 86400 20260504050000 20260421040000 54393 . t9vRXsqoHdq+yBhjSreT8vVH8Mks2R4MxIvD0kRKyRkYYwDTd06KvVDmz4N1nbxBaqTxIxEHUiTP 33T1IFdxHcecrvB/wSAARcp9nhESJTk2hs4KHnafqKZbXzAXSW6T9TAaOfOHluvqIpelrZtFhLw1 OSEeAOGq3P9EsXMLVMOFTQ13laLaZySv2hqNlmE7a/sZrZJenEFypFil9Oq52zEq7AYHFXY8yIF8 K/W6e78Q5GkVSFZoUKDJf+zQR3wbjtgU2SLRU4PX3faOQfspokCUi2twXjWdFCGy/pZxmJ4AVfPW eRPy7jEG73C38WuIXpBUpzO+rhAERVkRTGPyNw== )`
	RRSIG=54393 and DNSKEY=54393 verifies the DS RRset
	DS=2536/SHA-256 is now in the chain-of-trust
	`gov. 86400 IN DS ( 2536 13 2 0baf26b7bbf313a859046fd3b1ee49ddfba33934cfb3e717c21e2a2935c2f259 )`
	Query to d.ns.GOV for GOV/DNSKEY
	Received 291 bytes from 199.33.233.1
	;; Response received from [199.33.233.1] 291 octets ;; HEADER SECTION ;; id = 47003 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 3 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; GOV. IN DNSKEY ;; ANSWER SECTION (3 records) GOV. 3600 IN DNSKEY ( 257 3 13 D6ZhJTObQw3+kcewWf5iTHbzD3uTdbs5xf0kQfP/VXZcDovWJd0DUgHlp2VC002aLDCwhLoPPVN2 VfyoPnjCqg== ) ; keytag 2536 GOV. 3600 IN DNSKEY ( 256 3 13 Of5kU9k4XfdcPwCK9k/zRJNu+Xspnw/BDd+1V6ZpDXRIpHe35BnHTZUBJN9gd6++HkiGXx2YnTji iO7/q+Yamg== ) ; keytag 35496 GOV. 3600 IN RRSIG ( DNSKEY 13 1 3600 20260605110630 20260405110630 2536 gov. 2iHkI6KNpypgXNkkvAKmXKicvyZoEJm+L3HYyM8970H7lTBFwiVYd2cum3MuioVU5WzMEQw1k1c6 /r/8XT47qw== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 2 DNSKEY records for GOV
	`GOV. 3600 IN DNSKEY ( 257 3 13 D6ZhJTObQw3+kcewWf5iTHbzD3uTdbs5xf0kQfP/VXZcDovWJd0DUgHlp2VC002aLDCwhLoPPVN2 VfyoPnjCqg== ) ; keytag 2536`
	`GOV. 3600 IN DNSKEY ( 256 3 13 Of5kU9k4XfdcPwCK9k/zRJNu+Xspnw/BDd+1V6ZpDXRIpHe35BnHTZUBJN9gd6++HkiGXx2YnTji iO7/q+Yamg== ) ; keytag 35496`
	DNSKEY=2536/SEP is now in the chain-of-trust
	DS=2536/SHA-256 verifies DNSKEY=2536/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`GOV. 3600 IN RRSIG ( DNSKEY 13 1 3600 20260605110630 20260405110630 2536 gov. 2iHkI6KNpypgXNkkvAKmXKicvyZoEJm+L3HYyM8970H7lTBFwiVYd2cum3MuioVU5WzMEQw1k1c6 /r/8XT47qw== )`
	RRSIG=2536 and DNSKEY=2536/SEP verifies the DNSKEY RRset
	DNSKEY=35496 is now in the chain-of-trust
	Query to a.ns.GOV for STOPFAKES.GOV/A
	Received 404 bytes from 199.33.230.1
	;; Response received from [199.33.230.1] 404 octets ;; HEADER SECTION ;; id = 27733 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 10 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; STOPFAKES.GOV. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (10 records) STOPFAKES.GOV. 10800 IN NS a1-109.akam.net. STOPFAKES.GOV. 10800 IN NS a12-66.akam.net. STOPFAKES.GOV. 10800 IN NS a13-67.akam.net. STOPFAKES.GOV. 10800 IN NS a4-64.akam.net. STOPFAKES.GOV. 10800 IN NS a5-65.akam.net. STOPFAKES.GOV. 10800 IN NS a8-66.akam.net. STOPFAKES.GOV. 3600 IN DS ( 37636 10 2 ffc5b73e30ed981d292d21e8a7b3e793d5d397fdad21ef0e9f5c26286f5596d7 ) STOPFAKES.GOV. 3600 IN DS ( 46873 10 1 81991b3db0d883349aaca6b192d6385c3c2662ef ) STOPFAKES.GOV. 3600 IN DS ( 46873 10 2 6c6ba424d94df25d40e64215ba567ddd7ef856e9a4f8adce88af9cc56a1a9f62 ) STOPFAKES.GOV. 3600 IN RRSIG ( DS 13 2 3600 20260422142543 20260420122543 35496 gov. Y8VLPNJwYOMT8PMOM6jIsE6YNb91wtC0DLYqB1cWvN1OwuxZ2v2AqS/3GT0mb2XnavmGBNfmLjD9 uuvMrEtikg== ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Query to a.ns.GOV for STOPFAKES.GOV/DNSKEY
	Received 404 bytes from 199.33.230.1
	;; Response received from [199.33.230.1] 404 octets ;; HEADER SECTION ;; id = 5860 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 10 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; STOPFAKES.GOV. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (10 records) STOPFAKES.GOV. 10800 IN NS a1-109.akam.net. STOPFAKES.GOV. 10800 IN NS a12-66.akam.net. STOPFAKES.GOV. 10800 IN NS a13-67.akam.net. STOPFAKES.GOV. 10800 IN NS a4-64.akam.net. STOPFAKES.GOV. 10800 IN NS a5-65.akam.net. STOPFAKES.GOV. 10800 IN NS a8-66.akam.net. STOPFAKES.GOV. 3600 IN DS ( 37636 10 2 ffc5b73e30ed981d292d21e8a7b3e793d5d397fdad21ef0e9f5c26286f5596d7 ) STOPFAKES.GOV. 3600 IN DS ( 46873 10 1 81991b3db0d883349aaca6b192d6385c3c2662ef ) STOPFAKES.GOV. 3600 IN DS ( 46873 10 2 6c6ba424d94df25d40e64215ba567ddd7ef856e9a4f8adce88af9cc56a1a9f62 ) STOPFAKES.GOV. 3600 IN RRSIG ( DS 13 2 3600 20260422142543 20260420122543 35496 gov. GYwZ946Zslt6ZbuTXoHBDJHl8+9UJLmCyJP8+mQ0k08JVhiZ30R7KdJaxoWl9CJZAQtX0HTnwY2o hBIQC7sbUg== ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found child zone STOPFAKES.GOV

STOPFAKES.GOV

	Checking DS between GOV and STOPFAKES.GOV
	Query to b.ns.GOV for STOPFAKES.GOV/DS
	Received 273 bytes from 199.33.231.1
	;; Response received from [199.33.231.1] 273 octets ;; HEADER SECTION ;; id = 25182 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 4 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; STOPFAKES.GOV. IN DS ;; ANSWER SECTION (4 records) STOPFAKES.GOV. 3600 IN DS ( 37636 10 2 ffc5b73e30ed981d292d21e8a7b3e793d5d397fdad21ef0e9f5c26286f5596d7 ) STOPFAKES.GOV. 3600 IN DS ( 46873 10 1 81991b3db0d883349aaca6b192d6385c3c2662ef ) STOPFAKES.GOV. 3600 IN DS ( 46873 10 2 6c6ba424d94df25d40e64215ba567ddd7ef856e9a4f8adce88af9cc56a1a9f62 ) STOPFAKES.GOV. 3600 IN RRSIG ( DS 13 2 3600 20260422142543 20260420122543 35496 gov. u1I3dasmpH2N6/wkPV9aD98DGeoaLk4ZDk9eaKSGBNgG/iZOt1D6PZgKqJqcLD0osVP7wEo/jNqt 2ghBx9oVig== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 3 DS records for STOPFAKES.GOV in the GOV zone
	DS=46873/SHA-1 uses a deprecated digest algorithm
	DS=37636/SHA-256 has algorithm RSASHA512
	DS=46873/SHA-1 has algorithm RSASHA512
	DS=46873/SHA-256 has algorithm RSASHA512
	Found 1 RRSIGs over DS RRset
	`STOPFAKES.GOV. 3600 IN RRSIG ( DS 13 2 3600 20260422142543 20260420122543 35496 gov. u1I3dasmpH2N6/wkPV9aD98DGeoaLk4ZDk9eaKSGBNgG/iZOt1D6PZgKqJqcLD0osVP7wEo/jNqt 2ghBx9oVig== )`
	RRSIG=35496 and DNSKEY=35496 verifies the DS RRset
	DS=37636/SHA-256 is now in the chain-of-trust
	DS=46873/SHA-1 is now in the chain-of-trust
	`STOPFAKES.GOV. 3600 IN DS ( 37636 10 2 ffc5b73e30ed981d292d21e8a7b3e793d5d397fdad21ef0e9f5c26286f5596d7 )`
	`STOPFAKES.GOV. 3600 IN DS ( 46873 10 1 81991b3db0d883349aaca6b192d6385c3c2662ef )`
	`STOPFAKES.GOV. 3600 IN DS ( 46873 10 2 6c6ba424d94df25d40e64215ba567ddd7ef856e9a4f8adce88af9cc56a1a9f62 )`
	Query to a1-109.akam.net for STOPFAKES.GOV/DNSKEY
	Received 1492 bytes from 193.108.91.109
	;; Response received from [193.108.91.109] 1492 octets ;; HEADER SECTION ;; id = 25112 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 6 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; STOPFAKES.GOV. IN DNSKEY ;; ANSWER SECTION (6 records) STOPFAKES.GOV. 7200 IN DNSKEY ( 257 3 10 AwEAAaf6H6SsxC/6MBuV1y7Cn9A5k2vQixdRR+glGsiZvg2kjcjKK2vPjQAkgxsJgoVtYs3FxRGB 1TzgP24TTgKzezSfxnr1n4dIZPkaowkMdwAbD0vG36oC19YbkTZJA2l1jCqUuLHWfgOMyi4Lfsx9 H/SF6N/WTN3T09fiwzcNTlawU0ZmScbtfoLCt3bCertIpFOdzio6N1WlAyDPMhOVBwzr6n6rXbkq bIKeyNQEgSNQzSPB4fgbSWYbR8J0Xhtwmd6n+oRZROOJtHzJLJyuX4Gv6c4xdajWTca6kHB6CArh 47wSr8M72ZrMgHFg0V/zx7rraR6SO2/zeIKlZT8Y5H8= ) ; keytag 37636 STOPFAKES.GOV. 7200 IN DNSKEY ( 256 3 10 AwEAAcEO+qxdAFS2Bp+91MZeLp+lnI5/04hBJPmNz/Lk6HuVuaMSmywJiScD2QTD7pZvHay7cpXx 9XFrKEqk9m79FkFuILMQXa45byU7qCZnIRiCjVCxCwxXyntqKzbNT8SW9Cyj9SCP7Y7RmWlrnhig cSpuuVBk6Ud2E1eTWgDfJe5t ) ; keytag 27861 STOPFAKES.GOV. 7200 IN DNSKEY ( 256 3 10 AwEAAbwJE7YZ0NCAECVF/zW992foGYIni0s2sCH5ccn6aN2g2SIYo4V+fY4DkOrkEYCrceEyGUw6 Y3xyuVT5lEV/M1IdHcYxtmEm3Oldw2PGgNVkPk1hbLYyDbUi4+WZWsN5rJnRJ8VFhR10o6KVBa+j 5oPDhtdT1h/nLqX2OtvLgVOr ) ; keytag 61187 STOPFAKES.GOV. 7200 IN DNSKEY ( 257 3 10 AwEAAfeYPwsV42bmJTeRUivW/dXLdKt2FnSQZnmKNfYZkae2vT20/BWTv40XjpaGLcd9sWGC/ZH4 mU4GE8g5UFvzXthBm7o/o6lXtvbSKhV4jW5wB8CAJAT132QLYb+lsfOHmQ/awHZwxOq3zKflFTgB rBbdYCBAopzNr5IyhjLKALHwg9+Bxh1/FesOMGTig/Q/s6cbSXNTqHmbK3ugXIB1D3TwlOzpVNa/ W6MObgwE/4gk20F7HoupTwJl7jKyn37ggrL/Nf1FyCS/bH1GjCHctbwz3Ax2V87vuG/C0OxGiAY/ cG4hxc+j1JWyDYTfNamjqEWJMzhuUrs/UclmC7EHdg0= ) ; keytag 51703 STOPFAKES.GOV. 7200 IN RRSIG ( DNSKEY 10 2 7200 20260423183910 20260420173910 37636 stopfakes.gov. XrSxGn4odmqqZR6UTBCpIFNcNEm59g+dx/NIqKrtqjVwjfz3R3h6gvT1q2jOFfGJAcX0otsTOtd0 3abbxZF/I8AHFoussPHcKLuOzMJZ72piDl/Bpiq8rWleRi8okA3z2/7d8eMnzDrE3AL/D9L09oEN RQU6tmBtCPcn/sKH/lZIXqDibV4qNcnhhi/uGY5mRAI34xCC/uJRnp5T37GKvKo7WuXv7vSVUuKh oiLmYvhludYL5HMSRKBqrzgWsHvio+9LWQUVn+k2bunYL9PQ0m6fbZqPuaQJvmXe0NPCoyzy6u3f 8YXHM3/bLS8M1jNOIPXNDP+WGIXQSukJNMhZtQ== ) STOPFAKES.GOV. 7200 IN RRSIG ( DNSKEY 10 2 7200 20260423183910 20260420173910 51703 stopfakes.gov. wBW4xf8bBJ4cspKbTMHx8ZaimFdiDjcZcxwv7RMdU8XEjbj2m5b0QY7rHcBX9SW/MYjl3ddlqS5N /ADcTga5yBv4GCdWWDV7N1+E8NPj8dGtYp3P8VFvA5hkXWuqExSv+TGgYiKkqq1ckARa4+EOnNGT GM2uy+ysfuF+D0umV0jrpxO8plCxVlYdAhSH8UNxN2cO4uAsAsw9TnsSI7sGOBNbQytpACmOq7gq i5nNo4LTXBacqp1q62vJ3qghN/xMhC+LMeInj1d4Hq5ZBOTj6H6O+aZi4DL/xbTY1FLWBYpzjHkj vsznR1LDx4s/wyGns8wpTdiy8a6wzd7WlISIsw== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 4 DNSKEY records for STOPFAKES.GOV
	`STOPFAKES.GOV. 7200 IN DNSKEY ( 257 3 10 AwEAAaf6H6SsxC/6MBuV1y7Cn9A5k2vQixdRR+glGsiZvg2kjcjKK2vPjQAkgxsJgoVtYs3FxRGB 1TzgP24TTgKzezSfxnr1n4dIZPkaowkMdwAbD0vG36oC19YbkTZJA2l1jCqUuLHWfgOMyi4Lfsx9 H/SF6N/WTN3T09fiwzcNTlawU0ZmScbtfoLCt3bCertIpFOdzio6N1WlAyDPMhOVBwzr6n6rXbkq bIKeyNQEgSNQzSPB4fgbSWYbR8J0Xhtwmd6n+oRZROOJtHzJLJyuX4Gv6c4xdajWTca6kHB6CArh 47wSr8M72ZrMgHFg0V/zx7rraR6SO2/zeIKlZT8Y5H8= ) ; keytag 37636`
	`STOPFAKES.GOV. 7200 IN DNSKEY ( 256 3 10 AwEAAcEO+qxdAFS2Bp+91MZeLp+lnI5/04hBJPmNz/Lk6HuVuaMSmywJiScD2QTD7pZvHay7cpXx 9XFrKEqk9m79FkFuILMQXa45byU7qCZnIRiCjVCxCwxXyntqKzbNT8SW9Cyj9SCP7Y7RmWlrnhig cSpuuVBk6Ud2E1eTWgDfJe5t ) ; keytag 27861`
	`STOPFAKES.GOV. 7200 IN DNSKEY ( 256 3 10 AwEAAbwJE7YZ0NCAECVF/zW992foGYIni0s2sCH5ccn6aN2g2SIYo4V+fY4DkOrkEYCrceEyGUw6 Y3xyuVT5lEV/M1IdHcYxtmEm3Oldw2PGgNVkPk1hbLYyDbUi4+WZWsN5rJnRJ8VFhR10o6KVBa+j 5oPDhtdT1h/nLqX2OtvLgVOr ) ; keytag 61187`
	`STOPFAKES.GOV. 7200 IN DNSKEY ( 257 3 10 AwEAAfeYPwsV42bmJTeRUivW/dXLdKt2FnSQZnmKNfYZkae2vT20/BWTv40XjpaGLcd9sWGC/ZH4 mU4GE8g5UFvzXthBm7o/o6lXtvbSKhV4jW5wB8CAJAT132QLYb+lsfOHmQ/awHZwxOq3zKflFTgB rBbdYCBAopzNr5IyhjLKALHwg9+Bxh1/FesOMGTig/Q/s6cbSXNTqHmbK3ugXIB1D3TwlOzpVNa/ W6MObgwE/4gk20F7HoupTwJl7jKyn37ggrL/Nf1FyCS/bH1GjCHctbwz3Ax2V87vuG/C0OxGiAY/ cG4hxc+j1JWyDYTfNamjqEWJMzhuUrs/UclmC7EHdg0= ) ; keytag 51703`
	DNSKEY=37636/SEP is now in the chain-of-trust
	DS=37636/SHA-256 verifies DNSKEY=37636/SEP
	DS=46873/SHA-1 is published, but a corresponding DNSKEY is not
	Found 2 RRSIGs over DNSKEY RRset
	`STOPFAKES.GOV. 7200 IN RRSIG ( DNSKEY 10 2 7200 20260423183910 20260420173910 37636 stopfakes.gov. XrSxGn4odmqqZR6UTBCpIFNcNEm59g+dx/NIqKrtqjVwjfz3R3h6gvT1q2jOFfGJAcX0otsTOtd0 3abbxZF/I8AHFoussPHcKLuOzMJZ72piDl/Bpiq8rWleRi8okA3z2/7d8eMnzDrE3AL/D9L09oEN RQU6tmBtCPcn/sKH/lZIXqDibV4qNcnhhi/uGY5mRAI34xCC/uJRnp5T37GKvKo7WuXv7vSVUuKh oiLmYvhludYL5HMSRKBqrzgWsHvio+9LWQUVn+k2bunYL9PQ0m6fbZqPuaQJvmXe0NPCoyzy6u3f 8YXHM3/bLS8M1jNOIPXNDP+WGIXQSukJNMhZtQ== )`
	`STOPFAKES.GOV. 7200 IN RRSIG ( DNSKEY 10 2 7200 20260423183910 20260420173910 51703 stopfakes.gov. wBW4xf8bBJ4cspKbTMHx8ZaimFdiDjcZcxwv7RMdU8XEjbj2m5b0QY7rHcBX9SW/MYjl3ddlqS5N /ADcTga5yBv4GCdWWDV7N1+E8NPj8dGtYp3P8VFvA5hkXWuqExSv+TGgYiKkqq1ckARa4+EOnNGT GM2uy+ysfuF+D0umV0jrpxO8plCxVlYdAhSH8UNxN2cO4uAsAsw9TnsSI7sGOBNbQytpACmOq7gq i5nNo4LTXBacqp1q62vJ3qghN/xMhC+LMeInj1d4Hq5ZBOTj6H6O+aZi4DL/xbTY1FLWBYpzjHkj vsznR1LDx4s/wyGns8wpTdiy8a6wzd7WlISIsw== )`
	RRSIG=37636 and DNSKEY=37636/SEP verifies the DNSKEY RRset
	RRSIG=51703 and DNSKEY=51703/SEP verifies the DNSKEY RRset
	DNSKEY=27861 is now in the chain-of-trust
	DNSKEY=61187 is now in the chain-of-trust
	DNSKEY=51703/SEP is now in the chain-of-trust
	Query to a5-65.akam.net for STOPFAKES.GOV/A
	Received 231 bytes from 95.100.168.65
	;; Response received from [95.100.168.65] 231 octets ;; HEADER SECTION ;; id = 31788 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; STOPFAKES.GOV. IN A ;; ANSWER SECTION (2 records) STOPFAKES.GOV. 300 IN A 52.4.15.10 STOPFAKES.GOV. 300 IN RRSIG ( A 10 2 300 20260423183910 20260420173910 61187 stopfakes.gov. QULd4NNr4LwF9XoUDjyQKHR8BEqDqbMCUgKYsj2PP1Ns4tUveCjwcvBscONzZJjYlpYRTH0EMtPM 9qSjzm2EKzG1oajK4ttALxe5hWxzGk0M4gS+Ct47VPhEI6B0t47D8xqu9fvb62WArUgFo1LyGxMu ZtZ/u5pIhFhsNL51gkM= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	a5-65.akam.net is authoritative for STOPFAKES.GOV
	Found RRSIG signed by stopfakes.gov zone
	Query to a8-66.akam.net for STOPFAKES.GOV/SOA
	Received 576 bytes from 2.16.40.66
	;; Response received from [2.16.40.66] 576 octets ;; HEADER SECTION ;; id = 60860 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 7 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; STOPFAKES.GOV. IN SOA ;; ANSWER SECTION (2 records) STOPFAKES.GOV. 86400 IN SOA ( a12-66.akam.net. hostmaster.akamai.com. 1549372935 ;serial 43200 ;refresh 7200 ;retry 604800 ;expire 7200 ;minimum ) STOPFAKES.GOV. 86400 IN RRSIG ( SOA 10 2 86400 20260423183910 20260420173910 61187 stopfakes.gov. lmGL6amEhHLpa9KRJZBXH/9RzHnY3QSErBuK6Bo3Dd15M22Q2jAVyavDMSGIpcv/GCVd90b4ZtVT JuvVZXdHx3JAMDuQxVOk+ycodcm+ZZWYLBP8+IvOIZsMusOy0zW3iF/xdwj4BTrheefyu9oZcOzw XYcuoDOzL4TvuzPYTho= ) ;; AUTHORITY SECTION (7 records) STOPFAKES.GOV. 7200 IN NS a1-109.akam.net. STOPFAKES.GOV. 7200 IN NS a4-64.akam.net. STOPFAKES.GOV. 7200 IN NS a5-65.akam.net. STOPFAKES.GOV. 7200 IN NS a12-66.akam.net. STOPFAKES.GOV. 7200 IN NS a8-66.akam.net. STOPFAKES.GOV. 7200 IN NS a13-67.akam.net. STOPFAKES.GOV. 7200 IN RRSIG ( NS 10 2 7200 20260423183910 20260420173910 61187 stopfakes.gov. YLzWjII2zeF4XdRpZALtdUeinDE08LYXz7sCNOPBpe0d4fo/eo47eBmVabaBVSZ4D2cpxlCkWb6p T6G1jGYpiD5y8PjOmcgPC4oO7YjPTiKUghqCJABr9LcMp64xKynYNW3TBHcSusgZbLz6t0D0r1sL WhCxKQJvjJZAdwRsYDw= ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Query to a12-66.akam.net for STOPFAKES.GOV/SOA
	Received 576 bytes from 184.26.160.66
	;; Response received from [184.26.160.66] 576 octets ;; HEADER SECTION ;; id = 24456 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 7 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; STOPFAKES.GOV. IN SOA ;; ANSWER SECTION (2 records) STOPFAKES.GOV. 86400 IN SOA ( a12-66.akam.net. hostmaster.akamai.com. 1549372935 ;serial 43200 ;refresh 7200 ;retry 604800 ;expire 7200 ;minimum ) STOPFAKES.GOV. 86400 IN RRSIG ( SOA 10 2 86400 20260423183910 20260420173910 61187 stopfakes.gov. lmGL6amEhHLpa9KRJZBXH/9RzHnY3QSErBuK6Bo3Dd15M22Q2jAVyavDMSGIpcv/GCVd90b4ZtVT JuvVZXdHx3JAMDuQxVOk+ycodcm+ZZWYLBP8+IvOIZsMusOy0zW3iF/xdwj4BTrheefyu9oZcOzw XYcuoDOzL4TvuzPYTho= ) ;; AUTHORITY SECTION (7 records) STOPFAKES.GOV. 7200 IN NS a1-109.akam.net. STOPFAKES.GOV. 7200 IN NS a5-65.akam.net. STOPFAKES.GOV. 7200 IN NS a12-66.akam.net. STOPFAKES.GOV. 7200 IN NS a13-67.akam.net. STOPFAKES.GOV. 7200 IN NS a8-66.akam.net. STOPFAKES.GOV. 7200 IN NS a4-64.akam.net. STOPFAKES.GOV. 7200 IN RRSIG ( NS 10 2 7200 20260423183910 20260420173910 61187 stopfakes.gov. YLzWjII2zeF4XdRpZALtdUeinDE08LYXz7sCNOPBpe0d4fo/eo47eBmVabaBVSZ4D2cpxlCkWb6p T6G1jGYpiD5y8PjOmcgPC4oO7YjPTiKUghqCJABr9LcMp64xKynYNW3TBHcSusgZbLz6t0D0r1sL WhCxKQJvjJZAdwRsYDw= ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Query to a4-64.akam.net for STOPFAKES.GOV/SOA
	Received 576 bytes from 72.246.46.64
	;; Response received from [72.246.46.64] 576 octets ;; HEADER SECTION ;; id = 36054 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 7 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; STOPFAKES.GOV. IN SOA ;; ANSWER SECTION (2 records) STOPFAKES.GOV. 86400 IN SOA ( a12-66.akam.net. hostmaster.akamai.com. 1549372935 ;serial 43200 ;refresh 7200 ;retry 604800 ;expire 7200 ;minimum ) STOPFAKES.GOV. 86400 IN RRSIG ( SOA 10 2 86400 20260423183910 20260420173910 61187 stopfakes.gov. lmGL6amEhHLpa9KRJZBXH/9RzHnY3QSErBuK6Bo3Dd15M22Q2jAVyavDMSGIpcv/GCVd90b4ZtVT JuvVZXdHx3JAMDuQxVOk+ycodcm+ZZWYLBP8+IvOIZsMusOy0zW3iF/xdwj4BTrheefyu9oZcOzw XYcuoDOzL4TvuzPYTho= ) ;; AUTHORITY SECTION (7 records) STOPFAKES.GOV. 7200 IN NS a13-67.akam.net. STOPFAKES.GOV. 7200 IN NS a5-65.akam.net. STOPFAKES.GOV. 7200 IN NS a1-109.akam.net. STOPFAKES.GOV. 7200 IN NS a4-64.akam.net. STOPFAKES.GOV. 7200 IN NS a8-66.akam.net. STOPFAKES.GOV. 7200 IN NS a12-66.akam.net. STOPFAKES.GOV. 7200 IN RRSIG ( NS 10 2 7200 20260423183910 20260420173910 61187 stopfakes.gov. YLzWjII2zeF4XdRpZALtdUeinDE08LYXz7sCNOPBpe0d4fo/eo47eBmVabaBVSZ4D2cpxlCkWb6p T6G1jGYpiD5y8PjOmcgPC4oO7YjPTiKUghqCJABr9LcMp64xKynYNW3TBHcSusgZbLz6t0D0r1sL WhCxKQJvjJZAdwRsYDw= ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Query to a1-109.akam.net for STOPFAKES.GOV/SOA
	Received 576 bytes from 193.108.91.109
	;; Response received from [193.108.91.109] 576 octets ;; HEADER SECTION ;; id = 34671 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 7 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; STOPFAKES.GOV. IN SOA ;; ANSWER SECTION (2 records) STOPFAKES.GOV. 86400 IN SOA ( a12-66.akam.net. hostmaster.akamai.com. 1549372935 ;serial 43200 ;refresh 7200 ;retry 604800 ;expire 7200 ;minimum ) STOPFAKES.GOV. 86400 IN RRSIG ( SOA 10 2 86400 20260423183910 20260420173910 61187 stopfakes.gov. lmGL6amEhHLpa9KRJZBXH/9RzHnY3QSErBuK6Bo3Dd15M22Q2jAVyavDMSGIpcv/GCVd90b4ZtVT JuvVZXdHx3JAMDuQxVOk+ycodcm+ZZWYLBP8+IvOIZsMusOy0zW3iF/xdwj4BTrheefyu9oZcOzw XYcuoDOzL4TvuzPYTho= ) ;; AUTHORITY SECTION (7 records) STOPFAKES.GOV. 7200 IN NS a5-65.akam.net. STOPFAKES.GOV. 7200 IN NS a4-64.akam.net. STOPFAKES.GOV. 7200 IN NS a13-67.akam.net. STOPFAKES.GOV. 7200 IN NS a8-66.akam.net. STOPFAKES.GOV. 7200 IN NS a12-66.akam.net. STOPFAKES.GOV. 7200 IN NS a1-109.akam.net. STOPFAKES.GOV. 7200 IN RRSIG ( NS 10 2 7200 20260423183910 20260420173910 61187 stopfakes.gov. YLzWjII2zeF4XdRpZALtdUeinDE08LYXz7sCNOPBpe0d4fo/eo47eBmVabaBVSZ4D2cpxlCkWb6p T6G1jGYpiD5y8PjOmcgPC4oO7YjPTiKUghqCJABr9LcMp64xKynYNW3TBHcSusgZbLz6t0D0r1sL WhCxKQJvjJZAdwRsYDw= ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Query to a13-67.akam.net for STOPFAKES.GOV/SOA
	Received 576 bytes from 2.22.230.67
	;; Response received from [2.22.230.67] 576 octets ;; HEADER SECTION ;; id = 36194 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 7 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; STOPFAKES.GOV. IN SOA ;; ANSWER SECTION (2 records) STOPFAKES.GOV. 86400 IN SOA ( a12-66.akam.net. hostmaster.akamai.com. 1549372935 ;serial 43200 ;refresh 7200 ;retry 604800 ;expire 7200 ;minimum ) STOPFAKES.GOV. 86400 IN RRSIG ( SOA 10 2 86400 20260423183910 20260420173910 61187 stopfakes.gov. lmGL6amEhHLpa9KRJZBXH/9RzHnY3QSErBuK6Bo3Dd15M22Q2jAVyavDMSGIpcv/GCVd90b4ZtVT JuvVZXdHx3JAMDuQxVOk+ycodcm+ZZWYLBP8+IvOIZsMusOy0zW3iF/xdwj4BTrheefyu9oZcOzw XYcuoDOzL4TvuzPYTho= ) ;; AUTHORITY SECTION (7 records) STOPFAKES.GOV. 7200 IN NS a4-64.akam.net. STOPFAKES.GOV. 7200 IN NS a8-66.akam.net. STOPFAKES.GOV. 7200 IN NS a13-67.akam.net. STOPFAKES.GOV. 7200 IN NS a1-109.akam.net. STOPFAKES.GOV. 7200 IN NS a12-66.akam.net. STOPFAKES.GOV. 7200 IN NS a5-65.akam.net. STOPFAKES.GOV. 7200 IN RRSIG ( NS 10 2 7200 20260423183910 20260420173910 61187 stopfakes.gov. YLzWjII2zeF4XdRpZALtdUeinDE08LYXz7sCNOPBpe0d4fo/eo47eBmVabaBVSZ4D2cpxlCkWb6p T6G1jGYpiD5y8PjOmcgPC4oO7YjPTiKUghqCJABr9LcMp64xKynYNW3TBHcSusgZbLz6t0D0r1sL WhCxKQJvjJZAdwRsYDw= ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Query to a5-65.akam.net for STOPFAKES.GOV/A
	STOPFAKES.GOV A RR has value 52.4.15.10
	Found 1 RRSIGs over A RRset
	`STOPFAKES.GOV. 300 IN RRSIG ( A 10 2 300 20260423183910 20260420173910 61187 stopfakes.gov. QULd4NNr4LwF9XoUDjyQKHR8BEqDqbMCUgKYsj2PP1Ns4tUveCjwcvBscONzZJjYlpYRTH0EMtPM 9qSjzm2EKzG1oajK4ttALxe5hWxzGk0M4gS+Ct47VPhEI6B0t47D8xqu9fvb62WArUgFo1LyGxMu ZtZ/u5pIhFhsNL51gkM= )`
	RRSIG=61187 and DNSKEY=61187 verifies the A RRset

STOPFAKES.GOV

	Query to a8-66.akam.net for STOPFAKES.GOV/A
	Received 231 bytes from 2.16.40.66
	;; Response received from [2.16.40.66] 231 octets ;; HEADER SECTION ;; id = 21013 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; STOPFAKES.GOV. IN A ;; ANSWER SECTION (2 records) STOPFAKES.GOV. 300 IN A 52.4.15.10 STOPFAKES.GOV. 300 IN RRSIG ( A 10 2 300 20260423183910 20260420173910 61187 stopfakes.gov. QULd4NNr4LwF9XoUDjyQKHR8BEqDqbMCUgKYsj2PP1Ns4tUveCjwcvBscONzZJjYlpYRTH0EMtPM 9qSjzm2EKzG1oajK4ttALxe5hWxzGk0M4gS+Ct47VPhEI6B0t47D8xqu9fvb62WArUgFo1LyGxMu ZtZ/u5pIhFhsNL51gkM= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	a8-66.akam.net is authoritative for STOPFAKES.GOV
	Found RRSIG signed by stopfakes.gov zone
	Query to a8-66.akam.net for STOPFAKES.GOV/A
	STOPFAKES.GOV A RR has value 52.4.15.10
	Found 1 RRSIGs over A RRset
	`STOPFAKES.GOV. 300 IN RRSIG ( A 10 2 300 20260423183910 20260420173910 61187 stopfakes.gov. QULd4NNr4LwF9XoUDjyQKHR8BEqDqbMCUgKYsj2PP1Ns4tUveCjwcvBscONzZJjYlpYRTH0EMtPM 9qSjzm2EKzG1oajK4ttALxe5hWxzGk0M4gS+Ct47VPhEI6B0t47D8xqu9fvb62WArUgFo1LyGxMu ZtZ/u5pIhFhsNL51gkM= )`
	RRSIG=61187 and DNSKEY=61187 verifies the A RRset

STOPFAKES.GOV

	Query to a13-67.akam.net for STOPFAKES.GOV/A
	Received 231 bytes from 2.22.230.67
	;; Response received from [2.22.230.67] 231 octets ;; HEADER SECTION ;; id = 58356 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; STOPFAKES.GOV. IN A ;; ANSWER SECTION (2 records) STOPFAKES.GOV. 300 IN A 52.4.15.10 STOPFAKES.GOV. 300 IN RRSIG ( A 10 2 300 20260423183910 20260420173910 61187 stopfakes.gov. QULd4NNr4LwF9XoUDjyQKHR8BEqDqbMCUgKYsj2PP1Ns4tUveCjwcvBscONzZJjYlpYRTH0EMtPM 9qSjzm2EKzG1oajK4ttALxe5hWxzGk0M4gS+Ct47VPhEI6B0t47D8xqu9fvb62WArUgFo1LyGxMu ZtZ/u5pIhFhsNL51gkM= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	a13-67.akam.net is authoritative for STOPFAKES.GOV
	Found RRSIG signed by stopfakes.gov zone
	Query to a13-67.akam.net for STOPFAKES.GOV/A
	STOPFAKES.GOV A RR has value 52.4.15.10
	Found 1 RRSIGs over A RRset
	`STOPFAKES.GOV. 300 IN RRSIG ( A 10 2 300 20260423183910 20260420173910 61187 stopfakes.gov. QULd4NNr4LwF9XoUDjyQKHR8BEqDqbMCUgKYsj2PP1Ns4tUveCjwcvBscONzZJjYlpYRTH0EMtPM 9qSjzm2EKzG1oajK4ttALxe5hWxzGk0M4gS+Ct47VPhEI6B0t47D8xqu9fvb62WArUgFo1LyGxMu ZtZ/u5pIhFhsNL51gkM= )`
	RRSIG=61187 and DNSKEY=61187 verifies the A RRset

STOPFAKES.GOV

	Query to a12-66.akam.net for STOPFAKES.GOV/A
	Received 231 bytes from 184.26.160.66
	;; Response received from [184.26.160.66] 231 octets ;; HEADER SECTION ;; id = 9498 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; STOPFAKES.GOV. IN A ;; ANSWER SECTION (2 records) STOPFAKES.GOV. 300 IN A 52.4.15.10 STOPFAKES.GOV. 300 IN RRSIG ( A 10 2 300 20260423183910 20260420173910 61187 stopfakes.gov. QULd4NNr4LwF9XoUDjyQKHR8BEqDqbMCUgKYsj2PP1Ns4tUveCjwcvBscONzZJjYlpYRTH0EMtPM 9qSjzm2EKzG1oajK4ttALxe5hWxzGk0M4gS+Ct47VPhEI6B0t47D8xqu9fvb62WArUgFo1LyGxMu ZtZ/u5pIhFhsNL51gkM= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	a12-66.akam.net is authoritative for STOPFAKES.GOV
	Found RRSIG signed by stopfakes.gov zone
	Query to a12-66.akam.net for STOPFAKES.GOV/A
	STOPFAKES.GOV A RR has value 52.4.15.10
	Found 1 RRSIGs over A RRset
	`STOPFAKES.GOV. 300 IN RRSIG ( A 10 2 300 20260423183910 20260420173910 61187 stopfakes.gov. QULd4NNr4LwF9XoUDjyQKHR8BEqDqbMCUgKYsj2PP1Ns4tUveCjwcvBscONzZJjYlpYRTH0EMtPM 9qSjzm2EKzG1oajK4ttALxe5hWxzGk0M4gS+Ct47VPhEI6B0t47D8xqu9fvb62WArUgFo1LyGxMu ZtZ/u5pIhFhsNL51gkM= )`
	RRSIG=61187 and DNSKEY=61187 verifies the A RRset

STOPFAKES.GOV

	Query to a1-109.akam.net for STOPFAKES.GOV/A
	Received 231 bytes from 193.108.91.109
	;; Response received from [193.108.91.109] 231 octets ;; HEADER SECTION ;; id = 1273 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; STOPFAKES.GOV. IN A ;; ANSWER SECTION (2 records) STOPFAKES.GOV. 300 IN A 52.4.15.10 STOPFAKES.GOV. 300 IN RRSIG ( A 10 2 300 20260423183910 20260420173910 61187 stopfakes.gov. QULd4NNr4LwF9XoUDjyQKHR8BEqDqbMCUgKYsj2PP1Ns4tUveCjwcvBscONzZJjYlpYRTH0EMtPM 9qSjzm2EKzG1oajK4ttALxe5hWxzGk0M4gS+Ct47VPhEI6B0t47D8xqu9fvb62WArUgFo1LyGxMu ZtZ/u5pIhFhsNL51gkM= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	a1-109.akam.net is authoritative for STOPFAKES.GOV
	Found RRSIG signed by stopfakes.gov zone
	Query to a1-109.akam.net for STOPFAKES.GOV/A
	STOPFAKES.GOV A RR has value 52.4.15.10
	Found 1 RRSIGs over A RRset
	`STOPFAKES.GOV. 300 IN RRSIG ( A 10 2 300 20260423183910 20260420173910 61187 stopfakes.gov. QULd4NNr4LwF9XoUDjyQKHR8BEqDqbMCUgKYsj2PP1Ns4tUveCjwcvBscONzZJjYlpYRTH0EMtPM 9qSjzm2EKzG1oajK4ttALxe5hWxzGk0M4gS+Ct47VPhEI6B0t47D8xqu9fvb62WArUgFo1LyGxMu ZtZ/u5pIhFhsNL51gkM= )`
	RRSIG=61187 and DNSKEY=61187 verifies the A RRset

STOPFAKES.GOV

	Query to a4-64.akam.net for STOPFAKES.GOV/A
	Received 231 bytes from 72.246.46.64
	;; Response received from [72.246.46.64] 231 octets ;; HEADER SECTION ;; id = 15705 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; STOPFAKES.GOV. IN A ;; ANSWER SECTION (2 records) STOPFAKES.GOV. 300 IN A 52.4.15.10 STOPFAKES.GOV. 300 IN RRSIG ( A 10 2 300 20260423183910 20260420173910 61187 stopfakes.gov. QULd4NNr4LwF9XoUDjyQKHR8BEqDqbMCUgKYsj2PP1Ns4tUveCjwcvBscONzZJjYlpYRTH0EMtPM 9qSjzm2EKzG1oajK4ttALxe5hWxzGk0M4gS+Ct47VPhEI6B0t47D8xqu9fvb62WArUgFo1LyGxMu ZtZ/u5pIhFhsNL51gkM= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	a4-64.akam.net is authoritative for STOPFAKES.GOV
	Found RRSIG signed by stopfakes.gov zone
	Query to a4-64.akam.net for STOPFAKES.GOV/A
	STOPFAKES.GOV A RR has value 52.4.15.10
	Found 1 RRSIGs over A RRset
	`STOPFAKES.GOV. 300 IN RRSIG ( A 10 2 300 20260423183910 20260420173910 61187 stopfakes.gov. QULd4NNr4LwF9XoUDjyQKHR8BEqDqbMCUgKYsj2PP1Ns4tUveCjwcvBscONzZJjYlpYRTH0EMtPM 9qSjzm2EKzG1oajK4ttALxe5hWxzGk0M4gS+Ct47VPhEI6B0t47D8xqu9fvb62WArUgFo1LyGxMu ZtZ/u5pIhFhsNL51gkM= )`
	RRSIG=61187 and DNSKEY=61187 verifies the A RRset

Move your mouse over any or symbols for remediation hints.

Want a second opinion? Test STOPFAKES.GOV at dnsviz.net.

DNSSEC Debugger

↓ Advanced options ↑ Advanced options

Trust Anchor:
Name Servers: