DNSSEC Analyzer

Domain Name:

Time: 2021-04-22 10:57:49 UTC, NTP stratum 4

Analyzing DNSSEC problems for andy.pt

DS=20326/SHA-256 is now in the chain-of-trust

	Checking DS between Trust Anchor and .
	`. IN DS ( 20326 8 2 e06d44b80b8f1d39a95c0b0d7c65d08458e880409bbc683457104237c7f8ec8d )`
	Query to f.root-servers.net for ./DNSKEY
	Received 864 bytes from 192.5.5.241
	;; Answer received from 192.5.5.241 (864 bytes) ;; HEADER SECTION ;; id = 24296 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1472 ;; option: ;; QUESTION SECTION (1 record) ;; . IN DNSKEY ;; ANSWER SECTION (3 records) . 172800 IN DNSKEY ( 256 3 8 AwEAAa+HvD7XXjmL+1htThUQyZW7oWGnjzKHJASg3TSR5Bmu5LfnSVW7fxqZa2oAYo2ionIQWyqA j/loApzg8GNMhyIibftPJso54uWRQ2GaoMrwLD5SLu676kf7urJq6nqdjNC0aJM/C888li69lVH6 tiu2tZm1NH3cmgfnMUJpD60bsrDUqs7XwftmNkdkHa4ltQbM3UNPyfTaNBQYoH3wpOpSjdk3tyDR nreBO6Idrw+DGf/rve4sL3qiSaXfYIkcwAwozxR34iHU5dbCDs8S6FmZYhoSVKVgNSUkudxhd9/6 RrZkYRgvwRsQXl3UwsacU1DsXcORqIC+7NlQ6M2OJVU= ) ; Key ID = 14631 . 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; Key ID = 20326 . 172800 IN RRSIG ( DNSKEY 8 0 172800 20210512000000 20210421000000 20326 . bx5MOQGiU0gAwVPCF6fPBYdApVZCvs4fZ3603lzlRdtiHNsNSk2j/mVU7UD6oZkA/q/AIucEPGMD Lua0HNNnfhW8QsYssPHURJpcOUhgt17GinADGwADQYSI6fH12kFnb5wIZ/jznJ58dCdJDr0E7tg6 GarIqeu190nLM+sp75CNlKEG3HrrdSIGLWY8CFU1wLcU43ZAXaCiO5D6XwV8j7WUOs0n8XB48JzO yq4nZ/9Pt6Nl1QWT1UMrGZPPpBBeBKFeggIiGmDuzCn/nrk8F5zuN8f8RvhCxJZi1Kf6rEB0l79X XZ+JnpyjIJrNSNsDxeTQkO5NgXOrols1Gxv/QA== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1472 ;; option:
	Found 2 DNSKEY records for .
	`. 172800 IN DNSKEY ( 256 3 8 AwEAAa+HvD7XXjmL+1htThUQyZW7oWGnjzKHJASg3TSR5Bmu5LfnSVW7fxqZa2oAYo2ionIQWyqA j/loApzg8GNMhyIibftPJso54uWRQ2GaoMrwLD5SLu676kf7urJq6nqdjNC0aJM/C888li69lVH6 tiu2tZm1NH3cmgfnMUJpD60bsrDUqs7XwftmNkdkHa4ltQbM3UNPyfTaNBQYoH3wpOpSjdk3tyDR nreBO6Idrw+DGf/rve4sL3qiSaXfYIkcwAwozxR34iHU5dbCDs8S6FmZYhoSVKVgNSUkudxhd9/6 RrZkYRgvwRsQXl3UwsacU1DsXcORqIC+7NlQ6M2OJVU= ) ; Key ID = 14631`
	`. 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; Key ID = 20326`
	DNSKEY=20326/SEP is now in the chain-of-trust
	DS=20326/SHA-256 verifies DNSKEY=20326/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`. 172800 IN RRSIG ( DNSKEY 8 0 172800 20210512000000 20210421000000 20326 . bx5MOQGiU0gAwVPCF6fPBYdApVZCvs4fZ3603lzlRdtiHNsNSk2j/mVU7UD6oZkA/q/AIucEPGMD Lua0HNNnfhW8QsYssPHURJpcOUhgt17GinADGwADQYSI6fH12kFnb5wIZ/jznJ58dCdJDr0E7tg6 GarIqeu190nLM+sp75CNlKEG3HrrdSIGLWY8CFU1wLcU43ZAXaCiO5D6XwV8j7WUOs0n8XB48JzO yq4nZ/9Pt6Nl1QWT1UMrGZPPpBBeBKFeggIiGmDuzCn/nrk8F5zuN8f8RvhCxJZi1Kf6rEB0l79X XZ+JnpyjIJrNSNsDxeTQkO5NgXOrols1Gxv/QA== )`
	RRSIG=20326 and DNSKEY=20326/SEP verifies the DNSKEY RRset
	DNSKEY=14631 is now in the chain-of-trust
	Query to c.root-servers.net for andy.pt/A
	Received 930 bytes from 192.33.4.12
	;; Answer received from 192.33.4.12 (930 bytes) ;; HEADER SECTION ;; id = 35521 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 11 arcount = 19 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option: ;; QUESTION SECTION (1 record) ;; andy.pt. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (11 records) pt. 172800 IN NS b.dns.pt. pt. 172800 IN NS ns.dns.br. pt. 172800 IN NS c.dns.pt. pt. 172800 IN NS d.dns.pt. pt. 172800 IN NS h.dns.pt. pt. 172800 IN NS g.dns.pt. pt. 172800 IN NS e.dns.pt. pt. 172800 IN NS ns2.nic.fr. pt. 172800 IN NS a.dns.pt. pt. 86400 IN DS ( 40155 13 2 b0ed28b7255e9880e7ce4665b75ae7271f7837899057f0d4b897ece2eb1eb494 ) pt. 86400 IN RRSIG ( DS 8 1 86400 20210505050000 20210422040000 14631 . GOE6gUUsSX9RnzrjpvVHL5y2Z+5sHd7DeW4qoGRoS7uW4liy9SKEs5yMht+XRqdff1KP6ia/xg4u 6Mid1i0ZE57J4jRpCTuLZ9i/u7tKqSBvO7qn228cpcGT7cx43kUp/IwrRdejVeG2yoXiWpnWTrO9 5lypEhgZhVSjlDRorgmXPxakeyXGMI7gqK61gMRT1OZwO9BN0bAqB2/slugQgnDlEf9Yz2hOyYf+ krftzz2vHdknIkbO2MZ0lhD7irbk4uhJdQfodMe9BbBKRjrgEyj7jtGLU58xC+XKuOwVgGzcVdU6 tNqght2bM6QeTDBBZ79OOy2DzUyHBplwm1GvwQ== ) ;; ADDITIONAL SECTION (19 records) a.dns.pt. 172800 IN A 185.39.208.1 b.dns.pt. 172800 IN A 194.0.25.23 c.dns.pt. 172800 IN A 204.61.216.105 d.dns.pt. 172800 IN A 185.39.210.1 e.dns.pt. 172800 IN A 193.136.192.64 g.dns.pt. 172800 IN A 193.136.2.226 h.dns.pt. 172800 IN A 194.146.106.138 ns.dns.br. 172800 IN A 200.160.0.5 ns2.nic.fr. 172800 IN A 192.93.0.4 a.dns.pt. 172800 IN AAAA 2a04:6d80::1 b.dns.pt. 172800 IN AAAA 2001:678:20::23 c.dns.pt. 172800 IN AAAA 2001:500:14:6105:ad::1 d.dns.pt. 172800 IN AAAA 2a04:6d82::1 e.dns.pt. 172800 IN AAAA 2001:690:a00:4001::64 g.dns.pt. 172800 IN AAAA 2001:690:a80:4001::100 h.dns.pt. 172800 IN AAAA 2001:67c:1010:35::53 ns.dns.br. 172800 IN AAAA 2001:12ff:0:a20::5 ns2.nic.fr. 172800 IN AAAA 2001:660:3005:1::1:2 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option:
	Query to b.root-servers.net for pt/DNSKEY
	Received 925 bytes from 199.9.14.201
	;; Answer received from 199.9.14.201 (925 bytes) ;; HEADER SECTION ;; id = 47823 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 11 arcount = 19 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option: ;; QUESTION SECTION (1 record) ;; pt. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (11 records) pt. 172800 IN NS a.dns.pt. pt. 172800 IN NS b.dns.pt. pt. 172800 IN NS c.dns.pt. pt. 172800 IN NS d.dns.pt. pt. 172800 IN NS e.dns.pt. pt. 172800 IN NS g.dns.pt. pt. 172800 IN NS h.dns.pt. pt. 172800 IN NS ns.dns.br. pt. 172800 IN NS ns2.nic.fr. pt. 86400 IN DS ( 40155 13 2 b0ed28b7255e9880e7ce4665b75ae7271f7837899057f0d4b897ece2eb1eb494 ) pt. 86400 IN RRSIG ( DS 8 1 86400 20210505050000 20210422040000 14631 . GOE6gUUsSX9RnzrjpvVHL5y2Z+5sHd7DeW4qoGRoS7uW4liy9SKEs5yMht+XRqdff1KP6ia/xg4u 6Mid1i0ZE57J4jRpCTuLZ9i/u7tKqSBvO7qn228cpcGT7cx43kUp/IwrRdejVeG2yoXiWpnWTrO9 5lypEhgZhVSjlDRorgmXPxakeyXGMI7gqK61gMRT1OZwO9BN0bAqB2/slugQgnDlEf9Yz2hOyYf+ krftzz2vHdknIkbO2MZ0lhD7irbk4uhJdQfodMe9BbBKRjrgEyj7jtGLU58xC+XKuOwVgGzcVdU6 tNqght2bM6QeTDBBZ79OOy2DzUyHBplwm1GvwQ== ) ;; ADDITIONAL SECTION (19 records) a.dns.pt. 172800 IN A 185.39.208.1 a.dns.pt. 172800 IN AAAA 2a04:6d80::1 b.dns.pt. 172800 IN A 194.0.25.23 b.dns.pt. 172800 IN AAAA 2001:678:20::23 c.dns.pt. 172800 IN A 204.61.216.105 c.dns.pt. 172800 IN AAAA 2001:500:14:6105:ad::1 d.dns.pt. 172800 IN A 185.39.210.1 d.dns.pt. 172800 IN AAAA 2a04:6d82::1 e.dns.pt. 172800 IN A 193.136.192.64 e.dns.pt. 172800 IN AAAA 2001:690:a00:4001::64 g.dns.pt. 172800 IN A 193.136.2.226 g.dns.pt. 172800 IN AAAA 2001:690:a80:4001::100 h.dns.pt. 172800 IN A 194.146.106.138 h.dns.pt. 172800 IN AAAA 2001:67c:1010:35::53 ns.dns.br. 172800 IN A 200.160.0.5 ns.dns.br. 172800 IN AAAA 2001:12ff:0:a20::5 ns2.nic.fr. 172800 IN A 192.93.0.4 ns2.nic.fr. 172800 IN AAAA 2001:660:3005:1::1:2 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option:
	Found child zone pt

	Checking DS between . and pt
	Query to h.root-servers.net for pt/DS
	Received 366 bytes from 198.97.190.53
	;; Answer received from 198.97.190.53 (366 bytes) ;; HEADER SECTION ;; id = 23329 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option: ;; QUESTION SECTION (1 record) ;; pt. IN DS ;; ANSWER SECTION (2 records) pt. 86400 IN DS ( 40155 13 2 b0ed28b7255e9880e7ce4665b75ae7271f7837899057f0d4b897ece2eb1eb494 ) pt. 86400 IN RRSIG ( DS 8 1 86400 20210505050000 20210422040000 14631 . GOE6gUUsSX9RnzrjpvVHL5y2Z+5sHd7DeW4qoGRoS7uW4liy9SKEs5yMht+XRqdff1KP6ia/xg4u 6Mid1i0ZE57J4jRpCTuLZ9i/u7tKqSBvO7qn228cpcGT7cx43kUp/IwrRdejVeG2yoXiWpnWTrO9 5lypEhgZhVSjlDRorgmXPxakeyXGMI7gqK61gMRT1OZwO9BN0bAqB2/slugQgnDlEf9Yz2hOyYf+ krftzz2vHdknIkbO2MZ0lhD7irbk4uhJdQfodMe9BbBKRjrgEyj7jtGLU58xC+XKuOwVgGzcVdU6 tNqght2bM6QeTDBBZ79OOy2DzUyHBplwm1GvwQ== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option:
	Found 1 DS records for pt in the . zone
	DS=40155/SHA-256 has algorithm ECDSAP256SHA256
	Found 1 RRSIGs over DS RRset
	`pt. 86400 IN RRSIG ( DS 8 1 86400 20210505050000 20210422040000 14631 . GOE6gUUsSX9RnzrjpvVHL5y2Z+5sHd7DeW4qoGRoS7uW4liy9SKEs5yMht+XRqdff1KP6ia/xg4u 6Mid1i0ZE57J4jRpCTuLZ9i/u7tKqSBvO7qn228cpcGT7cx43kUp/IwrRdejVeG2yoXiWpnWTrO9 5lypEhgZhVSjlDRorgmXPxakeyXGMI7gqK61gMRT1OZwO9BN0bAqB2/slugQgnDlEf9Yz2hOyYf+ krftzz2vHdknIkbO2MZ0lhD7irbk4uhJdQfodMe9BbBKRjrgEyj7jtGLU58xC+XKuOwVgGzcVdU6 tNqght2bM6QeTDBBZ79OOy2DzUyHBplwm1GvwQ== )`
	RRSIG=14631 and DNSKEY=14631 verifies the DS RRset
	DS=40155/SHA-256 is now in the chain-of-trust
	`pt. 86400 IN DS ( 40155 13 2 b0ed28b7255e9880e7ce4665b75ae7271f7837899057f0d4b897ece2eb1eb494 )`
	Query to e.dns.pt for pt/DNSKEY
	Received 289 bytes from 193.136.192.64
	;; Answer received from 193.136.192.64 (289 bytes) ;; HEADER SECTION ;; id = 44209 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; pt. IN DNSKEY ;; ANSWER SECTION (3 records) pt. 7200 IN DNSKEY ( 257 3 13 nfSs5LNsGhi3e4qjgY6KJxLxNHJahuEmEq2H1gLJHF4+bGZAm7BQwAbqFT3WJCgNqGlV2rEnBJn5 DpQz4R4oAg== ) ; Key ID = 40155 pt. 7200 IN DNSKEY ( 256 3 13 0E6rLajHw7sAD01Eh/e1eo4e5O5JRnNiHdOTzDypmqPFKwInDIvpAH0BPCUOn9t3mlPdJ8/FxYyK Md9gqfHHzA== ) ; Key ID = 30640 pt. 7200 IN RRSIG ( DNSKEY 13 1 7200 20210507000000 20210325000000 40155 pt. MwPBYC7xxdAu8o7NZbJj1l4l70R7mx+4WRcIrREhYMHWetkWzQSQYowqxViHG9X5ltC4h2ImzpbR f5sfhz5Ojg== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found 2 DNSKEY records for pt
	`pt. 7200 IN DNSKEY ( 257 3 13 nfSs5LNsGhi3e4qjgY6KJxLxNHJahuEmEq2H1gLJHF4+bGZAm7BQwAbqFT3WJCgNqGlV2rEnBJn5 DpQz4R4oAg== ) ; Key ID = 40155`
	`pt. 7200 IN DNSKEY ( 256 3 13 0E6rLajHw7sAD01Eh/e1eo4e5O5JRnNiHdOTzDypmqPFKwInDIvpAH0BPCUOn9t3mlPdJ8/FxYyK Md9gqfHHzA== ) ; Key ID = 30640`
	DNSKEY=40155/SEP is now in the chain-of-trust
	DS=40155/SHA-256 verifies DNSKEY=40155/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`pt. 7200 IN RRSIG ( DNSKEY 13 1 7200 20210507000000 20210325000000 40155 pt. MwPBYC7xxdAu8o7NZbJj1l4l70R7mx+4WRcIrREhYMHWetkWzQSQYowqxViHG9X5ltC4h2ImzpbR f5sfhz5Ojg== )`
	RRSIG=40155 and DNSKEY=40155/SEP verifies the DNSKEY RRset
	DNSKEY=30640 is now in the chain-of-trust
	Query to ns.dns.br for andy.pt/A
	Received 463 bytes from 200.160.0.5
	;; Answer received from 200.160.0.5 (463 bytes) ;; HEADER SECTION ;; id = 9991 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 7 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; andy.pt. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (7 records) andy.pt. 7200 IN NS ns2.ptservidor.net. andy.pt. 7200 IN NS ns1.ptservidor.net. andy.pt. 7200 IN NS ns3.ptservidor.net. PCTPFDAMBNVNP7A29HJ4PLCNTIHBFKBK.pt. 300 IN NSEC3 ( 1 1 10 d115 pcueif21uao9d3lg9mfm6403mmmi6jfq NS SOA RRSIG DNSKEY NSEC3PARAM ) PCTPFDAMBNVNP7A29HJ4PLCNTIHBFKBK.pt. 300 IN RRSIG ( NSEC3 13 2 300 20210502094930 20210422094930 30640 pt. ATTo2EDvHoqfHlZnIPpgtu02DZgIBQJ0jZZU3kG/be3g6bDCcn9FEF8slN30v2bGYzcAXTwiW3ia wxreH/M/Sg== ) 7M5HLMIV2D3E9RL8O53AD5JO0VL0FKNB.pt. 300 IN NSEC3 ( 1 1 10 d115 7m9c3dmpdu60umpfjqj9nqf0eckmpfo3 NS DS RRSIG ) 7M5HLMIV2D3E9RL8O53AD5JO0VL0FKNB.pt. 300 IN RRSIG ( NSEC3 13 2 300 20210502094930 20210422094930 30640 pt. dlPo1RNCMlDDeontTbJO1NFU4fvexG8poJSaIJ2/2ItFRJx0q62p6FC/PYuvrERaaNB4UoMH8xC6 Iti1ZSyMzg== ) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Query to d.dns.pt for andy.pt/DNSKEY
	Received 463 bytes from 185.39.210.1
	;; Answer received from 185.39.210.1 (463 bytes) ;; HEADER SECTION ;; id = 14550 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 7 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option: ;; QUESTION SECTION (1 record) ;; andy.pt. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (7 records) andy.pt. 7200 IN NS ns2.ptservidor.net. andy.pt. 7200 IN NS ns3.ptservidor.net. andy.pt. 7200 IN NS ns1.ptservidor.net. PCTPFDAMBNVNP7A29HJ4PLCNTIHBFKBK.pt. 300 IN NSEC3 ( 1 1 10 d115 pcueif21uao9d3lg9mfm6403mmmi6jfq NS SOA RRSIG DNSKEY NSEC3PARAM ) PCTPFDAMBNVNP7A29HJ4PLCNTIHBFKBK.pt. 300 IN RRSIG ( NSEC3 13 2 300 20210502094930 20210422094930 30640 pt. ATTo2EDvHoqfHlZnIPpgtu02DZgIBQJ0jZZU3kG/be3g6bDCcn9FEF8slN30v2bGYzcAXTwiW3ia wxreH/M/Sg== ) 7M5HLMIV2D3E9RL8O53AD5JO0VL0FKNB.pt. 300 IN NSEC3 ( 1 1 10 d115 7m9c3dmpdu60umpfjqj9nqf0eckmpfo3 NS DS RRSIG ) 7M5HLMIV2D3E9RL8O53AD5JO0VL0FKNB.pt. 300 IN RRSIG ( NSEC3 13 2 300 20210502094930 20210422094930 30640 pt. dlPo1RNCMlDDeontTbJO1NFU4fvexG8poJSaIJ2/2ItFRJx0q62p6FC/PYuvrERaaNB4UoMH8xC6 Iti1ZSyMzg== ) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option:
	Found child zone andy.pt

andy.pt

	Checking DS between pt and andy.pt
	Query to h.dns.pt for andy.pt/DS
	Received 553 bytes from 194.146.106.138
	;; Answer received from 194.146.106.138 (553 bytes) ;; HEADER SECTION ;; id = 53862 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 6 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; andy.pt. IN DS ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (6 records) PCTPFDAMBNVNP7A29HJ4PLCNTIHBFKBK.pt. 300 IN NSEC3 ( 1 1 10 d115 pcueif21uao9d3lg9mfm6403mmmi6jfq NS SOA RRSIG DNSKEY NSEC3PARAM ) PCTPFDAMBNVNP7A29HJ4PLCNTIHBFKBK.pt. 300 IN RRSIG ( NSEC3 13 2 300 20210502094930 20210422094930 30640 pt. ATTo2EDvHoqfHlZnIPpgtu02DZgIBQJ0jZZU3kG/be3g6bDCcn9FEF8slN30v2bGYzcAXTwiW3ia wxreH/M/Sg== ) pt. 300 IN SOA ( curiosity.dns.pt. request.dns.pt. 2021042223 ;serial 21600 ;refresh 7200 ;retry 2592000 ;expire 300 ;minimum ) pt. 300 IN RRSIG ( SOA 13 1 7200 20210502094930 20210422094930 30640 pt. sxvGmnosdZ/aBR/0ihFV1i1+nBNY7n/kOVyP900yQHKVBfz6S7Xgk8lm56WXymE3AHr0uJJKeOhw ybXbdgWJ0Q== ) 7M5HLMIV2D3E9RL8O53AD5JO0VL0FKNB.pt. 300 IN NSEC3 ( 1 1 10 d115 7m9c3dmpdu60umpfjqj9nqf0eckmpfo3 NS DS RRSIG ) 7M5HLMIV2D3E9RL8O53AD5JO0VL0FKNB.pt. 300 IN RRSIG ( NSEC3 13 2 300 20210502094930 20210422094930 30640 pt. dlPo1RNCMlDDeontTbJO1NFU4fvexG8poJSaIJ2/2ItFRJx0q62p6FC/PYuvrERaaNB4UoMH8xC6 Iti1ZSyMzg== ) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	No DS records found for andy.pt in the pt zone
	Query to ns3.ptservidor.net for andy.pt/DNSKEY
	Received 115 bytes from 78.47.99.136
	;; Answer received from 78.47.99.136 (115 bytes) ;; HEADER SECTION ;; id = 13586 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 1 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option: ;; QUESTION SECTION (1 record) ;; andy.pt. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (1 record) andy.pt. 86400 IN SOA ( ns1.ptservidor.net. servidores.ptservidor.com. 2021040500 ;serial 3600 ;refresh 1800 ;retry 1209600 ;expire 86400 ;minimum ) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option:
	No DNSKEY records found
	Query to ns2.ptservidor.net for andy.pt/A
	Received 52 bytes from 51.15.0.86
	;; Answer received from 51.15.0.86 (52 bytes) ;; HEADER SECTION ;; id = 11180 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 1 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option: ;; QUESTION SECTION (1 record) ;; andy.pt. IN A ;; ANSWER SECTION (1 record) andy.pt. 14400 IN A 52.178.164.235 ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option:
	ns2.ptservidor.net is authoritative for andy.pt
	Query to ns1.ptservidor.net for andy.pt/SOA
	Received 115 bytes from 185.32.188.57
	;; Answer received from 185.32.188.57 (115 bytes) ;; HEADER SECTION ;; id = 56592 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 1 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option: ;; QUESTION SECTION (1 record) ;; andy.pt. IN SOA ;; ANSWER SECTION (1 record) andy.pt. 86400 IN SOA ( ns1.ptservidor.net. servidores.ptservidor.com. 2021040500 ;serial 3600 ;refresh 1800 ;retry 1209600 ;expire 86400 ;minimum ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option:
	Query to ns3.ptservidor.net for andy.pt/SOA
	Received 115 bytes from 78.47.99.136
	;; Answer received from 78.47.99.136 (115 bytes) ;; HEADER SECTION ;; id = 9313 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 1 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option: ;; QUESTION SECTION (1 record) ;; andy.pt. IN SOA ;; ANSWER SECTION (1 record) andy.pt. 86400 IN SOA ( ns1.ptservidor.net. servidores.ptservidor.com. 2021040500 ;serial 3600 ;refresh 1800 ;retry 1209600 ;expire 86400 ;minimum ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option:
	Query to ns2.ptservidor.net for andy.pt/A
	Received 52 bytes from 51.15.0.86
	;; Answer received from 51.15.0.86 (52 bytes) ;; HEADER SECTION ;; id = 43397 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 1 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option: ;; QUESTION SECTION (1 record) ;; andy.pt. IN A ;; ANSWER SECTION (1 record) andy.pt. 14400 IN A 52.178.164.235 ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option:
	andy.pt A RR has value 52.178.164.235
	No RRSIGs found

andy.pt

	Query to ns3.ptservidor.net for andy.pt/A
	Received 52 bytes from 78.47.99.136
	;; Answer received from 78.47.99.136 (52 bytes) ;; HEADER SECTION ;; id = 3921 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 1 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option: ;; QUESTION SECTION (1 record) ;; andy.pt. IN A ;; ANSWER SECTION (1 record) andy.pt. 14400 IN A 52.178.164.235 ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option:
	ns3.ptservidor.net is authoritative for andy.pt
	Query to ns3.ptservidor.net for andy.pt/A
	Received 52 bytes from 78.47.99.136
	;; Answer received from 78.47.99.136 (52 bytes) ;; HEADER SECTION ;; id = 34030 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 1 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option: ;; QUESTION SECTION (1 record) ;; andy.pt. IN A ;; ANSWER SECTION (1 record) andy.pt. 14400 IN A 52.178.164.235 ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option:
	andy.pt A RR has value 52.178.164.235
	No RRSIGs found

andy.pt

	Query to ns1.ptservidor.net for andy.pt/A
	Received 52 bytes from 185.32.188.57
	;; Answer received from 185.32.188.57 (52 bytes) ;; HEADER SECTION ;; id = 32770 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 1 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option: ;; QUESTION SECTION (1 record) ;; andy.pt. IN A ;; ANSWER SECTION (1 record) andy.pt. 14400 IN A 52.178.164.235 ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option:
	ns1.ptservidor.net is authoritative for andy.pt
	Query to ns1.ptservidor.net for andy.pt/A
	Received 52 bytes from 185.32.188.57
	;; Answer received from 185.32.188.57 (52 bytes) ;; HEADER SECTION ;; id = 284 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 1 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option: ;; QUESTION SECTION (1 record) ;; andy.pt. IN A ;; ANSWER SECTION (1 record) andy.pt. 14400 IN A 52.178.164.235 ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option:
	andy.pt A RR has value 52.178.164.235
	No RRSIGs found

Move your mouse over any or symbols for remediation hints.

Want a second opinion? Test andy.pt at dnsviz.net.

DNSSEC Analyzer

↓ Advanced options ↑ Advanced options

Trust Anchor:
Name Servers: