DNSSEC Analyzer - www.usembassy.gov

Domain Name:

Time: 2023-06-08 14:13:20 UTC, NTP stratum 4

Analyzing DNSSEC problems for www.usembassy.gov

DS=20326/SHA-256 is now in the chain-of-trust

	Checking DS between Trust Anchor and .
	`. IN DS ( 20326 8 2 e06d44b80b8f1d39a95c0b0d7c65d08458e880409bbc683457104237c7f8ec8d )`
	Query to m.root-servers.net for ./DNSKEY
	Received 865 bytes from 202.12.27.33
	;; Response received from 202.12.27.33 (865 octets) ;; HEADER SECTION ;; id = 29551 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option: ;; QUESTION SECTION (1 record) ;; . IN DNSKEY ;; ANSWER SECTION (3 records) . 172800 IN DNSKEY ( 256 3 8 AwEAAbF1LAxEQPtClEQno48k6u7JjCOfVfwdENOxQUrX0JbpN5DnKGMAKIfdiWa5oDeKQ3OoQ58y CC8vjtaaGFDgpJxoLwqzhBYHPGFgins5HIERcCQPGAJKWu/ku4XLh+Fu7UyBubDCelxKTbnj26Ew bochltRqGIE8hbwSXEzRNo4g+NXkaRMq2FFbaBtEE82yTmZUgFRYAFUvfGTPWblyZGtkepVuHyNb 0w/u24dpsz+uyCZZR04cHfRrWOKvqD3lDOwC4+sqd6f7F841R0N2tqSh/WDUZzWdvPBaBOz0FWFL b9porIeZ3Jm08tAMHa+3SGRXfK4RAmxVCmIQQypGabE= ) ; Key ID = 60955 . 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; Key ID = 20326 . 172800 IN RRSIG ( DNSKEY 8 0 172800 20230621000000 20230531000000 20326 . bC9VON7LUBuG73L7Qqabp/zJnNzehkDqnd9LFtmz7zoMXKsxuZLh8a/78/MpcXsvjoSOZ55D+CA8 k8s+n3mKo7zWv79KiapARBRTQqDMavu/Pa9zrvzNp+sa3tZ/9GFyxj28xdwA9z7ziDPW+zst2UEs LHCquxuG83V89rPRq+U7UvO7CjEjjTyYSGitfrR9jA0tqsF1RLa8QSILegUTPBp5xv7hBHabdwzR rTHCOMFkCGlzhB0e3Hjaur2XxGSI/r5p/FLD4NB/0n7L2NHjMvYQOqDvyWNtuaZ+cmeTqV5FuJmx ls0+5us3MnTG/ZPWTZFa5iye45ohMBJ6sEFfgA== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option:
	Found 2 DNSKEY records for .
	`. 172800 IN DNSKEY ( 256 3 8 AwEAAbF1LAxEQPtClEQno48k6u7JjCOfVfwdENOxQUrX0JbpN5DnKGMAKIfdiWa5oDeKQ3OoQ58y CC8vjtaaGFDgpJxoLwqzhBYHPGFgins5HIERcCQPGAJKWu/ku4XLh+Fu7UyBubDCelxKTbnj26Ew bochltRqGIE8hbwSXEzRNo4g+NXkaRMq2FFbaBtEE82yTmZUgFRYAFUvfGTPWblyZGtkepVuHyNb 0w/u24dpsz+uyCZZR04cHfRrWOKvqD3lDOwC4+sqd6f7F841R0N2tqSh/WDUZzWdvPBaBOz0FWFL b9porIeZ3Jm08tAMHa+3SGRXfK4RAmxVCmIQQypGabE= ) ; Key ID = 60955`
	`. 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; Key ID = 20326`
	DNSKEY=20326/SEP is now in the chain-of-trust
	DS=20326/SHA-256 verifies DNSKEY=20326/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`. 172800 IN RRSIG ( DNSKEY 8 0 172800 20230621000000 20230531000000 20326 . bC9VON7LUBuG73L7Qqabp/zJnNzehkDqnd9LFtmz7zoMXKsxuZLh8a/78/MpcXsvjoSOZ55D+CA8 k8s+n3mKo7zWv79KiapARBRTQqDMavu/Pa9zrvzNp+sa3tZ/9GFyxj28xdwA9z7ziDPW+zst2UEs LHCquxuG83V89rPRq+U7UvO7CjEjjTyYSGitfrR9jA0tqsF1RLa8QSILegUTPBp5xv7hBHabdwzR rTHCOMFkCGlzhB0e3Hjaur2XxGSI/r5p/FLD4NB/0n7L2NHjMvYQOqDvyWNtuaZ+cmeTqV5FuJmx ls0+5us3MnTG/ZPWTZFa5iye45ohMBJ6sEFfgA== )`
	RRSIG=20326 and DNSKEY=20326/SEP verifies the DNSKEY RRset
	DNSKEY=60955 is now in the chain-of-trust
	Query to j.root-servers.net for www.usembassy.gov/A
	Received 636 bytes from 192.58.128.30
	;; Response received from 192.58.128.30 (636 octets) ;; HEADER SECTION ;; id = 38890 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 6 arcount = 9 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; www.usembassy.gov. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (6 records) gov. 172800 IN NS b.gov-servers.net. gov. 172800 IN NS c.gov-servers.net. gov. 172800 IN NS a.gov-servers.net. gov. 172800 IN NS d.gov-servers.net. gov. 86400 IN DS ( 7698 8 2 6bc949e638442ead0bdaf0935763c8d003760384ff15ebbd5ce86bb5559561f0 ) gov. 86400 IN RRSIG ( DS 8 1 86400 20230621050000 20230608040000 60955 . FugMj3FEvym6aEkhTtZTqWSs8wwiUUPMQMLdmShQ6L+gdNnSygXrVrf1FbqbOL4U4+uzsg9UXxuv xHLcayfZo9hox7Fih4nR2n5mUsTkTF4+drpqTKY2i8PMVc3+t0aGeZVekE22dtWki0QTWqV0JbZX B7NA4MEkpgIrAhqELnJRKYyfsLecCAbX3JufGD0NAXYcShMVMUIAXno2/zE0m60Tt+DkJbqCL/AF I8gvJRSGNBoYVBQScDQBtAdsHKwokAuNMhlNgEOOZxCBVmwArMOepOTag+lYRYp8rLVFOm+jMi8F xubFelFgJQKfXz9lEOoSeYWKVpO1PFG/YFPDOg== ) ;; ADDITIONAL SECTION (9 records) b.gov-servers.net. 172800 IN A 209.112.123.30 b.gov-servers.net. 172800 IN AAAA 2620:74:27::2:30 c.gov-servers.net. 172800 IN A 69.36.153.30 c.gov-servers.net. 172800 IN AAAA 2620:74:28::2:30 a.gov-servers.net. 172800 IN A 69.36.157.30 a.gov-servers.net. 172800 IN AAAA 2001:500:4431::2:30 d.gov-servers.net. 172800 IN A 81.19.194.30 d.gov-servers.net. 172800 IN AAAA 2620:74:29::2:30 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Query to b.root-servers.net for gov/DNSKEY
	Received 622 bytes from 199.9.14.201
	;; Response received from 199.9.14.201 (622 octets) ;; HEADER SECTION ;; id = 15414 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 6 arcount = 9 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option: ;; QUESTION SECTION (1 record) ;; gov. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (6 records) gov. 172800 IN NS a.gov-servers.net. gov. 172800 IN NS b.gov-servers.net. gov. 172800 IN NS c.gov-servers.net. gov. 172800 IN NS d.gov-servers.net. gov. 86400 IN DS ( 7698 8 2 6bc949e638442ead0bdaf0935763c8d003760384ff15ebbd5ce86bb5559561f0 ) gov. 86400 IN RRSIG ( DS 8 1 86400 20230621050000 20230608040000 60955 . FugMj3FEvym6aEkhTtZTqWSs8wwiUUPMQMLdmShQ6L+gdNnSygXrVrf1FbqbOL4U4+uzsg9UXxuv xHLcayfZo9hox7Fih4nR2n5mUsTkTF4+drpqTKY2i8PMVc3+t0aGeZVekE22dtWki0QTWqV0JbZX B7NA4MEkpgIrAhqELnJRKYyfsLecCAbX3JufGD0NAXYcShMVMUIAXno2/zE0m60Tt+DkJbqCL/AF I8gvJRSGNBoYVBQScDQBtAdsHKwokAuNMhlNgEOOZxCBVmwArMOepOTag+lYRYp8rLVFOm+jMi8F xubFelFgJQKfXz9lEOoSeYWKVpO1PFG/YFPDOg== ) ;; ADDITIONAL SECTION (9 records) a.gov-servers.net. 172800 IN A 69.36.157.30 a.gov-servers.net. 172800 IN AAAA 2001:500:4431::2:30 b.gov-servers.net. 172800 IN A 209.112.123.30 b.gov-servers.net. 172800 IN AAAA 2620:74:27::2:30 c.gov-servers.net. 172800 IN A 69.36.153.30 c.gov-servers.net. 172800 IN AAAA 2620:74:28::2:30 d.gov-servers.net. 172800 IN A 81.19.194.30 d.gov-servers.net. 172800 IN AAAA 2620:74:29::2:30 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option:
	Found child zone gov

gov

	Checking DS between . and gov
	Query to d.root-servers.net for gov/DS
	Received 367 bytes from 199.7.91.13
	;; Response received from 199.7.91.13 (367 octets) ;; HEADER SECTION ;; id = 16934 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1450 ;; option: ;; QUESTION SECTION (1 record) ;; gov. IN DS ;; ANSWER SECTION (2 records) gov. 86400 IN DS ( 7698 8 2 6bc949e638442ead0bdaf0935763c8d003760384ff15ebbd5ce86bb5559561f0 ) gov. 86400 IN RRSIG ( DS 8 1 86400 20230621050000 20230608040000 60955 . FugMj3FEvym6aEkhTtZTqWSs8wwiUUPMQMLdmShQ6L+gdNnSygXrVrf1FbqbOL4U4+uzsg9UXxuv xHLcayfZo9hox7Fih4nR2n5mUsTkTF4+drpqTKY2i8PMVc3+t0aGeZVekE22dtWki0QTWqV0JbZX B7NA4MEkpgIrAhqELnJRKYyfsLecCAbX3JufGD0NAXYcShMVMUIAXno2/zE0m60Tt+DkJbqCL/AF I8gvJRSGNBoYVBQScDQBtAdsHKwokAuNMhlNgEOOZxCBVmwArMOepOTag+lYRYp8rLVFOm+jMi8F xubFelFgJQKfXz9lEOoSeYWKVpO1PFG/YFPDOg== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1450 ;; option:
	Found 1 DS records for gov in the . zone
	DS=7698/SHA-256 has algorithm RSASHA256
	Found 1 RRSIGs over DS RRset
	`gov. 86400 IN RRSIG ( DS 8 1 86400 20230621050000 20230608040000 60955 . FugMj3FEvym6aEkhTtZTqWSs8wwiUUPMQMLdmShQ6L+gdNnSygXrVrf1FbqbOL4U4+uzsg9UXxuv xHLcayfZo9hox7Fih4nR2n5mUsTkTF4+drpqTKY2i8PMVc3+t0aGeZVekE22dtWki0QTWqV0JbZX B7NA4MEkpgIrAhqELnJRKYyfsLecCAbX3JufGD0NAXYcShMVMUIAXno2/zE0m60Tt+DkJbqCL/AF I8gvJRSGNBoYVBQScDQBtAdsHKwokAuNMhlNgEOOZxCBVmwArMOepOTag+lYRYp8rLVFOm+jMi8F xubFelFgJQKfXz9lEOoSeYWKVpO1PFG/YFPDOg== )`
	RRSIG=60955 and DNSKEY=60955 verifies the DS RRset
	DS=7698/SHA-256 is now in the chain-of-trust
	`gov. 86400 IN DS ( 7698 8 2 6bc949e638442ead0bdaf0935763c8d003760384ff15ebbd5ce86bb5559561f0 )`
	Query to b.gov-servers.net for gov/DNSKEY
	Received 777 bytes from 209.112.123.30
	;; Response received from 209.112.123.30 (777 octets) ;; HEADER SECTION ;; id = 60707 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; gov. IN DNSKEY ;; ANSWER SECTION (3 records) gov. 86400 IN DNSKEY ( 257 3 8 AQO8daaz7B+yshOfL60rytKd9aOSujgponEw3fwBMEC3/+e9XzHw2k+VKnbJTZ+QaVtpfUd1q9HK ZIv/ck83Gl5TjYKE5jtUZ2kpEDZfVNGv6yx0smtWAXv1nCJS9ohnyOTd397eMojGDHqkEC+uojES cZheEkMxzgCZwDAs+/CSU7mSuHtCRZn19xlZUd5Gv7yDQ3mbOUwuy30oSk0z1Q5UUPpoihOugIZH FX6Jk7NLiW2wlqfq9qhV4zj7TiBiJY0mCc4zHN8/aq2VKDHp2Na7mWzvKyTy+SYQkBQ/08LbPwj9 YMc+uCzKL6sU/ObHv17EFhD8aPDftTHZvV9L+OZr ) ; Key ID = 7698 gov. 86400 IN DNSKEY ( 256 3 8 AwEAAaen33ykQc2mftedkqBYoKG6Ni0XhefpgJAxBb5+4fQfuWfxtgIVTx4vg6i22adMe59Dgi8a QlIkAvv9Ln0ERfwibemV82ry8dIpLzz8E2dXMjG4eMZOxaykZf3sIC7Ttdg/M2k8xMvnnmJb0/uk FOZXq4DDEdkT4KglkPYGJQSPRME5bdbyarcoFWBculS6gm4S8VVuT0w6PzbaenCtk/c= ) ; Key ID = 50011 gov. 86400 IN RRSIG ( DNSKEY 8 1 86400 20230618190254 20230603185754 7698 gov. E1QAIr+IhgDaO93Z1q1Q6GDHkTc2/VdRb/B3SYdjNHxPSJ2to9uTJSp+r61OjtWJvtoJbV0MeBy8 rndtCsaGdQ1SNaSgabjSyJY+ZaebnIfwmsEA4bMjE+iQSVPiGvdkwO0MYCRPhr2JA9qmTfNVw17/ 89cg0k7aEQkdStbUaCyCIBmHo1ZtwSWnKfgvqS8pun6sfC1PSeP0QMTdNY9DkdSwTKs3RX4IIYDw YJbe6XPbA70WIfh0EsGd+Cdc/xNZvNouNS6hOz1nAGTA2c+HZLoPtXgRQc6wMfdWqS+NcAOX6FEP zkk7cPowDiXc1FEWh5cDtw9kmenGwx7KOJ77GA== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found 2 DNSKEY records for gov
	`gov. 86400 IN DNSKEY ( 257 3 8 AQO8daaz7B+yshOfL60rytKd9aOSujgponEw3fwBMEC3/+e9XzHw2k+VKnbJTZ+QaVtpfUd1q9HK ZIv/ck83Gl5TjYKE5jtUZ2kpEDZfVNGv6yx0smtWAXv1nCJS9ohnyOTd397eMojGDHqkEC+uojES cZheEkMxzgCZwDAs+/CSU7mSuHtCRZn19xlZUd5Gv7yDQ3mbOUwuy30oSk0z1Q5UUPpoihOugIZH FX6Jk7NLiW2wlqfq9qhV4zj7TiBiJY0mCc4zHN8/aq2VKDHp2Na7mWzvKyTy+SYQkBQ/08LbPwj9 YMc+uCzKL6sU/ObHv17EFhD8aPDftTHZvV9L+OZr ) ; Key ID = 7698`
	`gov. 86400 IN DNSKEY ( 256 3 8 AwEAAaen33ykQc2mftedkqBYoKG6Ni0XhefpgJAxBb5+4fQfuWfxtgIVTx4vg6i22adMe59Dgi8a QlIkAvv9Ln0ERfwibemV82ry8dIpLzz8E2dXMjG4eMZOxaykZf3sIC7Ttdg/M2k8xMvnnmJb0/uk FOZXq4DDEdkT4KglkPYGJQSPRME5bdbyarcoFWBculS6gm4S8VVuT0w6PzbaenCtk/c= ) ; Key ID = 50011`
	DNSKEY=7698/SEP is now in the chain-of-trust
	DS=7698/SHA-256 verifies DNSKEY=7698/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`gov. 86400 IN RRSIG ( DNSKEY 8 1 86400 20230618190254 20230603185754 7698 gov. E1QAIr+IhgDaO93Z1q1Q6GDHkTc2/VdRb/B3SYdjNHxPSJ2to9uTJSp+r61OjtWJvtoJbV0MeBy8 rndtCsaGdQ1SNaSgabjSyJY+ZaebnIfwmsEA4bMjE+iQSVPiGvdkwO0MYCRPhr2JA9qmTfNVw17/ 89cg0k7aEQkdStbUaCyCIBmHo1ZtwSWnKfgvqS8pun6sfC1PSeP0QMTdNY9DkdSwTKs3RX4IIYDw YJbe6XPbA70WIfh0EsGd+Cdc/xNZvNouNS6hOz1nAGTA2c+HZLoPtXgRQc6wMfdWqS+NcAOX6FEP zkk7cPowDiXc1FEWh5cDtw9kmenGwx7KOJ77GA== )`
	RRSIG=7698 and DNSKEY=7698/SEP verifies the DNSKEY RRset
	DNSKEY=50011 is now in the chain-of-trust
	Query to a.gov-servers.net for www.usembassy.gov/A
	Received 455 bytes from 69.36.157.30
	;; Response received from 69.36.157.30 (455 octets) ;; HEADER SECTION ;; id = 65148 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 9 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; www.usembassy.gov. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (9 records) usembassy.gov. 86400 IN NS a8-67.akam.net. usembassy.gov. 86400 IN NS a1-63.akam.net. usembassy.gov. 86400 IN NS a26-65.akam.net. usembassy.gov. 86400 IN NS a3-66.akam.net. usembassy.gov. 86400 IN NS a9-64.akam.net. usembassy.gov. 86400 IN NS a14-64.akam.net. usembassy.gov. 3600 IN DS ( 40579 8 1 32a1124da6aecce34d5615a7fa222677b9c852d6 ) usembassy.gov. 3600 IN DS ( 40579 8 2 8f4fe710a9c0f48cdb0ca2ad168220dec4557f48053c34be39b83e6062bd6252 ) usembassy.gov. 3600 IN RRSIG ( DS 8 2 3600 20230612094009 20230605094009 50011 gov. BS5DIjlAYKFRUIqMDXtU7rmL4MFWMo6toZtRz69YEL4fDeFFH1eTG1RenuXvl/DyYGYZLiXeIaqV 8mGVhiW9P29w6LeVsBNtlV7XrH3b8kOirIw6TYrgzPRcr7pliYlrq1/2vq6gc5z4htz8tfAqoDTF NuWybNESiTunWlWsqJNM4eKnDTB/d+2FHnhAvfbtx3W9cIiIhB8fdqelQSv6wg== ) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Query to c.gov-servers.net for usembassy.gov/DNSKEY
	Received 451 bytes from 69.36.153.30
	;; Response received from 69.36.153.30 (451 octets) ;; HEADER SECTION ;; id = 34102 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 9 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; usembassy.gov. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (9 records) usembassy.gov. 86400 IN NS a3-66.akam.net. usembassy.gov. 86400 IN NS a14-64.akam.net. usembassy.gov. 86400 IN NS a1-63.akam.net. usembassy.gov. 86400 IN NS a26-65.akam.net. usembassy.gov. 86400 IN NS a9-64.akam.net. usembassy.gov. 86400 IN NS a8-67.akam.net. usembassy.gov. 3600 IN DS ( 40579 8 1 32a1124da6aecce34d5615a7fa222677b9c852d6 ) usembassy.gov. 3600 IN DS ( 40579 8 2 8f4fe710a9c0f48cdb0ca2ad168220dec4557f48053c34be39b83e6062bd6252 ) usembassy.gov. 3600 IN RRSIG ( DS 8 2 3600 20230612094009 20230605094009 50011 gov. BS5DIjlAYKFRUIqMDXtU7rmL4MFWMo6toZtRz69YEL4fDeFFH1eTG1RenuXvl/DyYGYZLiXeIaqV 8mGVhiW9P29w6LeVsBNtlV7XrH3b8kOirIw6TYrgzPRcr7pliYlrq1/2vq6gc5z4htz8tfAqoDTF NuWybNESiTunWlWsqJNM4eKnDTB/d+2FHnhAvfbtx3W9cIiIhB8fdqelQSv6wg== ) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found child zone usembassy.gov

usembassy.gov

	Checking DS between gov and usembassy.gov
	Query to c.gov-servers.net for usembassy.gov/DS
	Received 321 bytes from 69.36.153.30
	;; Response received from 69.36.153.30 (321 octets) ;; HEADER SECTION ;; id = 64377 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; usembassy.gov. IN DS ;; ANSWER SECTION (3 records) usembassy.gov. 3600 IN DS ( 40579 8 1 32a1124da6aecce34d5615a7fa222677b9c852d6 ) usembassy.gov. 3600 IN DS ( 40579 8 2 8f4fe710a9c0f48cdb0ca2ad168220dec4557f48053c34be39b83e6062bd6252 ) usembassy.gov. 3600 IN RRSIG ( DS 8 2 3600 20230612094009 20230605094009 50011 gov. BS5DIjlAYKFRUIqMDXtU7rmL4MFWMo6toZtRz69YEL4fDeFFH1eTG1RenuXvl/DyYGYZLiXeIaqV 8mGVhiW9P29w6LeVsBNtlV7XrH3b8kOirIw6TYrgzPRcr7pliYlrq1/2vq6gc5z4htz8tfAqoDTF NuWybNESiTunWlWsqJNM4eKnDTB/d+2FHnhAvfbtx3W9cIiIhB8fdqelQSv6wg== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found 2 DS records for usembassy.gov in the gov zone
	DS=40579/SHA-1 has algorithm RSASHA256
	DS=40579/SHA-256 has algorithm RSASHA256
	Found 1 RRSIGs over DS RRset
	`usembassy.gov. 3600 IN RRSIG ( DS 8 2 3600 20230612094009 20230605094009 50011 gov. BS5DIjlAYKFRUIqMDXtU7rmL4MFWMo6toZtRz69YEL4fDeFFH1eTG1RenuXvl/DyYGYZLiXeIaqV 8mGVhiW9P29w6LeVsBNtlV7XrH3b8kOirIw6TYrgzPRcr7pliYlrq1/2vq6gc5z4htz8tfAqoDTF NuWybNESiTunWlWsqJNM4eKnDTB/d+2FHnhAvfbtx3W9cIiIhB8fdqelQSv6wg== )`
	RRSIG=50011 and DNSKEY=50011 verifies the DS RRset
	DS=40579/SHA-1 is now in the chain-of-trust
	`usembassy.gov. 3600 IN DS ( 40579 8 1 32a1124da6aecce34d5615a7fa222677b9c852d6 )`
	`usembassy.gov. 3600 IN DS ( 40579 8 2 8f4fe710a9c0f48cdb0ca2ad168220dec4557f48053c34be39b83e6062bd6252 )`
	Query to a26-65.akam.net for usembassy.gov/DNSKEY
	Received 1472 bytes from 23.74.25.65
	;; Response received from 23.74.25.65 (1472 octets) ;; HEADER SECTION ;; id = 39092 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 5 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; usembassy.gov. IN DNSKEY ;; ANSWER SECTION (5 records) usembassy.gov. 15768000 IN DNSKEY ( 256 3 8 AwEAAbiMHnw0DCkJj+AcNCPNysoJJAS17m1bqqxdnV++8+S4Scy+WbyF5ywS+jZX9HjQf67GxMWM srtlgcbPU1fx7bmUdBa7RhdC0q9zXwPy8XzpY7XsoXdvqdlCqSeE3hPfqhU7F0RemGmzl8W5Gv7O KuUJz8Perz3kM8wsvb+M9MBOzXyf4WnSk9yFjJ+8PZP08DNLlU+DIj71H2UR+g6IxRQEbDU2VZUq VoZHvW2yZX/KaJgM08/2eoZwp+PM2dfvmnUm+sRq4+QP1x7dtfubWPQHYfhdCPM8Z7MFisRD0Rkn wm7JPxc1uOAruyThZhTieCAX97v2bLqxOfN0RoGfOxc= ) ; Key ID = 19488 usembassy.gov. 15768000 IN DNSKEY ( 256 3 8 AwEAAb7OlCTFld0u81qzniS/B5dqZdHCj/s1u9aAkMIyNPsbkX7grrTvZKVTHbuZ1W9P2GResWl+ wRDDd20b4jT4njPxO/GauWbTKOVFX/HIhbo9DOQIo53opNPWlkD/x7K6X5iBExd/1krtV8A3Ti99 ZdyhZqmG7OC9HUjYKkWEjguQ5TavEWZoKgF1oiXwg4unOZx00ibkUXwEd+FIAVlZr7bjj7mKCAuO DhtWaHcQ/kuRak0gEwtH3F3SO6Imop7SSMpwtN/1Psfp34G13kubccMguBVOZWVtarp6OYy1n1jt cF4xL4rZNHpI32Y2Ar69jUJipkgtSq6ARz/gEgzVfOU= ) ; Key ID = 49278 usembassy.gov. 15768000 IN DNSKEY ( 257 3 8 AwEAAbvyci5GVabc5G1KbI13MjMlIX8kCLPTVHUamZ/tdbfeUKY4+pYX3JQ4NcOQgreJuNxVhktM Al67S5Nu81BJGvQDieFSpneznx8sIrfsG3Tll7d5jtReEL2I2YsZBc4MoU4cq4Gp1F1dNFQeLCby W72SfPa1dmMkWadLz4r80hxkiPZqZNriVt/AUWiwVFbxpNl8qJh1sV+B5+5DspcuxqJPnAH/tDh8 tnwAeD+Mk2xJp63aRCD0STv0ijfSDzvYuYyDkZJKiS7ZMXJ+P+GhK7zbIeF+L8g0ToLYFYcE2Hby 7EDzDX1NBcUJBb6Ak7jHU38NvsvXm1AtolOVaXm0jqM= ) ; Key ID = 40579 usembassy.gov. 15768000 IN RRSIG ( DNSKEY 8 2 15768000 20240531032208 20230601022208 49278 usembassy.gov. XWaqyz+hY6OJQzYia5vDSTn0nBYsmoX8pg6upb5vVNxLtKZ0/64lvB39xr8MnYhpIUbxmY5TmtfE wKuCWHg6ZvvVl3Hs/AIPJPDnxrF+HlDrgr+DiAMNcjEpsrjHTRyN/itlHQz31gI/+IvgGVZsa2iA ZYmG+/7llESuieBoVKtM+HgWf4PFbuOsirmTv670AfzBUOuQ7JL+IZNNa/wFE4ibLokeuMh5228h FtEnL3Y5Kd6NQ6iBVL5L4T5ruGZFhq8IyQN8NH4I9R7ZyVzQAWC65LA0GFRj3ByqMyCzrF7aEpfc xLeip9l5G7wXl1nsbtsG595E2duo1O/K3g0cqg== ) usembassy.gov. 15768000 IN RRSIG ( DNSKEY 8 2 15768000 20240531032208 20230601022208 40579 usembassy.gov. MwmYC8uWyDA0AMypeMDLYHySQFK1LcAongN8Nmq+NVQ4hZRucituIWc4UdpPldcg4x9WIAo0bwCt LiK+Mu3No4x2qGPd1X7lvZ+B2I5oRP5GnM221UtRFyCM5UiO/f3g7VZRb45luJsjcSXbcst6d4OI xMxRnf6p822gxDf917lGNigx1csbUkIPqwGDru6MqItYaFayc4VR/HnJeT03s953WMGOrQyX/Jlx WtehMW9OJvGCaiEataprIRUfcVjf/2h4dz+vWWyJSSGvFaazhdm3MaYJswaXaw0yXksx5RjBXsEv x9/YQhRrk1HSO3HSfepyWF7lzU/ySOpMp3bi3Q== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found 3 DNSKEY records for usembassy.gov
	`usembassy.gov. 15768000 IN DNSKEY ( 256 3 8 AwEAAbiMHnw0DCkJj+AcNCPNysoJJAS17m1bqqxdnV++8+S4Scy+WbyF5ywS+jZX9HjQf67GxMWM srtlgcbPU1fx7bmUdBa7RhdC0q9zXwPy8XzpY7XsoXdvqdlCqSeE3hPfqhU7F0RemGmzl8W5Gv7O KuUJz8Perz3kM8wsvb+M9MBOzXyf4WnSk9yFjJ+8PZP08DNLlU+DIj71H2UR+g6IxRQEbDU2VZUq VoZHvW2yZX/KaJgM08/2eoZwp+PM2dfvmnUm+sRq4+QP1x7dtfubWPQHYfhdCPM8Z7MFisRD0Rkn wm7JPxc1uOAruyThZhTieCAX97v2bLqxOfN0RoGfOxc= ) ; Key ID = 19488`
	`usembassy.gov. 15768000 IN DNSKEY ( 256 3 8 AwEAAb7OlCTFld0u81qzniS/B5dqZdHCj/s1u9aAkMIyNPsbkX7grrTvZKVTHbuZ1W9P2GResWl+ wRDDd20b4jT4njPxO/GauWbTKOVFX/HIhbo9DOQIo53opNPWlkD/x7K6X5iBExd/1krtV8A3Ti99 ZdyhZqmG7OC9HUjYKkWEjguQ5TavEWZoKgF1oiXwg4unOZx00ibkUXwEd+FIAVlZr7bjj7mKCAuO DhtWaHcQ/kuRak0gEwtH3F3SO6Imop7SSMpwtN/1Psfp34G13kubccMguBVOZWVtarp6OYy1n1jt cF4xL4rZNHpI32Y2Ar69jUJipkgtSq6ARz/gEgzVfOU= ) ; Key ID = 49278`
	`usembassy.gov. 15768000 IN DNSKEY ( 257 3 8 AwEAAbvyci5GVabc5G1KbI13MjMlIX8kCLPTVHUamZ/tdbfeUKY4+pYX3JQ4NcOQgreJuNxVhktM Al67S5Nu81BJGvQDieFSpneznx8sIrfsG3Tll7d5jtReEL2I2YsZBc4MoU4cq4Gp1F1dNFQeLCby W72SfPa1dmMkWadLz4r80hxkiPZqZNriVt/AUWiwVFbxpNl8qJh1sV+B5+5DspcuxqJPnAH/tDh8 tnwAeD+Mk2xJp63aRCD0STv0ijfSDzvYuYyDkZJKiS7ZMXJ+P+GhK7zbIeF+L8g0ToLYFYcE2Hby 7EDzDX1NBcUJBb6Ak7jHU38NvsvXm1AtolOVaXm0jqM= ) ; Key ID = 40579`
	DNSKEY=40579/SEP is now in the chain-of-trust
	DS=40579/SHA-1 verifies DNSKEY=40579/SEP
	DS=40579/SHA-256 verifies DNSKEY=40579/SEP
	Found 2 RRSIGs over DNSKEY RRset
	`usembassy.gov. 15768000 IN RRSIG ( DNSKEY 8 2 15768000 20240531032208 20230601022208 49278 usembassy.gov. XWaqyz+hY6OJQzYia5vDSTn0nBYsmoX8pg6upb5vVNxLtKZ0/64lvB39xr8MnYhpIUbxmY5TmtfE wKuCWHg6ZvvVl3Hs/AIPJPDnxrF+HlDrgr+DiAMNcjEpsrjHTRyN/itlHQz31gI/+IvgGVZsa2iA ZYmG+/7llESuieBoVKtM+HgWf4PFbuOsirmTv670AfzBUOuQ7JL+IZNNa/wFE4ibLokeuMh5228h FtEnL3Y5Kd6NQ6iBVL5L4T5ruGZFhq8IyQN8NH4I9R7ZyVzQAWC65LA0GFRj3ByqMyCzrF7aEpfc xLeip9l5G7wXl1nsbtsG595E2duo1O/K3g0cqg== )`
	`usembassy.gov. 15768000 IN RRSIG ( DNSKEY 8 2 15768000 20240531032208 20230601022208 40579 usembassy.gov. MwmYC8uWyDA0AMypeMDLYHySQFK1LcAongN8Nmq+NVQ4hZRucituIWc4UdpPldcg4x9WIAo0bwCt LiK+Mu3No4x2qGPd1X7lvZ+B2I5oRP5GnM221UtRFyCM5UiO/f3g7VZRb45luJsjcSXbcst6d4OI xMxRnf6p822gxDf917lGNigx1csbUkIPqwGDru6MqItYaFayc4VR/HnJeT03s953WMGOrQyX/Jlx WtehMW9OJvGCaiEataprIRUfcVjf/2h4dz+vWWyJSSGvFaazhdm3MaYJswaXaw0yXksx5RjBXsEv x9/YQhRrk1HSO3HSfepyWF7lzU/ySOpMp3bi3Q== )`
	RRSIG=49278 and DNSKEY=49278 verifies the DNSKEY RRset
	RRSIG=40579 and DNSKEY=40579/SEP verifies the DNSKEY RRset
	DNSKEY=19488 is now in the chain-of-trust
	DNSKEY=49278 is now in the chain-of-trust
	Query to a8-67.akam.net for www.usembassy.gov/A
	Received 395 bytes from 2.16.40.67
	;; Response received from 2.16.40.67 (395 octets) ;; HEADER SECTION ;; id = 46649 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; www.usembassy.gov. IN A ;; ANSWER SECTION (2 records) www.usembassy.gov. 10800 IN CNAME wildcard.usembassy.gov.edgekey.net. www.usembassy.gov. 10800 IN RRSIG ( CNAME 8 3 10800 20240601135344 20230602132541 49278 usembassy.gov. CuQlgvEJ5FYlg8yaQlha0WF4fRfl5/RrGCRnZI0cAIrKRmHIqhw5BUIL73C5cdAIgME7H/phWh26 uF5SC2ERj3+cSGeOkEsLMiWIGaMkosLzTWBcthPnkEFsYgaXlCcjr9WRC6coSh1CAKo5VCR29AHR qGYvwLZ2v3huQFmkyJ/nXst1TKHmH5GmqOu+4LLsdpueWwQjeplG/pS6e6Ntmf4JqXftZ6bfQCF0 5vFROH0CKpMMGFwe8yptbsE9jV2ckDb88it3HFbVbnhEOO4Y3dp1JIrONYGGYYXqh3iWVxz1FHrz SJPpnTDV4AmFiJLufm1YNaIV0lVB23UD7kDAuQ== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	a8-67.akam.net is authoritative for www.usembassy.gov
	Query to a14-64.akam.net for www.usembassy.gov/DNSKEY
	Received 395 bytes from 184.26.161.64
	;; Response received from 184.26.161.64 (395 octets) ;; HEADER SECTION ;; id = 9613 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; www.usembassy.gov. IN DNSKEY ;; ANSWER SECTION (2 records) www.usembassy.gov. 10800 IN CNAME wildcard.usembassy.gov.edgekey.net. www.usembassy.gov. 10800 IN RRSIG ( CNAME 8 3 10800 20240601135344 20230602132541 49278 usembassy.gov. CuQlgvEJ5FYlg8yaQlha0WF4fRfl5/RrGCRnZI0cAIrKRmHIqhw5BUIL73C5cdAIgME7H/phWh26 uF5SC2ERj3+cSGeOkEsLMiWIGaMkosLzTWBcthPnkEFsYgaXlCcjr9WRC6coSh1CAKo5VCR29AHR qGYvwLZ2v3huQFmkyJ/nXst1TKHmH5GmqOu+4LLsdpueWwQjeplG/pS6e6Ntmf4JqXftZ6bfQCF0 5vFROH0CKpMMGFwe8yptbsE9jV2ckDb88it3HFbVbnhEOO4Y3dp1JIrONYGGYYXqh3iWVxz1FHrz SJPpnTDV4AmFiJLufm1YNaIV0lVB23UD7kDAuQ== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found RRSIG signed by usembassy.gov zone
	www.usembassy.gov is a CNAME to wildcard.usembassy.gov.edgekey.net
	Found 1 RRSIGs over CNAME RRset
	`www.usembassy.gov. 10800 IN RRSIG ( CNAME 8 3 10800 20240601135344 20230602132541 49278 usembassy.gov. CuQlgvEJ5FYlg8yaQlha0WF4fRfl5/RrGCRnZI0cAIrKRmHIqhw5BUIL73C5cdAIgME7H/phWh26 uF5SC2ERj3+cSGeOkEsLMiWIGaMkosLzTWBcthPnkEFsYgaXlCcjr9WRC6coSh1CAKo5VCR29AHR qGYvwLZ2v3huQFmkyJ/nXst1TKHmH5GmqOu+4LLsdpueWwQjeplG/pS6e6Ntmf4JqXftZ6bfQCF0 5vFROH0CKpMMGFwe8yptbsE9jV2ckDb88it3HFbVbnhEOO4Y3dp1JIrONYGGYYXqh3iWVxz1FHrz SJPpnTDV4AmFiJLufm1YNaIV0lVB23UD7kDAuQ== )`
	RRSIG=49278 and DNSKEY=49278 verifies the CNAME RRset

	Query to c.root-servers.net for wildcard.usembassy.gov.edgekey.net/A
	Received 1197 bytes from 192.33.4.12
	;; Response received from 192.33.4.12 (1197 octets) ;; HEADER SECTION ;; id = 58357 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 15 arcount = 27 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option: ;; QUESTION SECTION (1 record) ;; wildcard.usembassy.gov.edgekey.net. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (15 records) net. 172800 IN NS h.gtld-servers.net. net. 172800 IN NS g.gtld-servers.net. net. 172800 IN NS d.gtld-servers.net. net. 172800 IN NS e.gtld-servers.net. net. 172800 IN NS m.gtld-servers.net. net. 172800 IN NS b.gtld-servers.net. net. 172800 IN NS f.gtld-servers.net. net. 172800 IN NS c.gtld-servers.net. net. 172800 IN NS j.gtld-servers.net. net. 172800 IN NS k.gtld-servers.net. net. 172800 IN NS a.gtld-servers.net. net. 172800 IN NS i.gtld-servers.net. net. 172800 IN NS l.gtld-servers.net. net. 86400 IN DS ( 35886 8 2 7862b27f5f516ebe19680444d4ce5e762981931842c465f00236401d8bd973ee ) net. 86400 IN RRSIG ( DS 8 1 86400 20230621050000 20230608040000 60955 . nnO7wBJ0dv7HT9quMJu4/+/Ddo16vzZvTeWzrLd+5fm/YoqH5jbskYHnCt/V/Y/jzzhjE5N9RIOZ 21POx8YQbI+8T9hbeKnNi3iggiFLOsYhtJlVPB6OItUjJSQa1Sr/9QX4S7i604Z5olEtdOzWM67s yBtIPRLxkZbfBuRseFgeRTKKnCDZyl9Pe7EKwkvxQzu9rcbas/4QP7n01ysdxFY5SOGCZGUE57hU 7wyomJ7ccR1QVNhgoS0b18prM2o1JY7ba8A7TdwOGEtwQdwI9hvSxgT8LowA2jDxHgX38Y3QJ0Hz G1AGUxINzoRjb9YtSUrr/o9QyqIkoAsse4BmrQ== ) ;; ADDITIONAL SECTION (27 records) m.gtld-servers.net. 172800 IN A 192.55.83.30 l.gtld-servers.net. 172800 IN A 192.41.162.30 k.gtld-servers.net. 172800 IN A 192.52.178.30 j.gtld-servers.net. 172800 IN A 192.48.79.30 i.gtld-servers.net. 172800 IN A 192.43.172.30 h.gtld-servers.net. 172800 IN A 192.54.112.30 g.gtld-servers.net. 172800 IN A 192.42.93.30 f.gtld-servers.net. 172800 IN A 192.35.51.30 e.gtld-servers.net. 172800 IN A 192.12.94.30 d.gtld-servers.net. 172800 IN A 192.31.80.30 c.gtld-servers.net. 172800 IN A 192.26.92.30 b.gtld-servers.net. 172800 IN A 192.33.14.30 a.gtld-servers.net. 172800 IN A 192.5.6.30 m.gtld-servers.net. 172800 IN AAAA 2001:501:b1f9::30 l.gtld-servers.net. 172800 IN AAAA 2001:500:d937::30 k.gtld-servers.net. 172800 IN AAAA 2001:503:d2d::30 j.gtld-servers.net. 172800 IN AAAA 2001:502:7094::30 i.gtld-servers.net. 172800 IN AAAA 2001:503:39c1::30 h.gtld-servers.net. 172800 IN AAAA 2001:502:8cc::30 g.gtld-servers.net. 172800 IN AAAA 2001:503:eea3::30 f.gtld-servers.net. 172800 IN AAAA 2001:503:d414::30 e.gtld-servers.net. 172800 IN AAAA 2001:502:1ca1::30 d.gtld-servers.net. 172800 IN AAAA 2001:500:856e::30 c.gtld-servers.net. 172800 IN AAAA 2001:503:83eb::30 b.gtld-servers.net. 172800 IN AAAA 2001:503:231d::2:30 a.gtld-servers.net. 172800 IN AAAA 2001:503:a83e::2:30 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option:
	Query to i.root-servers.net for net/DNSKEY
	Received 1163 bytes from 192.36.148.17
	;; Response received from 192.36.148.17 (1163 octets) ;; HEADER SECTION ;; id = 48047 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 15 arcount = 27 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option: ;; QUESTION SECTION (1 record) ;; net. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (15 records) net. 172800 IN NS b.gtld-servers.net. net. 172800 IN NS i.gtld-servers.net. net. 172800 IN NS j.gtld-servers.net. net. 172800 IN NS k.gtld-servers.net. net. 172800 IN NS l.gtld-servers.net. net. 172800 IN NS a.gtld-servers.net. net. 172800 IN NS g.gtld-servers.net. net. 172800 IN NS f.gtld-servers.net. net. 172800 IN NS d.gtld-servers.net. net. 172800 IN NS m.gtld-servers.net. net. 172800 IN NS e.gtld-servers.net. net. 172800 IN NS c.gtld-servers.net. net. 172800 IN NS h.gtld-servers.net. net. 86400 IN DS ( 35886 8 2 7862b27f5f516ebe19680444d4ce5e762981931842c465f00236401d8bd973ee ) net. 86400 IN RRSIG ( DS 8 1 86400 20230621050000 20230608040000 60955 . nnO7wBJ0dv7HT9quMJu4/+/Ddo16vzZvTeWzrLd+5fm/YoqH5jbskYHnCt/V/Y/jzzhjE5N9RIOZ 21POx8YQbI+8T9hbeKnNi3iggiFLOsYhtJlVPB6OItUjJSQa1Sr/9QX4S7i604Z5olEtdOzWM67s yBtIPRLxkZbfBuRseFgeRTKKnCDZyl9Pe7EKwkvxQzu9rcbas/4QP7n01ysdxFY5SOGCZGUE57hU 7wyomJ7ccR1QVNhgoS0b18prM2o1JY7ba8A7TdwOGEtwQdwI9hvSxgT8LowA2jDxHgX38Y3QJ0Hz G1AGUxINzoRjb9YtSUrr/o9QyqIkoAsse4BmrQ== ) ;; ADDITIONAL SECTION (27 records) m.gtld-servers.net. 172800 IN A 192.55.83.30 l.gtld-servers.net. 172800 IN A 192.41.162.30 k.gtld-servers.net. 172800 IN A 192.52.178.30 j.gtld-servers.net. 172800 IN A 192.48.79.30 i.gtld-servers.net. 172800 IN A 192.43.172.30 h.gtld-servers.net. 172800 IN A 192.54.112.30 g.gtld-servers.net. 172800 IN A 192.42.93.30 f.gtld-servers.net. 172800 IN A 192.35.51.30 e.gtld-servers.net. 172800 IN A 192.12.94.30 d.gtld-servers.net. 172800 IN A 192.31.80.30 c.gtld-servers.net. 172800 IN A 192.26.92.30 b.gtld-servers.net. 172800 IN A 192.33.14.30 a.gtld-servers.net. 172800 IN A 192.5.6.30 m.gtld-servers.net. 172800 IN AAAA 2001:501:b1f9::30 l.gtld-servers.net. 172800 IN AAAA 2001:500:d937::30 k.gtld-servers.net. 172800 IN AAAA 2001:503:d2d::30 j.gtld-servers.net. 172800 IN AAAA 2001:502:7094::30 i.gtld-servers.net. 172800 IN AAAA 2001:503:39c1::30 h.gtld-servers.net. 172800 IN AAAA 2001:502:8cc::30 g.gtld-servers.net. 172800 IN AAAA 2001:503:eea3::30 f.gtld-servers.net. 172800 IN AAAA 2001:503:d414::30 e.gtld-servers.net. 172800 IN AAAA 2001:502:1ca1::30 d.gtld-servers.net. 172800 IN AAAA 2001:500:856e::30 c.gtld-servers.net. 172800 IN AAAA 2001:503:83eb::30 b.gtld-servers.net. 172800 IN AAAA 2001:503:231d::2:30 a.gtld-servers.net. 172800 IN AAAA 2001:503:a83e::2:30 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option:
	Found child zone net

net

	Checking DS between . and net
	Query to g.root-servers.net for net/DS
	Received 367 bytes from 192.112.36.4
	;; Response received from 192.112.36.4 (367 octets) ;; HEADER SECTION ;; id = 6476 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option: ;; QUESTION SECTION (1 record) ;; net. IN DS ;; ANSWER SECTION (2 records) net. 86400 IN DS ( 35886 8 2 7862b27f5f516ebe19680444d4ce5e762981931842c465f00236401d8bd973ee ) net. 86400 IN RRSIG ( DS 8 1 86400 20230621050000 20230608040000 60955 . nnO7wBJ0dv7HT9quMJu4/+/Ddo16vzZvTeWzrLd+5fm/YoqH5jbskYHnCt/V/Y/jzzhjE5N9RIOZ 21POx8YQbI+8T9hbeKnNi3iggiFLOsYhtJlVPB6OItUjJSQa1Sr/9QX4S7i604Z5olEtdOzWM67s yBtIPRLxkZbfBuRseFgeRTKKnCDZyl9Pe7EKwkvxQzu9rcbas/4QP7n01ysdxFY5SOGCZGUE57hU 7wyomJ7ccR1QVNhgoS0b18prM2o1JY7ba8A7TdwOGEtwQdwI9hvSxgT8LowA2jDxHgX38Y3QJ0Hz G1AGUxINzoRjb9YtSUrr/o9QyqIkoAsse4BmrQ== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option:
	Found 1 DS records for net in the . zone
	DS=35886/SHA-256 has algorithm RSASHA256
	Found 1 RRSIGs over DS RRset
	`net. 86400 IN RRSIG ( DS 8 1 86400 20230621050000 20230608040000 60955 . nnO7wBJ0dv7HT9quMJu4/+/Ddo16vzZvTeWzrLd+5fm/YoqH5jbskYHnCt/V/Y/jzzhjE5N9RIOZ 21POx8YQbI+8T9hbeKnNi3iggiFLOsYhtJlVPB6OItUjJSQa1Sr/9QX4S7i604Z5olEtdOzWM67s yBtIPRLxkZbfBuRseFgeRTKKnCDZyl9Pe7EKwkvxQzu9rcbas/4QP7n01ysdxFY5SOGCZGUE57hU 7wyomJ7ccR1QVNhgoS0b18prM2o1JY7ba8A7TdwOGEtwQdwI9hvSxgT8LowA2jDxHgX38Y3QJ0Hz G1AGUxINzoRjb9YtSUrr/o9QyqIkoAsse4BmrQ== )`
	RRSIG=60955 and DNSKEY=60955 verifies the DS RRset
	DS=35886/SHA-256 is now in the chain-of-trust
	`net. 86400 IN DS ( 35886 8 2 7862b27f5f516ebe19680444d4ce5e762981931842c465f00236401d8bd973ee )`
	Query to c.gtld-servers.net for net/DNSKEY
	Received 775 bytes from 192.26.92.30
	;; Response received from 192.26.92.30 (775 octets) ;; HEADER SECTION ;; id = 38133 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; net. IN DNSKEY ;; ANSWER SECTION (3 records) net. 86400 IN DNSKEY ( 257 3 8 AQOYBnzqWXIEj6mlgXg4LWC0HP2n8eK8XqgHlmJ/69iuIHsa1TrHDG6TcOra/pyeGKwH0nKZhTmX SuUFGh9BCNiwVDuyyb6OBGy2Nte9Kr8NwWg4q+zhSoOf4D+gC9dEzg0yFdwT0DKEvmNPt0K4jbQD S4Yimb+uPKuF6yieWWrPYYCrv8C9KC8JMze2uT6NuWBfsl2fDUoV4l65qMww06D7n+p7RbdwWkAZ 0fA63mXVXBZF6kpDtsYD7SUB9jhhfLQE/r85bvg3FaSs5Wi2BaqN06SzGWI1DHu7axthIOeHwg00 zxlhTpoYCH0ldoQz+S65zWYi/fRJiyLSBb6JZOvn ) ; Key ID = 35886 net. 86400 IN DNSKEY ( 256 3 8 AQOz5FEr0vaIuMtw+2zifoZftVKKYRg8FFUUtJnMH6zWpjwHFriry/RyUCt6sNkQpPpTWjErRkuc LIN03AhLdFuqIRuUnIgZsxHv7kx/+eNX5sSDCVG06+5GoewVwzlNr9lewP0TZYsnVvWQ9nJfF+Ob Bv6cI92FUAy4qKZadPPQg6ZLKOq4w5kLTcJejUloYrOiPGNMvCkiI7E+ZfjUp7TJ ) ; Key ID = 27554 net. 86400 IN RRSIG ( DNSKEY 8 1 86400 20230613162830 20230529162330 35886 net. DUJ4Q4bhAzQQHujpv1uh7fgib2eVWiKIOWdM41wf47lOCJBLxPbXDFlf5/1EFr2ZGWcBAHDggyhw UqJV7SIXC4I+dJKvVllRHFjJQ/AoxBp+nEdWYDJ1J81cu9hG75SN7+H14/SaqZCkzyR8t1GSlcs2 FqtaoJg7NZIJPQxAeeOjUaFBq0v34bUeL0o7T9dWHBp/n6xfvFSF9go4kD5YIMU7Rw0JHgilXHtu r0UjKNX40cml11+PJTk7cqd65pl9AE+BJ1sOQRF4PFA+xpdcAc4aas6d/rAWSwoUjOEC447+fpYd QjFb1EL/tCzeeJSd9Rl2GaSs0d0mC2ssJd8bVA== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found 2 DNSKEY records for net
	`net. 86400 IN DNSKEY ( 257 3 8 AQOYBnzqWXIEj6mlgXg4LWC0HP2n8eK8XqgHlmJ/69iuIHsa1TrHDG6TcOra/pyeGKwH0nKZhTmX SuUFGh9BCNiwVDuyyb6OBGy2Nte9Kr8NwWg4q+zhSoOf4D+gC9dEzg0yFdwT0DKEvmNPt0K4jbQD S4Yimb+uPKuF6yieWWrPYYCrv8C9KC8JMze2uT6NuWBfsl2fDUoV4l65qMww06D7n+p7RbdwWkAZ 0fA63mXVXBZF6kpDtsYD7SUB9jhhfLQE/r85bvg3FaSs5Wi2BaqN06SzGWI1DHu7axthIOeHwg00 zxlhTpoYCH0ldoQz+S65zWYi/fRJiyLSBb6JZOvn ) ; Key ID = 35886`
	`net. 86400 IN DNSKEY ( 256 3 8 AQOz5FEr0vaIuMtw+2zifoZftVKKYRg8FFUUtJnMH6zWpjwHFriry/RyUCt6sNkQpPpTWjErRkuc LIN03AhLdFuqIRuUnIgZsxHv7kx/+eNX5sSDCVG06+5GoewVwzlNr9lewP0TZYsnVvWQ9nJfF+Ob Bv6cI92FUAy4qKZadPPQg6ZLKOq4w5kLTcJejUloYrOiPGNMvCkiI7E+ZfjUp7TJ ) ; Key ID = 27554`
	DNSKEY=35886/SEP is now in the chain-of-trust
	DS=35886/SHA-256 verifies DNSKEY=35886/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`net. 86400 IN RRSIG ( DNSKEY 8 1 86400 20230613162830 20230529162330 35886 net. DUJ4Q4bhAzQQHujpv1uh7fgib2eVWiKIOWdM41wf47lOCJBLxPbXDFlf5/1EFr2ZGWcBAHDggyhw UqJV7SIXC4I+dJKvVllRHFjJQ/AoxBp+nEdWYDJ1J81cu9hG75SN7+H14/SaqZCkzyR8t1GSlcs2 FqtaoJg7NZIJPQxAeeOjUaFBq0v34bUeL0o7T9dWHBp/n6xfvFSF9go4kD5YIMU7Rw0JHgilXHtu r0UjKNX40cml11+PJTk7cqd65pl9AE+BJ1sOQRF4PFA+xpdcAc4aas6d/rAWSwoUjOEC447+fpYd QjFb1EL/tCzeeJSd9Rl2GaSs0d0mC2ssJd8bVA== )`
	RRSIG=35886 and DNSKEY=35886/SEP verifies the DNSKEY RRset
	DNSKEY=27554 is now in the chain-of-trust
	Query to k.gtld-servers.net for wildcard.usembassy.gov.edgekey.net/A
	Received 1177 bytes from 192.52.178.30
	;; Response received from 192.52.178.30 (1177 octets) ;; HEADER SECTION ;; id = 46912 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 17 arcount = 17 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; wildcard.usembassy.gov.edgekey.net. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (17 records) edgekey.net. 172800 IN NS ns1-66.akam.net. edgekey.net. 172800 IN NS usw6.akam.net. edgekey.net. 172800 IN NS adns1.akam.net. edgekey.net. 172800 IN NS ns4-66.akam.net. edgekey.net. 172800 IN NS ns7-65.akam.net. edgekey.net. 172800 IN NS ns5-66.akam.net. edgekey.net. 172800 IN NS a6-65.akam.net. edgekey.net. 172800 IN NS a12-65.akam.net. edgekey.net. 172800 IN NS a5-65.akam.net. edgekey.net. 172800 IN NS a16-65.akam.net. edgekey.net. 172800 IN NS a18-65.akam.net. edgekey.net. 172800 IN NS a28-65.akam.net. edgekey.net. 172800 IN NS a13-65.akam.net. A1RT98BS5QGC9NFI51S9HCI47ULJG6JH.net. 86400 IN NSEC3 ( 1 1 0 - a1rtlnpgulogn7b9a62shje1u3ttp8dr NS SOA RRSIG DNSKEY NSEC3PARAM ) A1RT98BS5QGC9NFI51S9HCI47ULJG6JH.net. 86400 IN RRSIG ( NSEC3 8 2 86400 20230615070249 20230608055249 27554 net. IfYgWl4exh2hggg6IanGwZ5Nx7Oy3zLfYjvFdD83bnJMHTlx3x0KfsO/evRjIfMettg039iZlQLq 8MLr5pj2C5YwJJuGYsBJ6u2Tm8rSWVrWA/DLFAUnJhmwRqxivdqAIpzZpP8CPVKY6s1nUnKIPk5w TZQBcLTPRkUv54bv7wP7CqJ7qavZ7U6ALFq0IIv6Nf/1y6npH4Syq/uK9+9ZnQ== ) 2A0AMFIL9M1GI71IM0E3BOLIKTM5FF6H.net. 86400 IN NSEC3 ( 1 1 0 - 2a0bec25j7pueu9qnv5qechcg9nhmska NS DS RRSIG ) 2A0AMFIL9M1GI71IM0E3BOLIKTM5FF6H.net. 86400 IN RRSIG ( NSEC3 8 2 86400 20230614070414 20230607055414 27554 net. inAjW7JUqKZ1IsNKti4RFREyQzDCYCjfFE/wftoKKGLiGzCknJdjmyqL76J1tm6hPyGk4T97HC5a Yx61mZpm4vHc39Q9NCcY6BE0MgjKpYPLVEZGIAd0kDlwziUcDxRCg+nOXB49JFGUhWK6VgrX1MVR 5zqIn2gQd5nSHyPnToTQqh2HMW1keAPG2xVMsx+kWyUyBDFk4NglAEEBZ7lANQ== ) ;; ADDITIONAL SECTION (17 records) ns1-66.akam.net. 172800 IN A 193.108.91.66 ns1-66.akam.net. 172800 IN AAAA 2600:1401:2::42 usw6.akam.net. 172800 IN A 23.61.199.64 adns1.akam.net. 172800 IN A 96.7.50.66 ns4-66.akam.net. 172800 IN A 84.53.139.66 ns7-65.akam.net. 172800 IN A 96.7.49.65 ns5-66.akam.net. 172800 IN A 184.85.248.66 a6-65.akam.net. 172800 IN A 23.211.133.65 a6-65.akam.net. 172800 IN AAAA 2600:1401:1::41 a12-65.akam.net. 172800 IN A 184.26.160.65 a5-65.akam.net. 172800 IN A 95.100.168.65 a16-65.akam.net. 172800 IN A 23.211.132.65 a16-65.akam.net. 172800 IN AAAA 2600:1406:1b::41 a18-65.akam.net. 172800 IN A 95.101.36.65 a28-65.akam.net. 172800 IN A 95.100.173.65 a13-65.akam.net. 172800 IN A 2.22.230.65 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Query to e.gtld-servers.net for edgekey.net/DNSKEY
	Received 1154 bytes from 192.12.94.30
	;; Response received from 192.12.94.30 (1154 octets) ;; HEADER SECTION ;; id = 8303 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 17 arcount = 17 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; edgekey.net. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (17 records) edgekey.net. 172800 IN NS ns1-66.akam.net. edgekey.net. 172800 IN NS usw6.akam.net. edgekey.net. 172800 IN NS adns1.akam.net. edgekey.net. 172800 IN NS ns4-66.akam.net. edgekey.net. 172800 IN NS ns7-65.akam.net. edgekey.net. 172800 IN NS ns5-66.akam.net. edgekey.net. 172800 IN NS a6-65.akam.net. edgekey.net. 172800 IN NS a12-65.akam.net. edgekey.net. 172800 IN NS a5-65.akam.net. edgekey.net. 172800 IN NS a16-65.akam.net. edgekey.net. 172800 IN NS a18-65.akam.net. edgekey.net. 172800 IN NS a28-65.akam.net. edgekey.net. 172800 IN NS a13-65.akam.net. A1RT98BS5QGC9NFI51S9HCI47ULJG6JH.net. 86400 IN NSEC3 ( 1 1 0 - a1rtlnpgulogn7b9a62shje1u3ttp8dr NS SOA RRSIG DNSKEY NSEC3PARAM ) A1RT98BS5QGC9NFI51S9HCI47ULJG6JH.net. 86400 IN RRSIG ( NSEC3 8 2 86400 20230615070249 20230608055249 27554 net. IfYgWl4exh2hggg6IanGwZ5Nx7Oy3zLfYjvFdD83bnJMHTlx3x0KfsO/evRjIfMettg039iZlQLq 8MLr5pj2C5YwJJuGYsBJ6u2Tm8rSWVrWA/DLFAUnJhmwRqxivdqAIpzZpP8CPVKY6s1nUnKIPk5w TZQBcLTPRkUv54bv7wP7CqJ7qavZ7U6ALFq0IIv6Nf/1y6npH4Syq/uK9+9ZnQ== ) 2A0AMFIL9M1GI71IM0E3BOLIKTM5FF6H.net. 86400 IN NSEC3 ( 1 1 0 - 2a0bec25j7pueu9qnv5qechcg9nhmska NS DS RRSIG ) 2A0AMFIL9M1GI71IM0E3BOLIKTM5FF6H.net. 86400 IN RRSIG ( NSEC3 8 2 86400 20230614070414 20230607055414 27554 net. inAjW7JUqKZ1IsNKti4RFREyQzDCYCjfFE/wftoKKGLiGzCknJdjmyqL76J1tm6hPyGk4T97HC5a Yx61mZpm4vHc39Q9NCcY6BE0MgjKpYPLVEZGIAd0kDlwziUcDxRCg+nOXB49JFGUhWK6VgrX1MVR 5zqIn2gQd5nSHyPnToTQqh2HMW1keAPG2xVMsx+kWyUyBDFk4NglAEEBZ7lANQ== ) ;; ADDITIONAL SECTION (17 records) ns1-66.akam.net. 172800 IN A 193.108.91.66 ns1-66.akam.net. 172800 IN AAAA 2600:1401:2::42 usw6.akam.net. 172800 IN A 23.61.199.64 adns1.akam.net. 172800 IN A 96.7.50.66 ns4-66.akam.net. 172800 IN A 84.53.139.66 ns7-65.akam.net. 172800 IN A 96.7.49.65 ns5-66.akam.net. 172800 IN A 184.85.248.66 a6-65.akam.net. 172800 IN A 23.211.133.65 a6-65.akam.net. 172800 IN AAAA 2600:1401:1::41 a12-65.akam.net. 172800 IN A 184.26.160.65 a5-65.akam.net. 172800 IN A 95.100.168.65 a16-65.akam.net. 172800 IN A 23.211.132.65 a16-65.akam.net. 172800 IN AAAA 2600:1406:1b::41 a18-65.akam.net. 172800 IN A 95.101.36.65 a28-65.akam.net. 172800 IN A 95.100.173.65 a13-65.akam.net. 172800 IN A 2.22.230.65 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found child zone edgekey.net

edgekey.net

	Checking DS between net and edgekey.net
	Query to c.gtld-servers.net for edgekey.net/DS
	Received 857 bytes from 192.26.92.30
	;; Response received from 192.26.92.30 (857 octets) ;; HEADER SECTION ;; id = 58367 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 6 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; edgekey.net. IN DS ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (6 records) A1RT98BS5QGC9NFI51S9HCI47ULJG6JH.net. 86400 IN NSEC3 ( 1 1 0 - a1rtlnpgulogn7b9a62shje1u3ttp8dr NS SOA RRSIG DNSKEY NSEC3PARAM ) A1RT98BS5QGC9NFI51S9HCI47ULJG6JH.net. 86400 IN RRSIG ( NSEC3 8 2 86400 20230615070249 20230608055249 27554 net. IfYgWl4exh2hggg6IanGwZ5Nx7Oy3zLfYjvFdD83bnJMHTlx3x0KfsO/evRjIfMettg039iZlQLq 8MLr5pj2C5YwJJuGYsBJ6u2Tm8rSWVrWA/DLFAUnJhmwRqxivdqAIpzZpP8CPVKY6s1nUnKIPk5w TZQBcLTPRkUv54bv7wP7CqJ7qavZ7U6ALFq0IIv6Nf/1y6npH4Syq/uK9+9ZnQ== ) net. 900 IN SOA ( a.gtld-servers.net. nstld.verisign-grs.com. 1686233573 ;serial 1800 ;refresh 900 ;retry 604800 ;expire 86400 ;minimum ) net. 900 IN RRSIG ( SOA 8 1 900 20230615141253 20230608130253 27554 net. HKAWxzlO9WcUK6b+ts5AfzBc63OrmBw5YoPOr4AgvWYdKqdmjCUHzjUBuGGX1AV2WI3JmEjGoiI3 IykAQwuHPhpUb8qdPfRYS0X21VORKPPTM4DRAlipU6wmnQ29sjwj4KfTRd2QxjM4J5Ov/XM0NKpx x1JMj2Kqtrot7sLGKkS0HA0Zh/h19A97qijI3zaDENh+Xi/o42AB/NhsxUS5+g== ) 2A0AMFIL9M1GI71IM0E3BOLIKTM5FF6H.net. 86400 IN NSEC3 ( 1 1 0 - 2a0bec25j7pueu9qnv5qechcg9nhmska NS DS RRSIG ) 2A0AMFIL9M1GI71IM0E3BOLIKTM5FF6H.net. 86400 IN RRSIG ( NSEC3 8 2 86400 20230614070414 20230607055414 27554 net. inAjW7JUqKZ1IsNKti4RFREyQzDCYCjfFE/wftoKKGLiGzCknJdjmyqL76J1tm6hPyGk4T97HC5a Yx61mZpm4vHc39Q9NCcY6BE0MgjKpYPLVEZGIAd0kDlwziUcDxRCg+nOXB49JFGUhWK6VgrX1MVR 5zqIn2gQd5nSHyPnToTQqh2HMW1keAPG2xVMsx+kWyUyBDFk4NglAEEBZ7lANQ== ) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	No DS records found for edgekey.net in the net zone
	Query to a13-65.akam.net for edgekey.net/DNSKEY
	Received 103 bytes from 2.22.230.65
	;; Response received from 2.22.230.65 (103 octets) ;; HEADER SECTION ;; id = 33518 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 1 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; edgekey.net. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (1 record) edgekey.net. 180 IN SOA ( ns1-2.akamai.com. hostmaster.akamai.com. 1579314978 ;serial 900 ;refresh 300 ;retry 604800 ;expire 180 ;minimum ) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	No DNSKEY records found
	Query to a28-65.akam.net for wildcard.usembassy.gov.edgekey.net/A
	Received 100 bytes from 95.100.173.65
	;; Response received from 95.100.173.65 (100 octets) ;; HEADER SECTION ;; id = 15093 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 1 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; wildcard.usembassy.gov.edgekey.net. IN A ;; ANSWER SECTION (1 record) wildcard.usembassy.gov.edgekey.net. 21600 IN CNAME ( e98302.dscb.akamaiedge.net. ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	a28-65.akam.net is authoritative for wildcard.usembassy.gov.edgekey.net
	Query to a12-65.akam.net for gov.edgekey.net/DNSKEY
	Received 107 bytes from 184.26.160.65
	;; Response received from 184.26.160.65 (107 octets) ;; HEADER SECTION ;; id = 5967 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 1 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; gov.edgekey.net. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (1 record) edgekey.net. 180 IN SOA ( ns1-2.akamai.com. hostmaster.akamai.com. 1579314978 ;serial 900 ;refresh 300 ;retry 604800 ;expire 180 ;minimum ) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Query to a16-65.akam.net for usembassy.gov.edgekey.net/DNSKEY
	Received 117 bytes from 23.211.132.65
	;; Response received from 23.211.132.65 (117 octets) ;; HEADER SECTION ;; id = 44939 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 1 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; usembassy.gov.edgekey.net. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (1 record) edgekey.net. 180 IN SOA ( ns1-2.akamai.com. hostmaster.akamai.com. 1579314978 ;serial 900 ;refresh 300 ;retry 604800 ;expire 180 ;minimum ) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Query to ns4-66.akam.net for wildcard.usembassy.gov.edgekey.net/DNSKEY
	Received 100 bytes from 84.53.139.66
	;; Response received from 84.53.139.66 (100 octets) ;; HEADER SECTION ;; id = 41355 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 1 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; wildcard.usembassy.gov.edgekey.net. IN DNSKEY ;; ANSWER SECTION (1 record) wildcard.usembassy.gov.edgekey.net. 21600 IN CNAME ( e98302.dscb.akamaiedge.net. ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	wildcard.usembassy.gov.edgekey.net is a CNAME to e98302.dscb.akamaiedge.net
	No RRSIGs found

net

	Query to h.gtld-servers.net for e98302.dscb.akamaiedge.net/A
	Received 1113 bytes from 192.54.112.30
	;; Response received from 192.54.112.30 (1113 octets) ;; HEADER SECTION ;; id = 6471 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 17 arcount = 15 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; e98302.dscb.akamaiedge.net. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (17 records) akamaiedge.net. 172800 IN NS la1.akamaiedge.net. akamaiedge.net. 172800 IN NS la3.akamaiedge.net. akamaiedge.net. 172800 IN NS lar2.akamaiedge.net. akamaiedge.net. 172800 IN NS ns3-194.akamaiedge.net. akamaiedge.net. 172800 IN NS ns6-194.akamaiedge.net. akamaiedge.net. 172800 IN NS ns7-194.akamaiedge.net. akamaiedge.net. 172800 IN NS ns5-194.akamaiedge.net. akamaiedge.net. 172800 IN NS a12-192.akamaiedge.net. akamaiedge.net. 172800 IN NS a28-192.akamaiedge.net. akamaiedge.net. 172800 IN NS a6-192.akamaiedge.net. akamaiedge.net. 172800 IN NS a1-192.akamaiedge.net. akamaiedge.net. 172800 IN NS a13-192.akamaiedge.net. akamaiedge.net. 172800 IN NS a11-192.akamaiedge.net. A1RT98BS5QGC9NFI51S9HCI47ULJG6JH.net. 86400 IN NSEC3 ( 1 1 0 - a1rtlnpgulogn7b9a62shje1u3ttp8dr NS SOA RRSIG DNSKEY NSEC3PARAM ) A1RT98BS5QGC9NFI51S9HCI47ULJG6JH.net. 86400 IN RRSIG ( NSEC3 8 2 86400 20230615070249 20230608055249 27554 net. IfYgWl4exh2hggg6IanGwZ5Nx7Oy3zLfYjvFdD83bnJMHTlx3x0KfsO/evRjIfMettg039iZlQLq 8MLr5pj2C5YwJJuGYsBJ6u2Tm8rSWVrWA/DLFAUnJhmwRqxivdqAIpzZpP8CPVKY6s1nUnKIPk5w TZQBcLTPRkUv54bv7wP7CqJ7qavZ7U6ALFq0IIv6Nf/1y6npH4Syq/uK9+9ZnQ== ) GCRQED795V343AT1SHAJVTRUH2TP3NQV.net. 86400 IN NSEC3 ( 1 1 0 - gcrt8m94sakjl9is4doef588j7uvkp84 NS DS RRSIG ) GCRQED795V343AT1SHAJVTRUH2TP3NQV.net. 86400 IN RRSIG ( NSEC3 8 2 86400 20230614070211 20230607055211 27554 net. lRHfsTL/HrwmzY/xDwJ2G+Zmis5Lus/VZrniiTup1xbpbV/krwdPUFcnqZJhnIDnS11JS6ys9LcL v12jZ8qUvcbZl3VDQD4ZqVEb3aNkcMFdetORUdGYgttSqjX97ovYS14hmrpRANgRxSBa/U7K/iFt 6MQX7BEL8qWZcZTUspfL8cK9nUP7M+6yBDvOERfNRprOl87IZcQaOFRoZZaRJQ== ) ;; ADDITIONAL SECTION (15 records) la1.akamaiedge.net. 172800 IN A 184.26.161.192 la3.akamaiedge.net. 172800 IN A 95.101.36.192 lar2.akamaiedge.net. 172800 IN A 2.16.40.192 ns3-194.akamaiedge.net. 172800 IN A 23.61.199.194 ns3-194.akamaiedge.net. 172800 IN AAAA 2600:1406:32::c2 ns6-194.akamaiedge.net. 172800 IN A 95.100.168.194 ns7-194.akamaiedge.net. 172800 IN A 96.7.49.194 ns5-194.akamaiedge.net. 172800 IN A 184.85.248.194 a12-192.akamaiedge.net. 172800 IN A 184.26.160.192 a28-192.akamaiedge.net. 172800 IN A 95.100.173.192 a6-192.akamaiedge.net. 172800 IN A 23.211.133.192 a1-192.akamaiedge.net. 172800 IN A 193.108.88.0 a13-192.akamaiedge.net. 172800 IN A 2.22.230.192 a11-192.akamaiedge.net. 172800 IN A 84.53.139.192 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Query to e.gtld-servers.net for akamaiedge.net/DNSKEY
	Received 1101 bytes from 192.12.94.30
	;; Response received from 192.12.94.30 (1101 octets) ;; HEADER SECTION ;; id = 9740 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 17 arcount = 15 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; akamaiedge.net. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (17 records) akamaiedge.net. 172800 IN NS la1.akamaiedge.net. akamaiedge.net. 172800 IN NS la3.akamaiedge.net. akamaiedge.net. 172800 IN NS lar2.akamaiedge.net. akamaiedge.net. 172800 IN NS ns3-194.akamaiedge.net. akamaiedge.net. 172800 IN NS ns6-194.akamaiedge.net. akamaiedge.net. 172800 IN NS ns7-194.akamaiedge.net. akamaiedge.net. 172800 IN NS ns5-194.akamaiedge.net. akamaiedge.net. 172800 IN NS a12-192.akamaiedge.net. akamaiedge.net. 172800 IN NS a28-192.akamaiedge.net. akamaiedge.net. 172800 IN NS a6-192.akamaiedge.net. akamaiedge.net. 172800 IN NS a1-192.akamaiedge.net. akamaiedge.net. 172800 IN NS a13-192.akamaiedge.net. akamaiedge.net. 172800 IN NS a11-192.akamaiedge.net. A1RT98BS5QGC9NFI51S9HCI47ULJG6JH.net. 86400 IN NSEC3 ( 1 1 0 - a1rtlnpgulogn7b9a62shje1u3ttp8dr NS SOA RRSIG DNSKEY NSEC3PARAM ) A1RT98BS5QGC9NFI51S9HCI47ULJG6JH.net. 86400 IN RRSIG ( NSEC3 8 2 86400 20230615070249 20230608055249 27554 net. IfYgWl4exh2hggg6IanGwZ5Nx7Oy3zLfYjvFdD83bnJMHTlx3x0KfsO/evRjIfMettg039iZlQLq 8MLr5pj2C5YwJJuGYsBJ6u2Tm8rSWVrWA/DLFAUnJhmwRqxivdqAIpzZpP8CPVKY6s1nUnKIPk5w TZQBcLTPRkUv54bv7wP7CqJ7qavZ7U6ALFq0IIv6Nf/1y6npH4Syq/uK9+9ZnQ== ) GCRQED795V343AT1SHAJVTRUH2TP3NQV.net. 86400 IN NSEC3 ( 1 1 0 - gcrt8m94sakjl9is4doef588j7uvkp84 NS DS RRSIG ) GCRQED795V343AT1SHAJVTRUH2TP3NQV.net. 86400 IN RRSIG ( NSEC3 8 2 86400 20230614070211 20230607055211 27554 net. lRHfsTL/HrwmzY/xDwJ2G+Zmis5Lus/VZrniiTup1xbpbV/krwdPUFcnqZJhnIDnS11JS6ys9LcL v12jZ8qUvcbZl3VDQD4ZqVEb3aNkcMFdetORUdGYgttSqjX97ovYS14hmrpRANgRxSBa/U7K/iFt 6MQX7BEL8qWZcZTUspfL8cK9nUP7M+6yBDvOERfNRprOl87IZcQaOFRoZZaRJQ== ) ;; ADDITIONAL SECTION (15 records) la1.akamaiedge.net. 172800 IN A 184.26.161.192 la3.akamaiedge.net. 172800 IN A 95.101.36.192 lar2.akamaiedge.net. 172800 IN A 2.16.40.192 ns3-194.akamaiedge.net. 172800 IN A 23.61.199.194 ns3-194.akamaiedge.net. 172800 IN AAAA 2600:1406:32::c2 ns6-194.akamaiedge.net. 172800 IN A 95.100.168.194 ns7-194.akamaiedge.net. 172800 IN A 96.7.49.194 ns5-194.akamaiedge.net. 172800 IN A 184.85.248.194 a12-192.akamaiedge.net. 172800 IN A 184.26.160.192 a28-192.akamaiedge.net. 172800 IN A 95.100.173.192 a6-192.akamaiedge.net. 172800 IN A 23.211.133.192 a1-192.akamaiedge.net. 172800 IN A 193.108.88.0 a13-192.akamaiedge.net. 172800 IN A 2.22.230.192 a11-192.akamaiedge.net. 172800 IN A 84.53.139.192 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found child zone akamaiedge.net

akamaiedge.net

	Checking DS between net and akamaiedge.net
	Query to c.gtld-servers.net for akamaiedge.net/DS
	Received 860 bytes from 192.26.92.30
	;; Response received from 192.26.92.30 (860 octets) ;; HEADER SECTION ;; id = 31694 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 6 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; akamaiedge.net. IN DS ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (6 records) A1RT98BS5QGC9NFI51S9HCI47ULJG6JH.net. 86400 IN NSEC3 ( 1 1 0 - a1rtlnpgulogn7b9a62shje1u3ttp8dr NS SOA RRSIG DNSKEY NSEC3PARAM ) A1RT98BS5QGC9NFI51S9HCI47ULJG6JH.net. 86400 IN RRSIG ( NSEC3 8 2 86400 20230615070249 20230608055249 27554 net. IfYgWl4exh2hggg6IanGwZ5Nx7Oy3zLfYjvFdD83bnJMHTlx3x0KfsO/evRjIfMettg039iZlQLq 8MLr5pj2C5YwJJuGYsBJ6u2Tm8rSWVrWA/DLFAUnJhmwRqxivdqAIpzZpP8CPVKY6s1nUnKIPk5w TZQBcLTPRkUv54bv7wP7CqJ7qavZ7U6ALFq0IIv6Nf/1y6npH4Syq/uK9+9ZnQ== ) net. 900 IN SOA ( a.gtld-servers.net. nstld.verisign-grs.com. 1686233573 ;serial 1800 ;refresh 900 ;retry 604800 ;expire 86400 ;minimum ) net. 900 IN RRSIG ( SOA 8 1 900 20230615141253 20230608130253 27554 net. HKAWxzlO9WcUK6b+ts5AfzBc63OrmBw5YoPOr4AgvWYdKqdmjCUHzjUBuGGX1AV2WI3JmEjGoiI3 IykAQwuHPhpUb8qdPfRYS0X21VORKPPTM4DRAlipU6wmnQ29sjwj4KfTRd2QxjM4J5Ov/XM0NKpx x1JMj2Kqtrot7sLGKkS0HA0Zh/h19A97qijI3zaDENh+Xi/o42AB/NhsxUS5+g== ) GCRQED795V343AT1SHAJVTRUH2TP3NQV.net. 86400 IN NSEC3 ( 1 1 0 - gcrt8m94sakjl9is4doef588j7uvkp84 NS DS RRSIG ) GCRQED795V343AT1SHAJVTRUH2TP3NQV.net. 86400 IN RRSIG ( NSEC3 8 2 86400 20230614070211 20230607055211 27554 net. lRHfsTL/HrwmzY/xDwJ2G+Zmis5Lus/VZrniiTup1xbpbV/krwdPUFcnqZJhnIDnS11JS6ys9LcL v12jZ8qUvcbZl3VDQD4ZqVEb3aNkcMFdetORUdGYgttSqjX97ovYS14hmrpRANgRxSBa/U7K/iFt 6MQX7BEL8qWZcZTUspfL8cK9nUP7M+6yBDvOERfNRprOl87IZcQaOFRoZZaRJQ== ) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	No DS records found for akamaiedge.net in the net zone
	Query to a28-192.akamaiedge.net for akamaiedge.net/DNSKEY
	Received 109 bytes from 95.100.173.192
	;; Response received from 95.100.173.192 (109 octets) ;; HEADER SECTION ;; id = 50633 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 1 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; akamaiedge.net. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (1 record) akamaiedge.net. 180 IN SOA ( internal.akamaiedge.net. hostmaster.akamai.com. 1559044082 ;serial 90000 ;refresh 90000 ;retry 90000 ;expire 180 ;minimum ) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	No DNSKEY records found
	Query to a11-192.akamaiedge.net for e98302.dscb.akamaiedge.net/A
	Received 379 bytes from 84.53.139.192
	;; Response received from 84.53.139.192 (379 octets) ;; HEADER SECTION ;; id = 4547 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 8 arcount = 10 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; e98302.dscb.akamaiedge.net. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (8 records) dscb.akamaiedge.net. 4000 IN NS n6dscb.akamaiedge.net. dscb.akamaiedge.net. 4000 IN NS n7dscb.akamaiedge.net. dscb.akamaiedge.net. 4000 IN NS n4dscb.akamaiedge.net. dscb.akamaiedge.net. 4000 IN NS n2dscb.akamaiedge.net. dscb.akamaiedge.net. 4000 IN NS n3dscb.akamaiedge.net. dscb.akamaiedge.net. 4000 IN NS n1dscb.akamaiedge.net. dscb.akamaiedge.net. 4000 IN NS n5dscb.akamaiedge.net. dscb.akamaiedge.net. 4000 IN NS n0dscb.akamaiedge.net. ;; ADDITIONAL SECTION (10 records) n3dscb.akamaiedge.net. 4000 IN A 23.222.0.205 n0dscb.akamaiedge.net. 4000 IN A 88.221.81.192 n7dscb.akamaiedge.net. 4000 IN A 184.28.17.239 n1dscb.akamaiedge.net. 4000 IN A 23.218.222.11 n2dscb.akamaiedge.net. 4000 IN A 23.222.0.218 n6dscb.akamaiedge.net. 4000 IN A 23.222.16.22 n5dscb.akamaiedge.net. 4000 IN A 23.222.0.204 n4dscb.akamaiedge.net. 4000 IN A 23.222.0.216 n0dscb.akamaiedge.net. 4000 IN AAAA 2600:1480:e800::c0 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Query to ns6-194.akamaiedge.net for dscb.akamaiedge.net/DNSKEY
	Received 372 bytes from 95.100.168.194
	;; Response received from 95.100.168.194 (372 octets) ;; HEADER SECTION ;; id = 21704 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 8 arcount = 10 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; dscb.akamaiedge.net. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (8 records) dscb.akamaiedge.net. 4000 IN NS n5dscb.akamaiedge.net. dscb.akamaiedge.net. 4000 IN NS n1dscb.akamaiedge.net. dscb.akamaiedge.net. 4000 IN NS n2dscb.akamaiedge.net. dscb.akamaiedge.net. 4000 IN NS n6dscb.akamaiedge.net. dscb.akamaiedge.net. 4000 IN NS n7dscb.akamaiedge.net. dscb.akamaiedge.net. 4000 IN NS n4dscb.akamaiedge.net. dscb.akamaiedge.net. 4000 IN NS n3dscb.akamaiedge.net. dscb.akamaiedge.net. 4000 IN NS n0dscb.akamaiedge.net. ;; ADDITIONAL SECTION (10 records) n6dscb.akamaiedge.net. 4000 IN A 23.222.16.22 n5dscb.akamaiedge.net. 4000 IN A 23.222.0.204 n3dscb.akamaiedge.net. 4000 IN A 23.222.0.205 n1dscb.akamaiedge.net. 4000 IN A 23.218.222.11 n0dscb.akamaiedge.net. 4000 IN AAAA 2600:1480:e800::c0 n4dscb.akamaiedge.net. 4000 IN A 23.222.0.216 n0dscb.akamaiedge.net. 4000 IN A 88.221.81.192 n2dscb.akamaiedge.net. 4000 IN A 23.222.0.218 n7dscb.akamaiedge.net. 4000 IN A 184.28.17.239 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found child zone dscb.akamaiedge.net

dscb.akamaiedge.net

	Checking DS between akamaiedge.net and dscb.akamaiedge.net
	Query to a28-192.akamaiedge.net for dscb.akamaiedge.net/DS
	Received 114 bytes from 95.100.173.192
	;; Response received from 95.100.173.192 (114 octets) ;; HEADER SECTION ;; id = 44583 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 1 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; dscb.akamaiedge.net. IN DS ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (1 record) akamaiedge.net. 180 IN SOA ( internal.akamaiedge.net. hostmaster.akamai.com. 1559044082 ;serial 90000 ;refresh 90000 ;retry 90000 ;expire 180 ;minimum ) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	No DS records found for dscb.akamaiedge.net in the akamaiedge.net zone
	Query to n0dscb.akamaiedge.net for dscb.akamaiedge.net/DNSKEY
	Received 112 bytes from 88.221.81.192
	;; Response received from 88.221.81.192 (112 octets) ;; HEADER SECTION ;; id = 35906 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 1 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; dscb.akamaiedge.net. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (1 record) dscb.akamaiedge.net. 1000 IN SOA ( n0dscb.akamaiedge.net. hostmaster.akamai.com. 1686233601 ;serial 1000 ;refresh 1000 ;retry 1000 ;expire 1800 ;minimum ) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	No DNSKEY records found
	Query to n3dscb.akamaiedge.net for e98302.dscb.akamaiedge.net/A
	Received 87 bytes from 23.222.0.205
	;; Response received from 23.222.0.205 (87 octets) ;; HEADER SECTION ;; id = 31103 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; e98302.dscb.akamaiedge.net. IN A ;; ANSWER SECTION (2 records) e98302.dscb.akamaiedge.net. 20 IN A 23.47.144.142 e98302.dscb.akamaiedge.net. 20 IN A 23.47.144.134 ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	n3dscb.akamaiedge.net is authoritative for e98302.dscb.akamaiedge.net
	Query to n4dscb.akamaiedge.net for e98302.dscb.akamaiedge.net/DNSKEY
	Received 119 bytes from 23.222.0.216
	;; Response received from 23.222.0.216 (119 octets) ;; HEADER SECTION ;; id = 48223 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 1 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; e98302.dscb.akamaiedge.net. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (1 record) dscb.akamaiedge.net. 1000 IN SOA ( n0dscb.akamaiedge.net. hostmaster.akamai.com. 1686233601 ;serial 1000 ;refresh 1000 ;retry 1000 ;expire 1800 ;minimum ) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Query to n7dscb.akamaiedge.net for dscb.akamaiedge.net/SOA
	Received 112 bytes from 184.28.17.239
	;; Response received from 184.28.17.239 (112 octets) ;; HEADER SECTION ;; id = 802 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 1 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; dscb.akamaiedge.net. IN SOA ;; ANSWER SECTION (1 record) dscb.akamaiedge.net. 1000 IN SOA ( n0dscb.akamaiedge.net. hostmaster.akamai.com. 1686233601 ;serial 1000 ;refresh 1000 ;retry 1000 ;expire 1800 ;minimum ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Query to n6dscb.akamaiedge.net for dscb.akamaiedge.net/SOA
	Received 112 bytes from 23.222.16.22
	;; Response received from 23.222.16.22 (112 octets) ;; HEADER SECTION ;; id = 36380 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 1 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; dscb.akamaiedge.net. IN SOA ;; ANSWER SECTION (1 record) dscb.akamaiedge.net. 1000 IN SOA ( n0dscb.akamaiedge.net. hostmaster.akamai.com. 1686233601 ;serial 1000 ;refresh 1000 ;retry 1000 ;expire 1800 ;minimum ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Query to n1dscb.akamaiedge.net for dscb.akamaiedge.net/SOA
	Received 112 bytes from 23.218.222.11
	;; Response received from 23.218.222.11 (112 octets) ;; HEADER SECTION ;; id = 9359 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 1 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; dscb.akamaiedge.net. IN SOA ;; ANSWER SECTION (1 record) dscb.akamaiedge.net. 1000 IN SOA ( n0dscb.akamaiedge.net. hostmaster.akamai.com. 1686233602 ;serial 1000 ;refresh 1000 ;retry 1000 ;expire 1800 ;minimum ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	n1dscb.akamaiedge.net serial (1686233602) differs from n7dscb.akamaiedge.net serial (1686233601)
	Query to n2dscb.akamaiedge.net for dscb.akamaiedge.net/SOA
	Received 112 bytes from 23.222.0.218
	;; Response received from 23.222.0.218 (112 octets) ;; HEADER SECTION ;; id = 38479 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 1 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; dscb.akamaiedge.net. IN SOA ;; ANSWER SECTION (1 record) dscb.akamaiedge.net. 1000 IN SOA ( n0dscb.akamaiedge.net. hostmaster.akamai.com. 1686233602 ;serial 1000 ;refresh 1000 ;retry 1000 ;expire 1800 ;minimum ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	n2dscb.akamaiedge.net serial (1686233602) differs from n7dscb.akamaiedge.net serial (1686233601)
	Query to n4dscb.akamaiedge.net for dscb.akamaiedge.net/SOA
	Received 112 bytes from 23.222.0.216
	;; Response received from 23.222.0.216 (112 octets) ;; HEADER SECTION ;; id = 28485 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 1 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; dscb.akamaiedge.net. IN SOA ;; ANSWER SECTION (1 record) dscb.akamaiedge.net. 1000 IN SOA ( n0dscb.akamaiedge.net. hostmaster.akamai.com. 1686233602 ;serial 1000 ;refresh 1000 ;retry 1000 ;expire 1800 ;minimum ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	n4dscb.akamaiedge.net serial (1686233602) differs from n7dscb.akamaiedge.net serial (1686233601)
	Query to n5dscb.akamaiedge.net for dscb.akamaiedge.net/SOA
	Received 112 bytes from 23.222.0.204
	;; Response received from 23.222.0.204 (112 octets) ;; HEADER SECTION ;; id = 10195 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 1 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; dscb.akamaiedge.net. IN SOA ;; ANSWER SECTION (1 record) dscb.akamaiedge.net. 1000 IN SOA ( n0dscb.akamaiedge.net. hostmaster.akamai.com. 1686233602 ;serial 1000 ;refresh 1000 ;retry 1000 ;expire 1800 ;minimum ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	n5dscb.akamaiedge.net serial (1686233602) differs from n7dscb.akamaiedge.net serial (1686233601)
	Query to n0dscb.akamaiedge.net for dscb.akamaiedge.net/SOA
	Received 112 bytes from 88.221.81.192
	;; Response received from 88.221.81.192 (112 octets) ;; HEADER SECTION ;; id = 4485 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 1 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; dscb.akamaiedge.net. IN SOA ;; ANSWER SECTION (1 record) dscb.akamaiedge.net. 1000 IN SOA ( n0dscb.akamaiedge.net. hostmaster.akamai.com. 1686233602 ;serial 1000 ;refresh 1000 ;retry 1000 ;expire 1800 ;minimum ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	n0dscb.akamaiedge.net serial (1686233602) differs from n7dscb.akamaiedge.net serial (1686233601)
	Query to n3dscb.akamaiedge.net for e98302.dscb.akamaiedge.net/A
	Received 87 bytes from 23.222.0.205
	;; Response received from 23.222.0.205 (87 octets) ;; HEADER SECTION ;; id = 36835 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; e98302.dscb.akamaiedge.net. IN A ;; ANSWER SECTION (2 records) e98302.dscb.akamaiedge.net. 20 IN A 23.47.144.142 e98302.dscb.akamaiedge.net. 20 IN A 23.47.144.134 ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	e98302.dscb.akamaiedge.net A RR has value 23.47.144.142
	e98302.dscb.akamaiedge.net A RR has value 23.47.144.134
	No RRSIGs found

dscb.akamaiedge.net

	Query to n5dscb.akamaiedge.net for e98302.dscb.akamaiedge.net/A
	Received 87 bytes from 23.222.0.204
	;; Response received from 23.222.0.204 (87 octets) ;; HEADER SECTION ;; id = 14737 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; e98302.dscb.akamaiedge.net. IN A ;; ANSWER SECTION (2 records) e98302.dscb.akamaiedge.net. 20 IN A 23.47.144.134 e98302.dscb.akamaiedge.net. 20 IN A 23.47.144.142 ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	n5dscb.akamaiedge.net is authoritative for e98302.dscb.akamaiedge.net
	Query to n1dscb.akamaiedge.net for e98302.dscb.akamaiedge.net/DNSKEY
	Received 119 bytes from 23.218.222.11
	;; Response received from 23.218.222.11 (119 octets) ;; HEADER SECTION ;; id = 57669 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 1 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; e98302.dscb.akamaiedge.net. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (1 record) dscb.akamaiedge.net. 1000 IN SOA ( n0dscb.akamaiedge.net. hostmaster.akamai.com. 1686233602 ;serial 1000 ;refresh 1000 ;retry 1000 ;expire 1800 ;minimum ) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Query to n5dscb.akamaiedge.net for e98302.dscb.akamaiedge.net/A
	Received 87 bytes from 23.222.0.204
	;; Response received from 23.222.0.204 (87 octets) ;; HEADER SECTION ;; id = 50034 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; e98302.dscb.akamaiedge.net. IN A ;; ANSWER SECTION (2 records) e98302.dscb.akamaiedge.net. 20 IN A 23.47.144.142 e98302.dscb.akamaiedge.net. 20 IN A 23.47.144.134 ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	e98302.dscb.akamaiedge.net A RR has value 23.47.144.142
	e98302.dscb.akamaiedge.net A RR has value 23.47.144.134
	No RRSIGs found

dscb.akamaiedge.net

	Query to n4dscb.akamaiedge.net for e98302.dscb.akamaiedge.net/A
	Received 87 bytes from 23.222.0.216
	;; Response received from 23.222.0.216 (87 octets) ;; HEADER SECTION ;; id = 42115 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; e98302.dscb.akamaiedge.net. IN A ;; ANSWER SECTION (2 records) e98302.dscb.akamaiedge.net. 20 IN A 23.47.144.142 e98302.dscb.akamaiedge.net. 20 IN A 23.47.144.134 ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	n4dscb.akamaiedge.net is authoritative for e98302.dscb.akamaiedge.net
	Query to n2dscb.akamaiedge.net for e98302.dscb.akamaiedge.net/DNSKEY
	Received 119 bytes from 23.222.0.218
	;; Response received from 23.222.0.218 (119 octets) ;; HEADER SECTION ;; id = 4642 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 1 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; e98302.dscb.akamaiedge.net. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (1 record) dscb.akamaiedge.net. 1000 IN SOA ( n0dscb.akamaiedge.net. hostmaster.akamai.com. 1686233602 ;serial 1000 ;refresh 1000 ;retry 1000 ;expire 1800 ;minimum ) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Query to n4dscb.akamaiedge.net for e98302.dscb.akamaiedge.net/A
	Received 87 bytes from 23.222.0.216
	;; Response received from 23.222.0.216 (87 octets) ;; HEADER SECTION ;; id = 5809 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; e98302.dscb.akamaiedge.net. IN A ;; ANSWER SECTION (2 records) e98302.dscb.akamaiedge.net. 20 IN A 23.47.144.142 e98302.dscb.akamaiedge.net. 20 IN A 23.47.144.134 ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	e98302.dscb.akamaiedge.net A RR has value 23.47.144.142
	e98302.dscb.akamaiedge.net A RR has value 23.47.144.134
	No RRSIGs found

dscb.akamaiedge.net

	Query to n1dscb.akamaiedge.net for e98302.dscb.akamaiedge.net/A
	Received 87 bytes from 23.218.222.11
	;; Response received from 23.218.222.11 (87 octets) ;; HEADER SECTION ;; id = 2893 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; e98302.dscb.akamaiedge.net. IN A ;; ANSWER SECTION (2 records) e98302.dscb.akamaiedge.net. 20 IN A 23.47.144.134 e98302.dscb.akamaiedge.net. 20 IN A 23.47.144.142 ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	n1dscb.akamaiedge.net is authoritative for e98302.dscb.akamaiedge.net
	Query to n2dscb.akamaiedge.net for e98302.dscb.akamaiedge.net/DNSKEY
	Received 119 bytes from 23.222.0.218
	;; Response received from 23.222.0.218 (119 octets) ;; HEADER SECTION ;; id = 27011 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 1 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; e98302.dscb.akamaiedge.net. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (1 record) dscb.akamaiedge.net. 1000 IN SOA ( n0dscb.akamaiedge.net. hostmaster.akamai.com. 1686233602 ;serial 1000 ;refresh 1000 ;retry 1000 ;expire 1800 ;minimum ) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Query to n1dscb.akamaiedge.net for e98302.dscb.akamaiedge.net/A
	Received 87 bytes from 23.218.222.11
	;; Response received from 23.218.222.11 (87 octets) ;; HEADER SECTION ;; id = 16605 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; e98302.dscb.akamaiedge.net. IN A ;; ANSWER SECTION (2 records) e98302.dscb.akamaiedge.net. 20 IN A 23.47.144.134 e98302.dscb.akamaiedge.net. 20 IN A 23.47.144.142 ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	e98302.dscb.akamaiedge.net A RR has value 23.47.144.134
	e98302.dscb.akamaiedge.net A RR has value 23.47.144.142
	No RRSIGs found

dscb.akamaiedge.net

	Query to n7dscb.akamaiedge.net for e98302.dscb.akamaiedge.net/A
	Received 87 bytes from 184.28.17.239
	;; Response received from 184.28.17.239 (87 octets) ;; HEADER SECTION ;; id = 23192 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; e98302.dscb.akamaiedge.net. IN A ;; ANSWER SECTION (2 records) e98302.dscb.akamaiedge.net. 20 IN A 23.47.144.142 e98302.dscb.akamaiedge.net. 20 IN A 23.47.144.134 ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	n7dscb.akamaiedge.net is authoritative for e98302.dscb.akamaiedge.net
	Query to n6dscb.akamaiedge.net for e98302.dscb.akamaiedge.net/DNSKEY
	Received 119 bytes from 23.222.16.22
	;; Response received from 23.222.16.22 (119 octets) ;; HEADER SECTION ;; id = 46039 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 1 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; e98302.dscb.akamaiedge.net. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (1 record) dscb.akamaiedge.net. 1000 IN SOA ( n0dscb.akamaiedge.net. hostmaster.akamai.com. 1686233602 ;serial 1000 ;refresh 1000 ;retry 1000 ;expire 1800 ;minimum ) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Query to n7dscb.akamaiedge.net for e98302.dscb.akamaiedge.net/A
	Received 87 bytes from 184.28.17.239
	;; Response received from 184.28.17.239 (87 octets) ;; HEADER SECTION ;; id = 24989 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; e98302.dscb.akamaiedge.net. IN A ;; ANSWER SECTION (2 records) e98302.dscb.akamaiedge.net. 20 IN A 23.47.144.134 e98302.dscb.akamaiedge.net. 20 IN A 23.47.144.142 ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	e98302.dscb.akamaiedge.net A RR has value 23.47.144.134
	e98302.dscb.akamaiedge.net A RR has value 23.47.144.142
	No RRSIGs found

dscb.akamaiedge.net

	Query to n6dscb.akamaiedge.net for e98302.dscb.akamaiedge.net/A
	Received 87 bytes from 23.222.16.22
	;; Response received from 23.222.16.22 (87 octets) ;; HEADER SECTION ;; id = 36150 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; e98302.dscb.akamaiedge.net. IN A ;; ANSWER SECTION (2 records) e98302.dscb.akamaiedge.net. 20 IN A 23.47.144.142 e98302.dscb.akamaiedge.net. 20 IN A 23.47.144.134 ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	n6dscb.akamaiedge.net is authoritative for e98302.dscb.akamaiedge.net
	Query to n6dscb.akamaiedge.net for e98302.dscb.akamaiedge.net/DNSKEY
	Received 119 bytes from 23.222.16.22
	;; Response received from 23.222.16.22 (119 octets) ;; HEADER SECTION ;; id = 56319 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 1 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; e98302.dscb.akamaiedge.net. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (1 record) dscb.akamaiedge.net. 1000 IN SOA ( n0dscb.akamaiedge.net. hostmaster.akamai.com. 1686233602 ;serial 1000 ;refresh 1000 ;retry 1000 ;expire 1800 ;minimum ) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Query to n6dscb.akamaiedge.net for e98302.dscb.akamaiedge.net/A
	Received 87 bytes from 23.222.16.22
	;; Response received from 23.222.16.22 (87 octets) ;; HEADER SECTION ;; id = 16100 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; e98302.dscb.akamaiedge.net. IN A ;; ANSWER SECTION (2 records) e98302.dscb.akamaiedge.net. 20 IN A 23.47.144.134 e98302.dscb.akamaiedge.net. 20 IN A 23.47.144.142 ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	e98302.dscb.akamaiedge.net A RR has value 23.47.144.134
	e98302.dscb.akamaiedge.net A RR has value 23.47.144.142
	No RRSIGs found

dscb.akamaiedge.net

	Query to n0dscb.akamaiedge.net for e98302.dscb.akamaiedge.net/A
	Received 87 bytes from 88.221.81.192
	;; Response received from 88.221.81.192 (87 octets) ;; HEADER SECTION ;; id = 29168 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; e98302.dscb.akamaiedge.net. IN A ;; ANSWER SECTION (2 records) e98302.dscb.akamaiedge.net. 20 IN A 23.47.144.134 e98302.dscb.akamaiedge.net. 20 IN A 23.47.144.142 ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	n0dscb.akamaiedge.net is authoritative for e98302.dscb.akamaiedge.net
	Query to n0dscb.akamaiedge.net for e98302.dscb.akamaiedge.net/DNSKEY
	Received 119 bytes from 88.221.81.192
	;; Response received from 88.221.81.192 (119 octets) ;; HEADER SECTION ;; id = 18031 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 1 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; e98302.dscb.akamaiedge.net. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (1 record) dscb.akamaiedge.net. 1000 IN SOA ( n0dscb.akamaiedge.net. hostmaster.akamai.com. 1686233602 ;serial 1000 ;refresh 1000 ;retry 1000 ;expire 1800 ;minimum ) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Query to n0dscb.akamaiedge.net for e98302.dscb.akamaiedge.net/A
	Received 87 bytes from 88.221.81.192
	;; Response received from 88.221.81.192 (87 octets) ;; HEADER SECTION ;; id = 9278 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; e98302.dscb.akamaiedge.net. IN A ;; ANSWER SECTION (2 records) e98302.dscb.akamaiedge.net. 20 IN A 23.47.144.134 e98302.dscb.akamaiedge.net. 20 IN A 23.47.144.142 ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	e98302.dscb.akamaiedge.net A RR has value 23.47.144.134
	e98302.dscb.akamaiedge.net A RR has value 23.47.144.142
	No RRSIGs found

dscb.akamaiedge.net

	Query to n2dscb.akamaiedge.net for e98302.dscb.akamaiedge.net/A
	Received 87 bytes from 23.222.0.218
	;; Response received from 23.222.0.218 (87 octets) ;; HEADER SECTION ;; id = 56729 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; e98302.dscb.akamaiedge.net. IN A ;; ANSWER SECTION (2 records) e98302.dscb.akamaiedge.net. 20 IN A 23.47.144.134 e98302.dscb.akamaiedge.net. 20 IN A 23.47.144.142 ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	n2dscb.akamaiedge.net is authoritative for e98302.dscb.akamaiedge.net
	Query to n2dscb.akamaiedge.net for e98302.dscb.akamaiedge.net/DNSKEY
	Received 119 bytes from 23.222.0.218
	;; Response received from 23.222.0.218 (119 octets) ;; HEADER SECTION ;; id = 6352 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 1 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; e98302.dscb.akamaiedge.net. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (1 record) dscb.akamaiedge.net. 1000 IN SOA ( n0dscb.akamaiedge.net. hostmaster.akamai.com. 1686233602 ;serial 1000 ;refresh 1000 ;retry 1000 ;expire 1800 ;minimum ) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Query to n2dscb.akamaiedge.net for e98302.dscb.akamaiedge.net/A
	Received 87 bytes from 23.222.0.218
	;; Response received from 23.222.0.218 (87 octets) ;; HEADER SECTION ;; id = 25086 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; e98302.dscb.akamaiedge.net. IN A ;; ANSWER SECTION (2 records) e98302.dscb.akamaiedge.net. 20 IN A 23.47.144.134 e98302.dscb.akamaiedge.net. 20 IN A 23.47.144.142 ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	e98302.dscb.akamaiedge.net A RR has value 23.47.144.134
	e98302.dscb.akamaiedge.net A RR has value 23.47.144.142
	No RRSIGs found

Move your mouse over any or symbols for remediation hints.

Want a second opinion? Test www.usembassy.gov at dnsviz.net.

DNSSEC Analyzer

↓ Advanced options ↑ Advanced options

Trust Anchor:
Name Servers: