View on GitHub

DNSViz: A DNS visualization tool

www.zgt.de

Updated: 2017-09-03 00:28:51 UTC (20 days ago) Update now
« Previous analysis | Next analysis »
DNSSEC options (hide)
  1. |?|
  2. |?|
  3. |?|
  4. |?|
  5. |?|
  6. |?|
  7. |?|
Notices
DNSSEC Authentication Chain

RRset statusRRset status

Insecure (1)
  • www.zgt.de/A
Secure (1)
  • de/SOA (NXDOMAIN)

DNSKEY/DS/NSEC statusDNSKEY/DS/NSEC status

Secure (7)
  • ./DNSKEY (alg 8, id 15768)
  • ./DNSKEY (alg 8, id 19036)
  • ./DNSKEY (alg 8, id 20326)
  • NSEC3 proving non-existence of zgt.de/DS
  • de/DNSKEY (alg 8, id 37704)
  • de/DNSKEY (alg 8, id 39227)
  • de/DS (alg 8, id 39227)

Delegation statusDelegation status

Insecure (2)
  • de to zgt.de
  • zgt.de to www.zgt.de
Secure (1)
  • . to de

NoticesNotices

Errors (10)
  • www.zgt.de zone: The server(s) responded over TCP with a malformed response or with an invalid RCODE. (82.145.6.100, 89.246.87.100, 134.91.235.100)
  • www.zgt.de/AAAA: No response was received from the server over UDP (tried 8 times). (82.145.6.100, 89.246.87.100, 134.91.235.100, UDP_0_NOEDNS)
  • www.zgt.de/DNSKEY: The response had an invalid RCODE (REFUSED). (82.145.6.100, 89.246.87.100, 134.91.235.100, UDP_0_EDNS0_32768_4096, UDP_0_EDNS0_32768_512)
  • www.zgt.de/MX: The response had an invalid RCODE (REFUSED). (82.145.6.100, 89.246.87.100, 134.91.235.100, UDP_0_EDNS0_32768_4096, UDP_0_EDNS0_32768_512)
  • www.zgt.de/NS: The response had an invalid RCODE (REFUSED). (82.145.6.100, 89.246.87.100, 134.91.235.100, UDP_0_EDNS0_32768_4096)
  • www.zgt.de/SOA: The response had an invalid RCODE (REFUSED). (82.145.6.100, 89.246.87.100, 134.91.235.100, TCP_0_EDNS0_32768_4096)
  • www.zgt.de/SOA: The response had an invalid RCODE (REFUSED). (82.145.6.100, 89.246.87.100, 134.91.235.100, UDP_0_EDNS0_32768_4096)
  • www.zgt.de/TXT: The response had an invalid RCODE (REFUSED). (82.145.6.100, 89.246.87.100, 134.91.235.100, UDP_0_EDNS0_32768_4096)
  • zgt.de to www.zgt.de: No SOA RR was returned with the NODATA response. (74.208.254.254, 83.169.55.5, 195.34.161.195, 217.160.113.32, 2001:8d8:580:401:217:160:113:32, 2607:f1c0:849:fe00:74:208:254:254, 2a01:130:2000:118:195:34:161:195, 2a01:488:2000:c02:83:169:55:5, UDP_0_EDNS0_32768_4096)
  • zgt.de to www.zgt.de: The Authoritative Answer (AA) flag was not set in the response. (74.208.254.254, 83.169.55.5, 195.34.161.195, 217.160.113.32, 2001:8d8:580:401:217:160:113:32, 2607:f1c0:849:fe00:74:208:254:254, 2a01:130:2000:118:195:34:161:195, 2a01:488:2000:c02:83:169:55:5, UDP_0_EDNS0_32768_4096)

DNSKEY legend

Full legend
SEP bit setSEP bit set
Revoke bit setRevoke bit set
Trust anchorTrust anchor
Download: png | svg
Warning JavaScript is required to make the graph below interactive.
DNSSEC authentication graph