View on GitHub

DNSViz: A DNS visualization tool

blogg.thoreric.no

Updated: 2024-08-26 01:21:29 UTC (526 days ago) Update now
« Previous analysis | Next analysis »
DNSSEC options (hide)
  1. |?|
  2. |?|
  3. |?|
  4. |?|
  5. |?|
  6. |?|
  7. |?|
  8. |?|
  9. |?|
  10. |?|
Notices
DNSSEC Authentication Chain

RRset statusRRset status

Insecure (1)
  • blogg.thoreric.no/A
Secure (1)
  • no/SOA

DNSKEY/DS/NSEC statusDNSKEY/DS/NSEC status

Secure (6)
  • ./DNSKEY (alg 8, id 20038)
  • ./DNSKEY (alg 8, id 20326)
  • NSEC3 proving non-existence of thoreric.no/DS
  • no/DNSKEY (alg 13, id 25206)
  • no/DNSKEY (alg 13, id 38032)
  • no/DS (alg 13, id 38032)

Delegation statusDelegation status

Insecure (1)
  • no to thoreric.no
Secure (1)
  • . to no

NoticesNotices

Errors (6)
  • blogg.thoreric.no/A: The response had an invalid RCODE (REFUSED). See RFC 1035, Sec. 4.1.1. (51.38.114.43, 94.130.75.18, 149.28.254.81, 167.71.73.238, 2001:41d0:701:1100::7e5, 2a03:b0c0:2:d0::1613:d001, UDP_-_EDNS0_4096_D_KN)
  • thoreric.no zone: The server(s) responded over UDP with a malformed response or with an invalid RCODE. See RFC 1035, Sec. 4.1.1. (51.38.114.43, 94.130.75.18, 149.28.254.81, 167.71.73.238, 2001:41d0:701:1100::7e5, 2a03:b0c0:2:d0::1613:d001)
  • thoreric.no zone: The server(s) were not responsive to queries over UDP. See RFC 1035, Sec. 4.2. (2001:19f0:6402:4de:5400:2ff:fe93:34e8, 2a01:4f8:c0c:79ee::1)
  • thoreric.no/DNSKEY: The response had an invalid RCODE (REFUSED). See RFC 1035, Sec. 4.1.1. (51.38.114.43, 94.130.75.18, 149.28.254.81, 167.71.73.238, 2001:41d0:701:1100::7e5, 2a03:b0c0:2:d0::1613:d001, UDP_-_EDNS0_4096_D_KN, UDP_-_EDNS0_512_D_KN)
  • thoreric.no/CNAME has errors; select the "Denial of existence" DNSSEC option to see them.
  • blogg.thoreric.no/AAAA has errors; select the "Denial of existence" DNSSEC option to see them.
Warnings (2)
  • no to thoreric.no: The following NS name(s) were found in the authoritative NS RRset, but not in the delegation NS RRset (i.e., in the no zone): ns4.ultahost.com, ns3.ultahost.com, ns2.ultahost.com, ns1.ultahost.com See RFC 1034, Sec. 4.2.2.
  • no to thoreric.no: The following NS name(s) were found in the delegation NS RRset (i.e., in the no zone), but not in the authoritative NS RRset: pns101.cloudns.net, pns102.cloudns.net, pns103.cloudns.net, pns104.cloudns.net See RFC 1034, Sec. 4.2.2.

DNSKEY legend

Full legend
SEP bit setSEP bit set
Revoke bit setRevoke bit set
Trust anchorTrust anchor
Download: png | svg
Warning JavaScript is required to make the graph below interactive.
DNSSEC authentication graph