downloadirpf.receita.fazenda.gov.br
Updated:
2020-05-27 19:04:14 UTC (1640 days ago)
Go to most recent »
Notices
DNSSEC Authentication Chain
RRset status
Insecure (1)
- downloadirpf.receita.fazenda.gov.br/A
Secure (1)
- receita.fazenda.gov.br/SOA
DNSKEY/DS/NSEC status
Secure (12)
- ./DNSKEY (alg 8, id 20326)
- ./DNSKEY (alg 8, id 48903)
- NSEC3 proving non-existence of downloadirpf.receita.fazenda.gov.br/DS
- br/DNSKEY (alg 13, id 2471)
- br/DNSKEY (alg 13, id 33739)
- br/DS (alg 13, id 2471)
- fazenda.gov.br/DNSKEY (alg 7, id 56583)
- fazenda.gov.br/DS (alg 7, id 56583)
- gov.br/DNSKEY (alg 13, id 5964)
- gov.br/DS (alg 13, id 5964)
- receita.fazenda.gov.br/DNSKEY (alg 7, id 47943)
- receita.fazenda.gov.br/DS (alg 7, id 47943)
Delegation status
Lame (1)
- receita.fazenda.gov.br to downloadirpf.receita.fazenda.gov.br
Secure (4)
- . to br
- br to gov.br
- fazenda.gov.br to receita.fazenda.gov.br
- gov.br to fazenda.gov.br
Notices
Errors (20)
- ./DNSKEY: No response was received from the server over UDP (tried 4 times). See RFC 1035, Sec. 4.2. (2001:500:12::d0d, UDP_-_EDNS0_512_D_K)
- NSEC3 proving non-existence of downloadirpf.receita.fazenda.gov.br/DS: An iterations count of 0 must be used in NSEC3 records to alleviate computational burdens. See RFC 9276, Sec. 3.1.
- NSEC3 proving non-existence of downloadirpf.receita.fazenda.gov.br/DS: An iterations count of 0 must be used in NSEC3 records to alleviate computational burdens. See RFC 9276, Sec. 3.1.
- br zone: The server(s) were not responsive to queries over UDP. See RFC 1035, Sec. 4.2. (2001:12f8:c::10)
- downloadirpf.receita.fazenda.gov.br zone: The server(s) did not respond authoritatively for the namespace. See RFC 1035, Sec. 4.1.1. (161.148.201.5)
- downloadirpf.receita.fazenda.gov.br zone: The server(s) were not responsive to queries over UDP. See RFC 1035, Sec. 4.2. (189.9.122.8)
- downloadirpf.receita.fazenda.gov.br/A: No response was received from the server over UDP (tried 12 times). See RFC 1035, Sec. 4.2. (189.9.122.8, UDP_-_NOEDNS_)
- downloadirpf.receita.fazenda.gov.br/A: The Authoritative Answer (AA) flag was not set in the response. See RFC 1035, Sec. 4.1.1. (161.148.201.5, UDP_-_EDNS0_4096_D_K)
- fazenda.gov.br zone: The server(s) were not responsive to queries over UDP. See RFC 1035, Sec. 4.2. (2804:150:e000:200::11)
- gov.br zone: The server(s) were not responsive to queries over UDP. See RFC 1035, Sec. 4.2. (2001:12f8:c::10)
- receita.fazenda.gov.br zone: The server(s) were not responsive to queries over UDP. See RFC 1035, Sec. 4.2. (2804:150:e000:200::11)
- downloadirpf.receita.fazenda.gov.br/MX has errors; select the "Denial of existence" DNSSEC option to see them.
- 5mgpcz0x39.downloadirpf.receita.fazenda.gov.br/A has errors; select the "Denial of existence" DNSSEC option to see them.
- downloadirpf.receita.fazenda.gov.br/AAAA has errors; select the "Denial of existence" DNSSEC option to see them.
- downloadirpf.receita.fazenda.gov.br/NS has errors; select the "Denial of existence" DNSSEC option to see them.
- downloadirpf.receita.fazenda.gov.br/CNAME has errors; select the "Denial of existence" DNSSEC option to see them.
- downloadirpf.receita.fazenda.gov.br/DS has errors; select the "Denial of existence" DNSSEC option to see them.
- downloadirpf.receita.fazenda.gov.br/TXT has errors; select the "Denial of existence" DNSSEC option to see them.
- downloadirpf.receita.fazenda.gov.br/DNSKEY has errors; select the "Denial of existence" DNSSEC option to see them.
- downloadirpf.receita.fazenda.gov.br/SOA has errors; select the "Denial of existence" DNSSEC option to see them.
Warnings (22)
- ./DNSKEY (alg 8, id 20326): No response was received until the UDP payload size was decreased, indicating that the server might be attempting to send a payload that exceeds the path maximum transmission unit (PMTU) size. See RFC 6891, Sec. 6.2.6. (2001:500:12::d0d, UDP_-_EDNS0_4096_D_K)
- ./DNSKEY (alg 8, id 48903): No response was received until the UDP payload size was decreased, indicating that the server might be attempting to send a payload that exceeds the path maximum transmission unit (PMTU) size. See RFC 6891, Sec. 6.2.6. (2001:500:12::d0d, UDP_-_EDNS0_4096_D_K)
- NSEC3 proving non-existence of downloadirpf.receita.fazenda.gov.br/DS: The salt value for an NSEC3 record should be empty. See RFC 9276, Sec. 3.1.
- NSEC3 proving non-existence of downloadirpf.receita.fazenda.gov.br/DS: The salt value for an NSEC3 record should be empty. See RFC 9276, Sec. 3.1.
- RRSIG NSEC3 proving non-existence of downloadirpf.receita.fazenda.gov.br/DS alg 7, id 47943: DNSSEC implementers are recommended against implementing signing with DNSSEC algorithm 7 (RSASHA1NSEC3SHA1). See RFC 8624, Sec. 3.1.
- RRSIG fazenda.gov.br/DNSKEY alg 7, id 56583: DNSSEC implementers are recommended against implementing signing with DNSSEC algorithm 7 (RSASHA1NSEC3SHA1). See RFC 8624, Sec. 3.1.
- RRSIG receita.fazenda.gov.br/DNSKEY alg 7, id 47943: DNSSEC implementers are recommended against implementing signing with DNSSEC algorithm 7 (RSASHA1NSEC3SHA1). See RFC 8624, Sec. 3.1.
- RRSIG receita.fazenda.gov.br/DS alg 7, id 56583: DNSSEC implementers are recommended against implementing signing with DNSSEC algorithm 7 (RSASHA1NSEC3SHA1). See RFC 8624, Sec. 3.1.
- RRSIG receita.fazenda.gov.br/SOA alg 7, id 47943: DNSSEC implementers are recommended against implementing signing with DNSSEC algorithm 7 (RSASHA1NSEC3SHA1). See RFC 8624, Sec. 3.1.
- br/DS (alg 13, id 2471): No response was received until the UDP payload size was decreased, indicating that the server might be attempting to send a payload that exceeds the path maximum transmission unit (PMTU) size. See RFC 6891, Sec. 6.2.6. (2001:500:12::d0d, UDP_-_EDNS0_4096_D_K)
- br/DS (alg 13, id 2471): No response was received until the UDP payload size was decreased, indicating that the server might be attempting to send a payload that exceeds the path maximum transmission unit (PMTU) size. See RFC 6891, Sec. 6.2.6. (2001:500:12::d0d, UDP_-_EDNS0_4096_D_K)
- fazenda.gov.br/DS (alg 7, id 56583): DNSSEC implementers are prohibited from implementing signing with DS algorithm 1 (SHA-1). See RFC 8624, Sec. 3.2.
- fazenda.gov.br/DS (alg 7, id 56583): DNSSEC implementers are prohibited from implementing signing with DS algorithm 1 (SHA-1). See RFC 8624, Sec. 3.2.
- receita.fazenda.gov.br/DS (alg 7, id 47943): DNSSEC implementers are prohibited from implementing signing with DS algorithm 1 (SHA-1). See RFC 8624, Sec. 3.2.
- receita.fazenda.gov.br/DS (alg 7, id 47943): DNSSEC implementers are prohibited from implementing signing with DS algorithm 1 (SHA-1). See RFC 8624, Sec. 3.2.
- 5mgpcz0x39.downloadirpf.receita.fazenda.gov.br/A has warnings; select the "Denial of existence" DNSSEC option to see them.
- downloadirpf.receita.fazenda.gov.br/AAAA has warnings; select the "Denial of existence" DNSSEC option to see them.
- downloadirpf.receita.fazenda.gov.br/CNAME has warnings; select the "Denial of existence" DNSSEC option to see them.
- downloadirpf.receita.fazenda.gov.br/DS has warnings; select the "Denial of existence" DNSSEC option to see them.
- downloadirpf.receita.fazenda.gov.br/TXT has warnings; select the "Denial of existence" DNSSEC option to see them.
- downloadirpf.receita.fazenda.gov.br/DNSKEY has warnings; select the "Denial of existence" DNSSEC option to see them.
- downloadirpf.receita.fazenda.gov.br/SOA has warnings; select the "Denial of existence" DNSSEC option to see them.
JavaScript is required to make the graph below interactive.
