google.com to l.google.com: An SOA RR with owner name (l.google.com) not matching the zone name (google.com) was returned with the NODATA response. See RFC 1034, Sec. 4.3.4, RFC 2308, Sec. 2.2. (216.239.32.10, 216.239.34.10, 216.239.36.10, 216.239.38.10, 2001:4860:4802:32::a, 2001:4860:4802:34::a, 2001:4860:4802:36::a, 2001:4860:4802:38::a, UDP_-_EDNS0_4096_D_KN)
l.google.com/DS has errors; select the "Denial of existence" DNSSEC option to see them.