NSEC3 proving non-existence of microsoftonline.com/DS
NSEC3 proving non-existence of msidentity.com/DS
NSEC3 proving non-existence of trafficmanager.net/DS
com/DNSKEY (alg 8, id 30909)
com/DNSKEY (alg 8, id 54714)
com/DS (alg 8, id 30909)
net/DNSKEY (alg 8, id 35886)
net/DNSKEY (alg 8, id 6203)
net/DS (alg 8, id 35886)
Delegation status
Insecure (6)
com to microsoftonline.com
com to msidentity.com
msidentity.com to aadg.msidentity.com
msidentity.com to privatelink.msidentity.com
net to akadns.net
net to trafficmanager.net
Secure (2)
. to com
. to net
Notices
Errors (5)
a.privatelink.msidentity.com/A (NODATA): The Authoritative Answer (AA) flag was not set in the response. See RFC 1035, Sec. 4.1.1. (13.107.24.1, 13.107.160.1, 40.90.4.1, 64.4.48.1, 2620:1ec:8ec::1, 2620:1ec:bda::1, 2a01:111:4000::1, UDP_-_EDNS0_4096_D_KN)
a.privatelink.msidentity.com/A (NODATA): The NODATA response did not include an SOA record. See RFC 1034, Sec. 4.3.4, RFC 2308, Sec. 2.2. (13.107.24.1, 13.107.160.1, 40.90.4.1, 64.4.48.1, 2620:1ec:8ec::1, 2620:1ec:bda::1, 2a01:111:4000::1, UDP_-_EDNS0_4096_D_KN)
prda.aadg.msidentity.com/A (NODATA): The Authoritative Answer (AA) flag was not set in the response. See RFC 1035, Sec. 4.1.1. (13.107.24.1, 40.90.4.1, 64.4.48.1, 2603:1061::1, 2620:1ec:8ec::1, 2620:1ec:bda::1, 2a01:111:4000::1, UDP_-_EDNS0_4096_D_KN)
prda.aadg.msidentity.com/A (NODATA): The NODATA response did not include an SOA record. See RFC 1034, Sec. 4.3.4, RFC 2308, Sec. 2.2. (13.107.24.1, 40.90.4.1, 64.4.48.1, 2603:1061::1, 2620:1ec:8ec::1, 2620:1ec:bda::1, 2a01:111:4000::1, UDP_-_EDNS0_4096_D_KN)
login.microsoftonline.com/AAAA has errors; select the "Denial of existence" DNSSEC option to see them.
Warnings (2)
net to akadns.net: Authoritative AAAA records exist for a3-129.akadns.net, but there are no corresponding AAAA glue records. See RFC 1034, Sec. 4.2.2.
net to akadns.net: Authoritative AAAA records exist for a7-131.akadns.net, but there are no corresponding AAAA glue records. See RFC 1034, Sec. 4.2.2.