rainbow-link.com

Updated: 2023-11-11 16:10:42 UTC (329 days ago) Go to most recent »

DNSSEC options (hide)

Notices

DNSSEC Authentication Chain

./DNSKEY (alg 8, id 20326)
./DNSKEY (alg 8, id 46780)
com/DNSKEY (alg 8, id 30909)
com/DNSKEY (alg 8, id 63246)
com/DS (alg 8, id 30909)
rainbow-link.com/DS (alg 8, id 30079)

com to rainbow-link.com: No valid RRSIGs made by a key corresponding to a DS RR were found covering the DNSKEY RRset, resulting in no secure entry point (SEP) into the zone. See RFC 4035, Sec. 2.2, RFC 6840, Sec. 5.11. (219.117.255.192, 219.117.255.193, 219.117.255.194, 219.117.255.195, 219.117.255.196, 219.117.255.197, 219.117.255.198, 219.117.255.199, TCP_-_EDNS0_4096_D_KN)
com to rainbow-link.com: The DS RRset for the zone included algorithm 8 (RSASHA256), but no DS RR matched a DNSKEY with algorithm 8 that signs the zone's DNSKEY RRset. See RFC 4035, Sec. 2.2, RFC 6840, Sec. 5.11. (219.117.255.192, 219.117.255.193, 219.117.255.194, 219.117.255.195, 219.117.255.196, 219.117.255.197, 219.117.255.198, 219.117.255.199, TCP_-_EDNS0_4096_D_KN)
rainbow-link.com/DNSKEY: No response was received from the server over UDP (tried 4 times). See RFC 1035, Sec. 4.2. (219.117.255.195, UDP_-_EDNS0_512_D_KN)
rainbow-link.com/DNSKEY has errors; select the "Denial of existence" DNSSEC option to see them.

rainbow-link.com/SOA: No response was received from the server over UDP (tried 6 times) until the COOKIE EDNS option was removed (however, this server appeared to respond legitimately to other queries with the COOKIE EDNS option present). See RFC 6891, Sec. 6.1.2. (219.117.255.199, UDP_-_EDNS0_4096_D_KN_0x20)
rainbow-link.com/CNAME has warnings; select the "Denial of existence" DNSSEC option to see them.