View on GitHub

DNSViz: A DNS visualization tool

wdl1.pcfg.cache.wpscdn.com

Updated: 2023-07-06 05:03:48 UTC (549 days ago) Update now
« Previous analysis | Next analysis »
DNSSEC options (hide)
  1. |?|
  2. |?|
  3. |?|
  4. |?|
  5. |?|
  6. |?|
  7. |?|
  8. |?|
  9. |?|
  10. |?|
Notices
DNSSEC Authentication Chain

RRset statusRRset status

Insecure (11)
  • b.galileo.jcloud-cdn.com/A (NXDOMAIN)
  • cache.wpscdn.com/A (NXDOMAIN)
  • galileo.jcloud-cdn.com/SOA
  • iduzw1u.qiniudns.com/CNAME
  • large023.oversea.line.qiniudns.com/CNAME
  • line.qiniudns.com/A (NXDOMAIN)
  • qiniudns.com/CNAME
  • qiniudns.com/SOA
  • wdl1.pcfg.cache.wpscdn.com.b.galileo.jcloud-cdn.com/CNAME
  • wdl1.pcfg.cache.wpscdn.com/CNAME
  • wpscdn.com/SOA
Secure (11)
  • com/SOA
  • com/SOA
  • com/SOA
  • com/SOA
  • com/SOA
  • com/SOA
  • com/SOA
  • com/SOA
  • com/SOA
  • wdl1.pcfg.cache.wpscdn.com.cdn.jcloudcdn.com/A
  • wdl1.pcfg.cache.wpscdn.com.cdn.jcloudcdn.com/AAAA

DNSKEY/DS/NSEC statusDNSKEY/DS/NSEC status

Secure (12)
  • ./DNSKEY (alg 8, id 11019)
  • ./DNSKEY (alg 8, id 20326)
  • ./DNSKEY (alg 8, id 60955)
  • NSEC3 proving non-existence of jcloud-cdn.com/DS
  • NSEC3 proving non-existence of qiniudns.com/DS
  • NSEC3 proving non-existence of wpscdn.com/DS
  • com/DNSKEY (alg 8, id 30909)
  • com/DNSKEY (alg 8, id 46551)
  • com/DS (alg 8, id 30909)
  • jcloudcdn.com/DNSKEY (alg 13, id 2371)
  • jcloudcdn.com/DNSKEY (alg 13, id 34505)
  • jcloudcdn.com/DS (alg 13, id 2371)

Delegation statusDelegation status

Insecure (4)
  • com to jcloud-cdn.com
  • com to qiniudns.com
  • com to wpscdn.com
  • jcloud-cdn.com to galileo.jcloud-cdn.com
Secure (2)
  • . to com
  • com to jcloudcdn.com

NoticesNotices

Errors (4)
  • jcloud-cdn.com to galileo.jcloud-cdn.com: An SOA RR with owner name (galileo.jcloud-cdn.com) not matching the zone name (jcloud-cdn.com) was returned with the NODATA response. See RFC 1034, Sec. 4.3.4, RFC 2308, Sec. 2.2. (101.124.23.10, 101.124.23.11, 114.67.121.112, 114.67.121.113, 114.67.160.152, 114.67.160.153, 153.36.234.86, 153.36.234.87, 183.134.18.122, 183.134.18.123, UDP_-_EDNS0_4096_D_KN)
  • large023.oversea.line.qiniudns.com/CNAME: A query for large023.oversea.line.qiniudns.com results in a NOERROR response, while a query for its ancestor, line.qiniudns.com, returns a name error (NXDOMAIN), which indicates that subdomains of line.qiniudns.com, including large023.oversea.line.qiniudns.com, don't exist. See RFC 8020, Sec. 2. (1.12.0.16, 1.12.0.17, 1.12.0.18, 1.12.0.19, 1.12.0.20, 3.97.163.50, 18.223.52.147, 34.205.234.26, 35.165.107.227, 36.155.149.211, 49.51.42.231, 49.51.43.232, 49.51.103.88, 49.234.175.103, 52.52.126.139, 61.151.180.53, 106.55.82.76, 112.80.181.106, 117.89.178.200, 120.241.130.93, 170.106.49.118, 170.106.49.166, 183.47.126.155, 183.47.126.169, 183.192.164.119, 223.166.151.16, 223.166.151.126, 2402:4e00:1020:1264:0:9136:29b6:fc32, 2402:4e00:1430:1102:0:9136:2b2b:ba61, UDP_-_EDNS0_4096_D_KN)
  • wdl1.pcfg.cache.wpscdn.com.b.galileo.jcloud-cdn.com/CNAME: A query for wdl1.pcfg.cache.wpscdn.com.b.galileo.jcloud-cdn.com results in a NOERROR response, while a query for its ancestor, b.galileo.jcloud-cdn.com, returns a name error (NXDOMAIN), which indicates that subdomains of b.galileo.jcloud-cdn.com, including wdl1.pcfg.cache.wpscdn.com.b.galileo.jcloud-cdn.com, don't exist. See RFC 8020, Sec. 2. (101.124.23.10, 101.124.23.11, 114.67.121.112, 114.67.121.113, 114.67.160.150, 114.67.160.151, 114.67.160.152, 114.67.160.153, 116.196.126.20, 116.196.126.21, 116.198.195.4, 116.198.195.5, 153.36.234.84, 153.36.234.85, 153.36.234.86, 153.36.234.87, 183.134.18.120, 183.134.18.121, 183.134.18.122, 183.134.18.123, UDP_-_EDNS0_4096_D_KN)
  • wdl1.pcfg.cache.wpscdn.com/CNAME: A query for wdl1.pcfg.cache.wpscdn.com results in a NOERROR response, while a query for its ancestor, cache.wpscdn.com, returns a name error (NXDOMAIN), which indicates that subdomains of cache.wpscdn.com, including wdl1.pcfg.cache.wpscdn.com, don't exist. See RFC 8020, Sec. 2. (1.12.0.1, 1.12.0.4, 36.155.149.176, 61.151.180.44, 112.80.181.45, 112.80.181.111, 117.89.178.184, 120.241.130.98, 129.211.176.187, 129.211.176.224, 2402:4e00:1020:1264:0:9136:29bc:87f9, 2402:4e00:1430:1102:0:9136:2b30:e554, UDP_-_EDNS0_4096_D_KN)
Warnings (6)
  • b.galileo.jcloud-cdn.com/A (NXDOMAIN): The server responded with no OPT record, rather than with RCODE FORMERR. See RFC 6891, Sec. 7. (101.124.23.10, 101.124.23.11, 114.67.121.112, 114.67.121.113, 114.67.160.150, 114.67.160.151, 114.67.160.152, 114.67.160.153, 116.196.126.20, 116.196.126.21, 116.198.195.4, 116.198.195.5, 153.36.234.84, 153.36.234.85, 153.36.234.86, 153.36.234.87, 183.134.18.120, 183.134.18.121, 183.134.18.122, 183.134.18.123, UDP_-_EDNS0_4096_D_KN)
  • com to qiniudns.com: AAAA glue records exist for ns3.dnsv5.com, but there are no corresponding authoritative AAAA records. See RFC 1034, Sec. 4.2.2.
  • com to qiniudns.com: AAAA glue records exist for ns4.dnsv5.com, but there are no corresponding authoritative AAAA records. See RFC 1034, Sec. 4.2.2.
  • com to qiniudns.com: The glue address(es) for ns3.dnsv5.com (1.12.0.17, 1.12.0.18, 1.12.0.20, 36.155.149.211, 49.234.175.103, 61.151.180.53, 223.166.151.126) differed from its authoritative address(es) (1.12.0.17, 1.12.0.18, 34.205.234.26, 36.155.149.211, 49.51.43.232, 49.51.103.88, 52.52.126.139, 170.106.49.166, 183.47.126.169, 223.166.151.16). See RFC 1034, Sec. 4.2.2.
  • com to qiniudns.com: The glue address(es) for ns4.dnsv5.com (1.12.0.16, 1.12.0.19, 106.55.82.76, 112.80.181.106, 117.89.178.200, 120.241.130.93, 183.47.126.155) differed from its authoritative address(es) (1.12.0.16, 1.12.0.19, 3.97.163.50, 18.223.52.147, 35.165.107.227, 49.51.42.231, 117.89.178.200, 170.106.49.118, 183.47.126.155, 183.192.164.119). See RFC 1034, Sec. 4.2.2.
  • qiniudns.com/CNAME: The server returned CNAME for qiniudns.com, but records of other types exist at that name. See RFC 2181, Sec. 10.1.

DNSKEY legend

Full legend
SEP bit setSEP bit set
Revoke bit setRevoke bit set
Trust anchorTrust anchor
Download: png | svg
Warning JavaScript is required to make the graph below interactive.
DNSSEC authentication graph