View on GitHub

DNSViz: A DNS visualization tool

www.example.com

DNSSEC options (hide)
  1. |?|
  2. |?|
  3. |?|
  4. |?|
  5. |?|
  6. |?|
  7. |?|
  8. |?|
  9. |?|
  10. |?|
Notices
DNSSEC Authentication Chain

RRset statusRRset status

Insecure (12)
  • a1422.dscr.akamai.net.0.1.cn.akamaitech.net/A
  • a1422.dscr.akamai.net.0.1.cn.akamaitech.net/A
  • a1422.dscr.akamai.net.0.1.cn.akamaitech.net/AAAA
  • a1422.dscr.akamai.net.0.1.cn.akamaitech.net/AAAA
  • a1422.dscr.akamai.net/A
  • a1422.dscr.akamai.net/A
  • a1422.dscr.akamai.net/AAAA
  • a1422.dscr.akamai.net/AAAA
  • a1422.dscr.akamai.net/CNAME
  • akamai.net/SOA
  • akamaitech.net/SOA
  • www.example.com-v4.edgesuite.net/CNAME
Secure (5)
  • net/SOA
  • net/SOA
  • net/SOA
  • net/SOA
  • www.example.com/CNAME

DNSKEY/DS/NSEC statusDNSKEY/DS/NSEC status

Secure (17)
  • ./DNSKEY (alg 8, id 20326)
  • ./DNSKEY (alg 8, id 38696)
  • ./DNSKEY (alg 8, id 46441)
  • ./DNSKEY (alg 8, id 53148)
  • NSEC3 proving non-existence of akamai.net/DS
  • NSEC3 proving non-existence of akamaitech.net/DS
  • NSEC3 proving non-existence of edgesuite.net/DS
  • com/DNSKEY (alg 13, id 19718)
  • com/DNSKEY (alg 13, id 20545)
  • com/DS (alg 13, id 19718)
  • example.com/DNSKEY (alg 13, id 27290)
  • example.com/DNSKEY (alg 13, id 31080)
  • example.com/DNSKEY (alg 13, id 370)
  • example.com/DS (alg 13, id 370)
  • net/DNSKEY (alg 13, id 33296)
  • net/DNSKEY (alg 13, id 37331)
  • net/DS (alg 13, id 37331)

Delegation statusDelegation status

Insecure (5)
  • akamai.net to dscr.akamai.net
  • akamaitech.net to cn.akamaitech.net
  • net to akamai.net
  • net to akamaitech.net
  • net to edgesuite.net
Secure (3)
  • . to com
  • . to net
  • com to example.com

NoticesNotices

Warnings (22)
  • a1422.dscr.akamai.net/CNAME: The server returned CNAME for a1422.dscr.akamai.net, but records of other types exist at that name. See RFC 2181, Sec. 10.1.
  • akamai.net to dscr.akamai.net: The glue address(es) for n1dscr.akamai.net (23.33.23.201, 23.48.163.7) differed from its authoritative address(es) (23.48.163.7). See RFC 1034, Sec. 4.2.2.
  • akamai.net to dscr.akamai.net: The glue address(es) for n2dscr.akamai.net (23.33.23.211, 23.216.0.211) differed from its authoritative address(es) (23.216.0.211). See RFC 1034, Sec. 4.2.2.
  • akamai.net to dscr.akamai.net: The glue address(es) for n3dscr.akamai.net (23.33.30.69, 23.48.163.9) differed from its authoritative address(es) (23.48.163.9). See RFC 1034, Sec. 4.2.2.
  • akamai.net to dscr.akamai.net: The glue address(es) for n4dscr.akamai.net (23.48.163.8, 23.192.221.35) differed from its authoritative address(es) (23.48.163.8). See RFC 1034, Sec. 4.2.2.
  • akamai.net to dscr.akamai.net: The glue address(es) for n5dscr.akamai.net (23.33.21.21, 23.48.163.21) differed from its authoritative address(es) (23.48.163.21). See RFC 1034, Sec. 4.2.2.
  • akamai.net to dscr.akamai.net: The glue address(es) for n6dscr.akamai.net (23.33.30.79, 23.223.246.46) differed from its authoritative address(es) (23.223.246.46). See RFC 1034, Sec. 4.2.2.
  • akamai.net to dscr.akamai.net: The glue address(es) for n7dscr.akamai.net (23.48.240.148, 23.62.45.205) differed from its authoritative address(es) (23.62.45.205). See RFC 1034, Sec. 4.2.2.
  • akamaitech.net to cn.akamaitech.net: The glue address(es) for n1cn.akamaitech.net (23.60.12.199, 184.51.100.13) differed from its authoritative address(es) (184.51.100.13). See RFC 1034, Sec. 4.2.2.
  • akamaitech.net to cn.akamaitech.net: The glue address(es) for n1cn.akamaitech.net (2600:1406:1a:f000:640d:dc72:9ccd:dcf8, 2600:1408:7:f000:c641::) differed from its authoritative address(es) (2600:1406:1a:f000:640d:dc72:9ccd:dcf8). See RFC 1034, Sec. 4.2.2.
  • akamaitech.net to cn.akamaitech.net: The glue address(es) for n2cn.akamaitech.net (23.52.107.141, 23.200.10.197) differed from its authoritative address(es) (23.200.10.197). See RFC 1034, Sec. 4.2.2.
  • akamaitech.net to cn.akamaitech.net: The glue address(es) for n3cn.akamaitech.net (23.60.12.200, 23.200.10.196) differed from its authoritative address(es) (23.200.10.196). See RFC 1034, Sec. 4.2.2.
  • akamaitech.net to cn.akamaitech.net: The glue address(es) for n4cn.akamaitech.net (23.60.12.198, 23.200.10.198) differed from its authoritative address(es) (23.200.10.198). See RFC 1034, Sec. 4.2.2.
  • akamaitech.net to cn.akamaitech.net: The glue address(es) for n5cn.akamaitech.net (23.60.12.203, 23.200.73.221) differed from its authoritative address(es) (23.200.73.221). See RFC 1034, Sec. 4.2.2.
  • akamaitech.net to cn.akamaitech.net: The glue address(es) for n6cn.akamaitech.net (23.60.12.197, 23.200.73.219) differed from its authoritative address(es) (23.200.73.219). See RFC 1034, Sec. 4.2.2.
  • akamaitech.net to cn.akamaitech.net: The glue address(es) for n7cn.akamaitech.net (23.192.221.29, 23.200.73.220) differed from its authoritative address(es) (23.200.73.220). See RFC 1034, Sec. 4.2.2.
  • net to akamai.net: The following NS name(s) were found in the authoritative NS RRset, but not in the delegation NS RRset (i.e., in the net zone): a5-193.akamaitech.net, zb.akamaitech.net, a1-193.akamaitech.net, a12-193.akamaitech.net, a3-193.akamaitech.net, ns5-193.akamaitech.net, ns2-193.akamaitech.net, a6-193.akamaitech.net, a22-193.akamaitech.net See RFC 1034, Sec. 4.2.2.
  • net to akamai.net: The following NS name(s) were found in the delegation NS RRset (i.e., in the net zone), but not in the authoritative NS RRset: ns1-1.akamaitech.net, ze.akamaitech.net, zg.akamaitech.net, zh.akamaitech.net See RFC 1034, Sec. 4.2.2.
  • net to akamaitech.net: The following NS name(s) were found in the authoritative NS RRset, but not in the delegation NS RRset (i.e., in the net zone): zb.akamaitech.net, ns2-193.akamaitech.net, a5-193.akamaitech.net, ns5-193.akamaitech.net, zd.akamaitech.net, a3-193.akamaitech.net See RFC 1034, Sec. 4.2.2.
  • net to akamaitech.net: The following NS name(s) were found in the delegation NS RRset (i.e., in the net zone), but not in the authoritative NS RRset: zi.akamaitech.net See RFC 1034, Sec. 4.2.2.
  • net to edgesuite.net: The following NS name(s) were found in the authoritative NS RRset, but not in the delegation NS RRset (i.e., in the net zone): a5-64.akam.net, a11-64.akam.net, ns1-2.akam.net, adns3.akam.net, a13-64.akam.net, usw6.akam.net, a3-64.akam.net, a9-64.akam.net See RFC 1034, Sec. 4.2.2.
  • net to edgesuite.net: The following NS name(s) were found in the delegation NS RRset (i.e., in the net zone), but not in the authoritative NS RRset: a1-2.akam.net, a14-67.akam.net, a9-65.akam.net See RFC 1034, Sec. 4.2.2.

DNSKEY legend

Full legend
SEP bit setSEP bit set
Revoke bit setRevoke bit set
Trust anchorTrust anchor
Download: png | svg
Warning JavaScript is required to make the graph below interactive.
DNSSEC authentication graph