ai_dnslsg.

md 10/16/2021

A1 DNS Security Questions

a record of www.microsoft.com
It seems to have an load balancer since the A record is changing. dig www.microsoft.com
+nocomments +noquestion +noauthority +noadditional +nostats

; <<>> DiG 9.16.15-Debian <<>> www.microsoft.com +nocomments +noquestion +noauthority +noadditional

+nostats ;; global options: +cmd www.microsoft.com. 3592 IN CNAME www.microsoft.com-c-3.edgekey.net.
www.microsoft.com-c-3.edgekey.net. 892 IN CNAME www.microsoft.com-c-
3.edgekey.net.globalredir.akadns.net. www.microsoft.com-c-3.edgekey.net.globalredir.akadns.net. 892 IN
CNAME e13678.dscb.akamaiedge.net.

e13678.dscb.akamaiedge.net. 12 IN A 23.211.5.92 dig -t A www.microsoft.com +noall +answer

www.microsoft.com. 1790 IN CNAME www.microsoft.com-c-3.edgekey.net. www.microsoft.com-c-
3.edgekey.net. 630 IN CNAME www.microsoft.com-c-3.edgekey.net.globalredir.akadns.net.
www.microsoft.com-c-3.edgekey.net.globalredir.akadns.net. 630 IN CNAME
e13678.dscb.akamaiedge.net.
e13678.dscb.akamaiedge.net. 8 IN A 184.86.81.27

reverse lookup of the ip 80.254.178.110

dig -x 80.254.178.110 +noall +answer 110.178.254.80.in-addr.arpa. 43200 IN PTR 110-178-254-80.static.dsl-
net.ch.

a record of teams.microsoft.com via Google dns 8.8.8.8

dig @8.8.8.8 -t A teams.microsoft.com +noall +answer teams.microsoft.com. 259035 IN CNAME
teams.office.com. teams.office.com. 135 IN CNAME teams-office-com.s-0005.s-msedge.net. teams-office-
com.s-0005.s-msedge.net. 75 IN CNAME s-0005.s-msedge.net. s-0005.s-msedge.net. 75 IN A
52.113.194.132

ns records of ost.ch
dig -t NS ost.ch +noall +answer ost.ch. 3600 IN NS dns02.ost.ch. ost.ch. 3600 IN NS dns01.ost.ch.

mx records of ost.ch
dig -t MX ost.ch +noall +answer ost.ch. 3600 IN MX 0 ost-ch.mail.protection.outlook.com.

zone transfer @nsztm1.digi.ninja zonetransfer.me

dig AXFR zonetransfer.me @nsztm1.digi.ninja

; <<>> DiG 9.16.15-Debian <<>> AXFR zonetransfer.me @nsztm1.digi.ninja ;; global options: +cmd ;
Transfer failed.

show dns trace when looking up hsr.hacking-lab.com domain

1/2
ai_dnslsg.md 10/16/2021

dig +trace @8.8.8.8 -t A hsr.hacking-lab.com +noall +answer . 510028 IN NS a.root-servers.net. . 510028 IN

NS b.root-servers.net. . 510028 IN NS c.root-servers.net. . 510028 IN NS d.root-servers.net. . 510028 IN NS
e.root-servers.net. . 510028 IN NS f.root-servers.net. . 510028 IN NS g.root-servers.net. . 510028 IN NS
h.root-servers.net. . 510028 IN NS i.root-servers.net. . 510028 IN NS j.root-servers.net. . 510028 IN NS
k.root-servers.net. . 510028 IN NS l.root-servers.net. . 510028 IN NS m.root-servers.net. . 510028 IN RRSIG
NS 8 0 518400 20211029050000 20211016040000 14748 .
OpjmwLYKrZckxzsEF2HHyXNUhsfdtRyntU/yaV+e6+3b9J23Kr1v7PAa
NDo7xBzXpxBuRgq0jA3BSUHmzaS8Vf//Ujp4Nbeopkd36FscR+4aHBqA
97lQNH2KHFyncJ4qBC9Sh9NmYkEndWzdOvKLDsJU/iIZ4D/yWPMg59U5
h0eqovz80PetOYQROMShs/SWyy1nLniClAIgmX6YyyhaKs0FCGYJWhU5
DGQYOB75ahctTDQo0x0ZXZyqLqRuCuQ26CSDUoMmE8Vssl4iu+UdibNC
vzCEhOL37UcH5yfK2LsrJGbfCle9vNeo4xICwSjY4Pgtym2reO5UdvzV 8dACVg== ;; Received 1097 bytes
from 8.8.8.8#53(8.8.8.8) in 16 ms

;; Received 48 bytes from 198.97.190.53#53(h.root-servers.net) in 52 ms

dns over http request (curl) via cloudflare of the hostname

acadamy.hacking-lab.com
curl 'https://Cloudflare-dns.com/dns-query?ct=application/dns-json&name=acadamy.hacking-lab.com&type=A'
{"Status":3,"TC":false,"RD":true,"RA":true,"AD":false,"CD":false,"Question":[{"name":"acadamy.hacking-
lab.com","type":1}],"Authority":[{"name":"hacking-lab.com","type":6,"TTL":135,"data":"ns1.compass-
security.com. sysadmin.compass-security.com. 2021091001 10800 3600 1209600 3600"}]}

DS of the domain switch.ch

dig DS switch.ch +short 32714 13 2
764457EEF7B931C72C40F0875E9A4519EE2609975E7C76C031E86DE6 813FD53E

DNSKEY of the domain switch.ch

dig DNSKEY switch.ch +short 256 3 13
O6BuhTwyGOV18FINmJz6eVDJhRKVu+OPqq1SMVAL7gPvXgbgDN5vAyjw
Axr9t6QO3X4B78UgMJFLsTgx+7qqSQ== 256 3 13
hOJo39xqhypEVZxd+RUL3ahowISB5OMyrAGPUTSozH2Nq91/iMQurQau
KJaFwvBX4jiWnnf6Iqzx/iMMoVPAzQ== 257 3 13
93sc4u5sYw2Ep1O7DpKt8s/s0iQDifAE2MQUZQXC+o68Ixy2YOGsTRIl
u7iYw30mxDqLGmbH8T/nm+hgCoSyMw==

2/2