Ordered by severity, then signals introduced in this release. Hidden characters are shown as ⟨U+…⟩.
-
base64-like blob (48 bytes, compression ratio 1.23) (raw pass, confidence 0.60)
"S15zlJe3xNj+BAURHCApKjBkh5emuLy+w9zn6vn6/QsbXWp6hZWcoLO6ytLf"
"6/H+DhguNzs/VFVbg5SXo62wztPoAAAAAAAAAAAAAA0jNEY=",
)
likely benign
LLM, confidence 0.95
Test DNSSEC key data in base64.
Reasoning
Base64 DNSSEC key material in a test; the padding of zero bytes is typical of key test vectors, not a payload.
-
bytes literal contains 34 `\xNN` escapes (100% of content) — binary payload shape (ast pass, confidence 0.85)
w = b"\x00\x00\xc0\x00\xc0\x02\xc0\x04\xc0\x06\xc0\x08\xc0\x0a\xc0\x0c\xc0\x0e\xc0\x10\xc0\x12\xc0\x14\xc0\x16\xc0\x18\xc0\x1a\xc0\x1c\xc0\x1e"
self.assertEqual(len(w), 34)
starts = [c for c in w if c == 0xC0]
likely benign
LLM, confidence 0.90
Test fixture bytes encoding DNS name compression pointers.
Reasoning
A bytes literal of DNS compression pointers (0xC0 offsets) in a unit test for dnspython name parsing; the escapes are test vector data, not obfuscation or a payload.
-
base64-like blob (67 bytes, compression ratio 1.16) (raw pass, confidence 0.60)
"SVCB",
"1 . ech=AEj+DQBEAQAgACAdd+scUi0IYFsXnUIU7ko2Nd9+F8M26pAGZVpz/KrWPgAEAAE"
"AAWQVZWNoLXNpdGVzLmV4YW1wbGUubmV0AAA=",
)
likely benign
LLM, confidence 0.93
Base64 ECH parameter in an SVCB test vector.
Reasoning
Base64 ECH configuration value in an SVCB record test, a standard DNS parameter encoding used for testing.
-
base64-like blob (88 bytes, compression ratio 1.12) (raw pass, confidence 0.60)
dns.name.from_text("aaa-test"),
"WklIGweRJDBzgYJAfFAt3ln7NJAyz66W56/fpoeepVn5yqs3i3iiXFIS6GXpuFw0TyRfADBcnap8Vvl7TokfYA==",
"hmac-sha512",
)
likely benign
LLM, confidence 0.92
Base64 HMAC key for TSIG keyring test.
Reasoning
HMAC key base64 used as a test TSIG key in a keyring test; standard fixture.
-
base64-like blob (44 bytes, compression ratio 1.25) (raw pass, confidence 0.60)
dns.name.from_text("b-key"),
"KykTutSQNZYc+o8rqfMPH7ce2a9SruvKgPAqfn8EER8=",
"hmac-sha256",
)
likely benign
LLM, confidence 0.92
Base64 HMAC-SHA256 test key.
Reasoning
Base64 HMAC-SHA256 test key in a TSIG keyring test; benign fixture.
-
base64-like blob (88 bytes, compression ratio 1.12) (raw pass, confidence 0.60)
dns.name.from_text("example.com"),
"WklIGweRJDBzgYJAfFAt3ln7NJAyz66W56/fpoeepVn5yqs3i3iiXFIS6GXpuFw0TyRfADBcnap8Vvl7TokfYA==",
).secret
}
likely benign
LLM, confidence 0.92
Base64 HMAC test key.
Reasoning
Repeated base64 HMAC test key in keyring tests; benign fixture.
-
base64-like blob (88 bytes, compression ratio 1.12) (raw pass, confidence 0.60)
dns.name.from_text("bh-"),
"WklIGweRJDBzgYJAfFAt3ln7NJAyz66W56/fpoeepVn5yqs3i3iiXFIS6GXpuFw0TyRfADBcnap8Vvl7TokfYA==",
"hmac-sha512",
)
likely benign
LLM, confidence 0.92
Base64 HMAC test key.
Reasoning
Same base64 HMAC test key reused in another keyring test case; benign fixture.
-
identifier `δύναμαι` contains homoglyph candidates: ν (03BD)→v, α (03B1)→a, α (03B1)→a (in string/comment) (raw pass, confidence 0.35)
TXT "Puedo comer vidrio, no me hace daño."
TXT "ὕαλον ϕαγεῖν δύναμαι· τοῦτο οὔ με βλάπτει."
TXT "Я могу есть стекло, оно мне не вредит."
-
identifier `δύναμαι` mixes scripts: Greek + Latin (in string/comment) (raw pass, confidence 0.40)
TXT "Puedo comer vidrio, no me hace daño."
TXT "ὕαλον ϕαγεῖν δύναμαι· τοῦτο οὔ με βλάπτει."
TXT "Я могу есть стекло, оно мне не вредит."
-
identifier `με` mixes scripts: Latin + Greek (in string/comment) (raw pass, confidence 0.40)
TXT "Puedo comer vidrio, no me hace daño."
TXT "ὕαλον ϕαγεῖν δύναμαι· τοῦτο οὔ με βλάπτει."
TXT "Я могу есть стекло, оно мне не вредит."
-
identifier `δύναμαι` contains homoglyph candidates: ν (03BD)→v, α (03B1)→a, α (03B1)→a (in string/comment) (raw pass, confidence 0.35)
300 TXT "Puedo comer vidrio, no me hace daño."
300 TXT "ὕαλον ϕαγεῖν δύναμαι· τοῦτο οὔ με βλάπτει."
300 TXT "Я могу есть стекло, оно мне не вредит."
-
identifier `δύναμαι` mixes scripts: Greek + Latin (in string/comment) (raw pass, confidence 0.40)
300 TXT "Puedo comer vidrio, no me hace daño."
300 TXT "ὕαλον ϕαγεῖν δύναμαι· τοῦτο οὔ με βλάπτει."
300 TXT "Я могу есть стекло, оно мне не вредит."
-
identifier `με` mixes scripts: Latin + Greek (in string/comment) (raw pass, confidence 0.40)
300 TXT "Puedo comer vidrio, no me hace daño."
300 TXT "ὕαλον ϕαγεῖν δύναμαι· τοῦτο οὔ με βλάπτει."
300 TXT "Я могу есть стекло, оно мне не вредит."
-
identifier `δύναμαι` contains homoglyph candidates: ν (03BD)→v, α (03B1)→a, α (03B1)→a (in string/comment) (raw pass, confidence 0.35)
TXT "Puedo comer vidrio, no me hace daño."
TXT "ὕαλον ϕαγεῖν δύναμαι· τοῦτο οὔ με βλάπτει."
TXT "Я могу есть стекло, оно мне не вредит."
-
identifier `δύναμαι` mixes scripts: Greek + Latin (in string/comment) (raw pass, confidence 0.40)
TXT "Puedo comer vidrio, no me hace daño."
TXT "ὕαλον ϕαγεῖν δύναμαι· τοῦτο οὔ με βλάπτει."
TXT "Я могу есть стекло, оно мне не вредит."
-
identifier `με` mixes scripts: Latin + Greek (in string/comment) (raw pass, confidence 0.40)
TXT "Puedo comer vidrio, no me hace daño."
TXT "ὕαλον ϕαγεῖν δύναμαι· τοῦτο οὔ με βλάπτει."
TXT "Я могу есть стекло, оно мне не вредит."
-
base64-like blob (3020 bytes over 48 lines, compression ratio 0.76) (raw pass, confidence 0.60)
mQINBF7mj/kBEAC6UB++f8N8qCBQuRLzIHoZd5oEYpylm+C9CrbfA0BYQpql9L6s
Ty8C/aph3ZHqtKutsbotQjmnd2b5D/W1Ku5F1Z+B5/gr2ija9NV1u66wJjKOdHon
LLYMaquzIcQvwxkrjAcGd1BZsem0maHKR/iT2bpGOmLB0U89lnEmwmNgSh+vg+68
likely benign
LLM, confidence 0.95
Armored PGP public key block in SECURITY.md.
Reasoning
The blob begins with 'mQINBF', the header of an OpenPGP public key block. Raw-pass base64 hits on armored keys in documentation are a known false-positive pattern. Public key material is not a payload.
-
9 consecutive `\NNN` octal escapes (entropy 3.2 bits/byte) (in comment) (raw pass, confidence 0.39)
-
file imports decoder module(s) base64 and calls `.decompress()` — embedded payload decompressed at runtime (ast pass, confidence 0.75)
if isinstance(secret, str):
secret = base64.decodebytes(secret.encode())
self.secret = secret
if isinstance(algorithm, str):
likely benign
LLM, confidence 0.90
Base64 decoding of a TSIG secret in dnspython's tsig module.
Reasoning
The AST hit fires on a file that imports base64 and decodes a user-supplied TSIG secret with base64.decodebytes. This is ordinary key-handling in dnspython. The snippet shows no decompression of an embedded payload, so the decompress signal looks like a pattern match on an unrelated call.
-
base64-like blob (44 bytes, compression ratio 1.25) (raw pass, confidence 0.60)
"keyname.",
"bnp6+y85UcBfsieuB/Uhx3EUsjc8wAFyyCSS5rhScb0=",
algorithm=dns.tsig.HMAC_SHA256,
)
likely benign
LLM, confidence 0.95
Example TSIG HMAC-SHA256 key string in examples.
Reasoning
A 44-byte base64 string in a TSIG example is an HMAC key literal, a normal illustration of configuring a key in a DNS library example. Raw-pass base64 hits on short key strings are routine.
-
base64-like blob (1628 bytes over 26 lines, compression ratio 0.77) (raw pass, confidence 0.60)
-----BEGIN PRIVATE KEY-----
MIIEvwIBADANBgkqhkiG9w0BAQEFAASCBKkwggSlAgEAAoIBAQDHve8aGCaof3lX
Cc6QREh9gFvtc0pIm8iZAayiRu1KNS6EH2mN27+9jbfKRETywsxGN86XH/LZEEXH
C0El2YMJGwRbg7OqjUp14zEI33X/34jZZsqlHWbzJ2WBLY49K9mBengDLdQu5Ve9
likely benign
LLM, confidence 0.95
Test fixture RSA private key in PEM format.
Reasoning
This is a PEM 'BEGIN PRIVATE KEY' block in a test-fixture file for DNSSEC key parsing. Test keys are expected in test suites. Nothing shows it is used outside testing, and the base64 is a standard DER structure.
-
base64-like blob (348 bytes, compression ratio 0.84) (raw pass, confidence 0.60)
dnskey="256 3 8 AwEAAce97xoYJqh/eVcJzpBESH2AW+1zSkibyJkBrKJG7Uo1LoQfaY3bv72Nt8pERPLCzEY3zpcf8tkQRccLQSXZgwkbBFuDs6qNSnXjMQjfdf/fiNlmyqUdZvMnZYEtjj0r2YF6eAMt1C7lV73xhaX5BgOjJGtPGp8QOAvslnSAQJC4WNX/9wiKi8hqgpx98IaZYNjRCSc+0fOfxfgtBXH9LbW4Y09kzwlxLDp+Bsn+G/5xy3jHcm2tKS1/ZcMEfwdln99vEepJIG5D9j4m/Hq3Cm3FtjQsUAsNmGJ1
likely benign
LLM, confidence 0.95
Test fixture DNSKEY public key record.
Reasoning
The string is a DNSKEY record with base64 public key material in a test fixture, the standard DNS presentation format. Public key data is not a payload.
-
base64-like blob (3168 bytes over 50 lines, compression ratio 0.76) (raw pass, confidence 0.60)
-----BEGIN PRIVATE KEY-----
MIIJQwIBADANBgkqhkiG9w0BAQEFAASCCS0wggkpAgEAAoICAQDI/o4RjA9g/qWS
DagWOYP+tY5f3EV5P8kKP3OMx+RRC/s4JnzQXKgy/yWM3eCnPcnYy1amtr4LCpQr
wZd+8DV5Tup/WZrPHQu5YoRgLb+oKnvw2NGMMbGQ6jlehA8TffuF1bRQf1TPLBRa
likely benign
LLM, confidence 0.95
Test fixture PKCS#8 private key in PEM format.
Reasoning
A PEM private key block in a test-fixture file, consistent with DNSSEC test vectors. It is standard PKCS#8 structure with no decoding or execution path.
-
base64-like blob (688 bytes, compression ratio 0.80) (raw pass, confidence 0.60)
dnskey="256 3 8 AwEAAcj+jhGMD2D+pZINqBY5g/61jl/cRXk/yQo/c4zH5FEL+zgmfNBcqDL/JYzd4Kc9ydjLVqa2vgsKlCvBl37wNXlO6n9Zms8dC7lihGAtv6gqe/DY0YwxsZDqOV6EDxN9+4XVtFB/VM8sFFospEnv1J6a+LIdxm6eq2OK/yZsOYWQyZQAVVAWcIat2/S+TyZuTGn3xQSTPAEqTgR3bCJBkCXUVYylZSG0B5m4kLhzW0dTXE2M3hzZeZiiRG8rSPf3qXoHSKH+CL3A5h/qN5OXmrSVK1v43Q9p5C+W
likely benign
LLM, confidence 0.95
Test fixture DNSKEY public key record.
Reasoning
A DNSKEY public key string in a test fixture. It is a standard DNS presentation record, not an encoded payload.
-
base64-like blob (184 bytes over 3 lines, compression ratio 0.91) (raw pass, confidence 0.60)
-----BEGIN PRIVATE KEY-----
MIGHAgEAMBMGByqGSM49AgEGCCqGSM49AwEHBG0wawIBAQQgJFyT16nmjmDgEF2v
1iTperYVGR52zVT8ej6A9eTmmSChRANCAASfsKTiVq2KNEKSUoYtPAXiZbDG6EEP
8TwdLumK8ge2F9AtE0Q343bnnZBCFpCxuvxtuWmS8QQwAWh8PizqKrDu
likely benign
LLM, confidence 0.95
Test fixture EC private key in PEM format.
Reasoning
An EC private key PEM block in a test file for DNSSEC ECDSA vectors. Expected test material with standard ASN.1 structure.
-
base64-like blob (88 bytes, compression ratio 1.12) (raw pass, confidence 0.60)
likely benign
LLM, confidence 0.95
Test fixture ECDSA P-256 DNSKEY record.
Reasoning
A DNSKEY public key record for ECDSA P-256 in a test fixture, matching the surrounding test vector structure.
-
base64-like blob (248 bytes over 4 lines, compression ratio 0.90) (raw pass, confidence 0.60)
-----BEGIN PRIVATE KEY-----
MIG2AgEAMBAGByqGSM49AgEGBSuBBAAiBIGeMIGbAgEBBDCNSZ3SrRmdh8wcUVPO
h9ea2zw9Jyc3P1XuP2nOYZR/aQMHfScCtWA3AsMCcsseEmihZANiAATv2H3Q3jrI
aH/Vmit9RefIpnh+iZzpyk29/m1EJKgkkwbA0OHClk8Nt7RL/4CO4CUpzaOcqamN
likely benign
LLM, confidence 0.95
Test fixture ECDSA P-384 private key in PEM format.
Reasoning
An EC private key PEM block for P-384 in a test fixture. Standard test vector with no execution or decoding of hidden content.
-
base64-like blob (128 bytes, compression ratio 0.99) (raw pass, confidence 0.60)
likely benign
LLM, confidence 0.95
Test fixture ECDSA P-384 DNSKEY record.
Reasoning
A DNSKEY public key record for ECDSA P-384 in a test fixture, consistent with the other vectors in the file.
-
base64-like blob (64 bytes, compression ratio 1.17) (raw pass, confidence 0.60)
-----BEGIN PRIVATE KEY-----
MC4CAQAwBQYDK2VwBCIEIKGelcdVWlxU5YlLE5/LAEfqhZq7P9s0NHlQqxOjBvcS
-----END PRIVATE KEY-----
likely benign
LLM, confidence 0.95
Test fixture Ed25519 private key in PEM format.
Reasoning
A short Ed25519 PKCS#8 private key in PEM format in a test fixture. The OID prefix matches the Ed25519 key structure, so this is a normal test vector.
-
base64-like blob (44 bytes, compression ratio 1.25) (raw pass, confidence 0.60)
likely benign
LLM, confidence 0.95
Test fixture Ed25519 DNSKEY record.
Reasoning
A 32-byte Ed25519 DNSKEY public key in a test fixture. Standard public key material.
-
base64-like blob (100 bytes over 2 lines, compression ratio 1.11) (raw pass, confidence 0.60)
-----BEGIN PRIVATE KEY-----
MEcCAQAwBQYDK2VxBDsEOfGENbZhfMbspoQV1c3/vljWPMFsIzef7M111gU0QTva
dUd0khisgJ/gk+I1DWLtf/6M4wxXje5FLg==
-----END PRIVATE KEY-----
likely benign
LLM, confidence 0.95
Test fixture Ed448-style private key in PEM format.
Reasoning
An Ed448 or similar PKCS#8 private key PEM block in a test fixture. Standard test vector structure, no execution path.
-
base64-like blob (76 bytes, compression ratio 1.14) (raw pass, confidence 0.60)
likely benign
LLM, confidence 0.97
Test fixture containing a base64-encoded ED448 DNSKEY public key.
Reasoning
A DNSKEY public key string in a dnspython test fixture; base64 blobs are expected test data for DNSSEC keys, not obfuscation.
-
base64-like blob (56 bytes, compression ratio 1.20) (raw pass, confidence 0.60)
"SOA 3 1 86400 20101129143231 20101122112731 42088 example."
" CGul9SuBofsktunV8cJs4eRs6u+3NCS3yaPKvBbD+pB2C76OUXDZq9U=",
)
likely benign
LLM, confidence 0.97
Test vector containing a base64 RRSIG signature.
Reasoning
Base64 RRSIG signature data in a DNSSEC test file, consistent with legitimate test vectors.
-
base64-like blob (44 bytes, compression ratio 1.25) (raw pass, confidence 0.60)
"DNSKEY",
"257 3 15 l02Woi0iS8Aa25FQkUd9RMzZHJpBoRQwAQEX1SxZJA4=",
)
}
likely benign
LLM, confidence 0.97
Test DNSKEY record with base64 public key.
Reasoning
DNSKEY record string used as DNSSEC test data; the base64 is a key, expected in this context.
-
base64-like blob (44 bytes, compression ratio 1.25) (raw pass, confidence 0.60)
" oL9krJun7xfBOIWcGHi7mag5/hdZrKWw15jPGrHpjQeR"
"AvTdszaPD+QLs3fx8A4M3e23mRZ9VrbpMngwcrqNAg==",
)
likely benign
LLM, confidence 0.97
Test DNSSEC key data in base64.
Reasoning
Base64 key/signature material inside a DNSSEC test vector in a dnspython test suite.
-
base64-like blob (44 bytes, compression ratio 1.25) (raw pass, confidence 0.60)
"DNSKEY",
"257 3 15 zPnZ/QwEe7S8C5SPz2OfS5RR40ATk2/rYnE9xHIEijs=",
)
}
likely benign
LLM, confidence 0.97
Test DNSKEY record with base64 public key.
Reasoning
Same pattern as other DNSSEC test vectors; base64 public key material is expected here.
-
base64-like blob (44 bytes, compression ratio 1.25) (raw pass, confidence 0.60)
" zXQ0bkYgQTEFyfLyi9QoiY6D8ZdYo4wyUhVioYZXFdT4"
"10QPRITQSqJSnzQoSm5poJ7gD7AQR0O7KuI5k2pcBg==",
)
likely benign
LLM, confidence 0.97
Test DNSSEC base64 key/signature data.
Reasoning
Base64 DNSSEC signature/key data in a test vector; no execution or hiding behavior.
-
base64-like blob (76 bytes, compression ratio 1.14) (raw pass, confidence 0.60)
"MX 16 2 3600 1440021600 1438207200 9713 example.com."
" 3cPAHkmlnxcDHMyg7vFC34l0blBhuG1qpwLmjInI8w1CMB29FkEAIJUA0amxWndkmnBZ6SKiwZSA"
"xGILn/NBtOXft0+Gj7FSvOKxE/07+4RQvE581N3Aj/JtIyaiYVdnYtyMWbSNyGEY2213WKsJlwEA",
)
likely benign
LLM, confidence 0.97
Test RRSIG base64 signature data.
Reasoning
RRSIG base64 signature data in a DNSSEC test; legitimate protocol test content.
-
base64-like blob (76 bytes, compression ratio 1.14) (raw pass, confidence 0.60)
" 3cPAHkmlnxcDHMyg7vFC34l0blBhuG1qpwLmjInI8w1CMB29FkEAIJUA0amxWndkmnBZ6SKiwZSA"
"xGILn/NBtOXft0+Gj7FSvOKxE/07+4RQvE581N3Aj/JtIyaiYVdnYtyMWbSNyGEY2213WKsJlwEA",
)
likely benign
LLM, confidence 0.97
Test RRSIG base64 signature continuation.
Reasoning
Continuation of the same RRSIG test vector; legitimate DNSSEC test data.
-
base64-like blob (76 bytes, compression ratio 1.14) (raw pass, confidence 0.60)
"MX 16 2 3600 1440021600 1438207200 38353 example.com."
" E1/oLjSGIbmLny/4fcgM1z4oL6aqo+izT3urCyHyvEp4Sp8Syg1eI+lJ57CSnZqjJP41O/9l4m0A"
"sQ4f7qI1gVnML8vWWiyW2KXhT9kuAICUSxv5OWbf81Rq7Yu60npabODB0QFPb/rkW3kUZmQ0YQUA",
)
likely benign
LLM, confidence 0.97
Test RRSIG base64 signature data.
Reasoning
RRSIG test vector with base64 signature data, expected in DNSSEC tests.
-
base64-like blob (76 bytes, compression ratio 1.14) (raw pass, confidence 0.60)
" E1/oLjSGIbmLny/4fcgM1z4oL6aqo+izT3urCyHyvEp4Sp8Syg1eI+lJ57CSnZqjJP41O/9l4m0A"
"sQ4f7qI1gVnML8vWWiyW2KXhT9kuAICUSxv5OWbf81Rq7Yu60npabODB0QFPb/rkW3kUZmQ0YQUA",
)
likely benign
LLM, confidence 0.97
Test RRSIG base64 signature continuation.
Reasoning
Continuation of the RRSIG test vector; legitimate protocol test content.
-
9 consecutive `\NNN` octal escapes (entropy 3.2 bits/byte) (raw pass, confidence 0.65)
def testToText13(self):
n = dns.name.from_text(r"\150\151\152\153\154\155\156\157\158\159.")
t = n.to_text()
self.assertEqual(t, r"\150\151\152\153\154\155\156\157\158\159.")
likely benign
LLM, confidence 0.95
Test of DNS name octal escape parsing and output.
Reasoning
Octal escapes in a DNS name test verify \NNN text round-tripping; these are literal test inputs for escaping logic.
-
9 consecutive `\NNN` octal escapes (entropy 3.2 bits/byte) (raw pass, confidence 0.65)
t = n.to_text()
self.assertEqual(t, r"\150\151\152\153\154\155\156\157\158\159.")
def testToText14(self):
likely benign
LLM, confidence 0.95
Test assertion on octal-escaped DNS name text.
Reasoning
Same octal escape round-trip assertion in a DNS name test; legitimate escape-handling coverage.
-
9 consecutive `\NNN` octal escapes (entropy 3.2 bits/byte) (raw pass, confidence 0.65)
n = dns.name.from_text(r"\150\151\152\153\154\155\156\157\158\159.")
t = n.to_unicode()
self.assertEqual(t, r"\150\151\152\153\154\155\156\157\158\159.")
likely benign
LLM, confidence 0.95
Test of DNS name unicode conversion with octal escapes.
Reasoning
Octal escapes exercise to_unicode on arbitrary binary labels in dnspython tests; benign.
-
9 consecutive `\NNN` octal escapes (entropy 3.2 bits/byte) (raw pass, confidence 0.65)
t = n.to_unicode()
self.assertEqual(t, r"\150\151\152\153\154\155\156\157\158\159.")
def testSlice1(self):
likely benign
LLM, confidence 0.95
Test assertion on octal-escaped DNS name unicode output.
Reasoning
Assertion on octal-escaped DNS name output in a unit test; benign test coverage.
-
base64-like blob (88 bytes, compression ratio 1.12) (raw pass, confidence 0.60)
"257 3 13 aCoEWYBBVsP9Fek2oC8yqU8ocK mnS1iDSFZNORnQuHKtJ9Wpyz+kNryquB78Pyk/ NTEoai5bxoipVQQXzHlzyg==",
"257 3 13 aCoEWYBBVsP9Fek2oC8yqU8ocKmnS1iDSFZNORnQuHKtJ9Wpyz+kNryquB78Pyk/NTEoai5bxoipVQQXzHlzyg==",
),
likely benign
LLM, confidence 0.93
DNSKEY/RRSIG-style base64 test vector in a DNS library test.
Reasoning
DNSSEC public key base64 test data in a dnspython rdata test, with whitespace variants deliberately included to test parsing. Expected test content.
-
base64-like blob (112 bytes, compression ratio 1.04) (raw pass, confidence 0.60)
EOmrvAxLvq4vHtuTlH7JIszzYBSes8g1vle6KG7 xXiP3U5Ll 96Qiu6bZ31rlMQSPB20xbqJJh6psNSrQs41QvdcXAej+K2Hl1Wd8kPriec4AgiBEh8sk5Pp8W9ROLQ7PcbqqttFaW2m7N/Wy4qcFU13roWKDEAst bxH5CHPoBfZSbIwK4KM6BK/uDHpSPIbiOvOCW+lvu9TAiZPc0oysY6as lO7jXv16Gws=",
likely benign
LLM, confidence 0.93
Base64 DNSSEC key test vector.
Reasoning
Long base64 DNSSEC key material in a DNS rdata test file, consistent with other test vectors in the same file.
-
base64-like blob (348 bytes, compression ratio 0.84) (raw pass, confidence 0.60)
"257 3 8 AwEAAcw5QLr0IjC0wKbGoBPQv4qmeqHy9mvL5qGQTuaG5TSrNqEAR6b/qvxDx6my4JmEmjUPA1JeEI9YfTUieMr2UZflu7aIbZFLw0vqiYrywCGrCHXLalOrEOmrvAxLvq4vHtuTlH7JIszzYBSes8g1vle6KG7xXiP3U5Ll96Qiu6bZ31rlMQSPB20xbqJJh6psNSrQs41QvdcXAej+K2Hl1Wd8kPriec4AgiBEh8sk5Pp8W9ROLQ7PcbqqttFaW2m7N/Wy4qcFU13roWKDEAstbxH5CHPoBfZSbIw
likely benign
LLM, confidence 0.92
Base64 DNSKEY test record.
Reasoning
Base64 DNSKEY test record in a dnspython test suite; the blob is a legitimate public-key fixture.
-
base64-like blob (120 bytes, compression ratio 1.00) (raw pass, confidence 0.60)
"256 3 8 AwEAAday3UX323uVzQqtOMQ7EHQYfD5Ofv4akjQGN2zY5 AgB/2jmdR/+1PvXFqzKCAGJv4wjABEBNWLLFm7ew1hHMDZEKVL17aml0EBKI6Dsz6Mxt6n7ScvLtHaFRKaxT4i2JxiuVhKdQR9XGMiWAPQKrRM5SLG0P+2F+ TLKl3D0L/cD",
likely benign
LLM, confidence 0.92
Base64 DNS key test data with embedded whitespace.
Reasoning
Base64 DNSKEY/RRSIG test data with a deliberate space in the string to exercise whitespace tolerance; benign test fixture.
-
base64-like blob (176 bytes, compression ratio 0.92) (raw pass, confidence 0.60)
"256 3 8 AwEAAday3UX323uVzQqtOMQ7EHQYfD5Ofv4akjQGN2zY5AgB/2jmdR/+1PvXFqzKCAGJv4wjABEBNWLLFm7ew1hHMDZEKVL17aml0EBKI6Dsz6Mxt6n7ScvLtHaFRKaxT4i2JxiuVhKdQR9XGMiWAPQKrRM5SLG0P+2F+TLKl3D0L/cD",
),
)
likely benign
LLM, confidence 0.92
Base64 DNSSEC key test fixture.
Reasoning
Same DNSSEC key fixture pattern as neighboring test vectors; no execution or hidden payload.
-
base64-like blob (44 bytes, compression ratio 1.25) (raw pass, confidence 0.60)
+ "secret="
+ "'MDEyMzQ1Njc4OWFiY2RlZjAxMjM0NTY3ODlhYmNkZWY='>",
)
likely benign
LLM, confidence 0.90
Base64 TSIG test secret.
Reasoning
A base64 TSIG secret string in a test of TSIG key handling; plain test credential, not a dropper.
Run disclude locally to verify. Add --format sarif for SARIF output. Add --llm (with an API key in the environment) to include the LLM review.
disclude.io