DNSSEC Validator & Cryptographic Chain Checker
Verify DNS Security Extensions (DNSSEC), DS records, DNSKEY, and RRSIG signatures.
DNSSEC Security Chain Validator
Verify cryptographic signature chains (DS and DNSKEY records) protecting against DNS spoofing and cache poisoning.
About the DNSSEC Validation Checker
DNSSEC strengthens DNS authentication using digital signatures, protecting users against DNS spoofing, cache poisoning, and man-in-the-middle attacks.
How to Use
Enter your domain name to verify if DNSSEC is enabled and whether the cryptographic delegation chain is valid.
Understanding Results
Returns SECURE if valid cryptographic signatures exist, INSECURE if DNSSEC is not configured, or BOGUS if signatures fail verification.
Frequently Asked Questions
What happens if DNSSEC is bogus?
Resolvers that validate DNSSEC will block access to your site to protect users from forged records.
Related DNS & Domains Utilities
Query A, AAAA, MX, TXT, CNAME, NS, SOA, and PTR records for any domain.
Evaluate HSTS, CSP, X-Frame-Options, X-Content-Type-Options, and Referrer-Policy.
Verify certificate validity, days remaining, cipher suites, issuer, and SAN coverage.
Check domain registration age, renewal deadline, registrar, and WHOIS status.