DNSSEC Checker
Check if a domain has DNSSEC enabled. Verifies DNSKEY and RRSIG records for DNS security validation.
Enter a domain name to check its DNSSEC configuration
What is DNSSEC?
DNSSEC (Domain Name System Security Extensions) adds cryptographic signatures to DNS records. It protects against DNS spoofing and cache poisoning attacks by allowing DNS resolvers to verify that DNS responses are authentic and haven't been tampered with.
When DNSSEC is enabled, the domain publishes DNSKEY and RRSIG records, and the parent zone publishes a DS record that chains the trust to the root zone.