All tools
/dnssec-checker
DNSSEC Checker
Check whether a domain has DNSSEC configured and validating.
Try:
About DNSSEC Checker
DNSSEC Checker queries a validating public resolver for a domain's DNSKEY records and reports whether they exist and whether that resolver was able to cryptographically validate the chain of trust back to the root.
Use this to confirm DNSSEC is actually working after setting up signing with a registrar or DNS provider, rather than just assuming it is because a setting was toggled on somewhere.
DNSKEY records existing but validation failing usually means a DS record is missing or wrong at the registrar, which breaks the chain of trust even though the domain's own DNS provider is doing everything correctly on its end.
Tutorials
How DNS Records WorkWhat actually happens between typing a domain and a page loading, and what each record type in a DNS Lookup result is telling you.7 min readWHOIS and RDAP Explained: What Domain Registration Data Is PublicWhat a domain lookup actually reveals about who registered it, why so much of that detail is redacted today, and RDAP's role as the modern replacement for WHOIS.5 min readDNSSEC Explained: How DNS Gets Cryptographically SignedWhat DNSSEC actually protects against, how the chain of trust from a domain back to the root works, and why a broken DS record is the most common way it fails.6 min read