DNSSEC Checker

Check the official record to see whether a domain is signed with DNSSEC (whether a DS record is set at the registry).

DNSSEC Checker

Look up a domain and the results will appear here.

How it works

Where does the data come from?
The DNSSEC flag in the registry record is read from RDAP/WHOIS and the domain's DS record is queried separately over DNS. Both are shown together.
How to use it
Type a domain (e.g. example.com) and run the lookup; you don't need http://, www or a path. The result appears within seconds and the page URL can be shared.

Frequently Asked Questions

What is DNSSEC?

DNSSEC is a security extension that verifies DNS responses with digital signatures, protecting against forged DNS responses.

What does this check look at?

It shows the DNSSEC (delegationSigned / DS) information in the registry record. If the registry does not share this information, the result is shown as "unknown".

Domain Age Checker

Calculate a domain's original registration date and age from the registry record.

Use tool

Domain Expiration Checker

See when a domain expires and how many days are left.

Use tool

Domain Availability Checker

Check whether a domain is registered using the registry record.

Use tool