> DNS Toolbox DNS, email, and network diagnostics for sysadmins.

dns security

DNSSEC Checker

Inspect DS, DNSKEY and signatures, with validation status reported by Cloudflare's DNS resolver. Use the zone's domain for delegation checks.

About validation Queries use Cloudflare 1.1.1.1. “Validated” means this resolver returned the AD flag for signed data. Record presence alone does not prove validity; timeouts and SERVFAIL are shown as inconclusive.