🔐 DNSSEC Check
DNSKEY, DS, RRSIG records and chain of trust analysis
Result: cloudflare.com
✅
DNSSEC enabled
Domain is protected against DNS spoofing and man-in-the-middle attacks
| DNSKEY | 2 records |
| DS | 1 records |
| RRSIG | None |
| NSEC/NSEC3 | NSEC |
DNSKEY
257 3 13 mdsswUyr3DPW132mOi8V9xESWE8jTo0dxCjjnopKl+GqJxpVXckHAeF+KkxLbxILfDLUT0rAK9iUzy1L53eKGQ==...
256 3 13 oJMRESz5E4gYzS/q6XDrvU1qMPYIjCWzJaOau8XNEZeqCYKD5ar0IRd8KqXXFJkqmVfRvMGPmM1x8fGAa2XhSA==...
DS
2371 13 2 32996839A6D808AFE3EB4A795A0E6A7A39A76FC52FF228B22B76F6D63826F2B9
What is DNSSEC? ▾
DNSSEC (DNS Security Extensions) adds cryptographic signatures to DNS responses, protecting against DNS spoofing attacks where attackers substitute fake DNS responses. DNSSEC does not encrypt traffic — SSL/TLS does that. It only guarantees authenticity of DNS responses.