🔐 DNSSEC Check
DNSKEY, DS, RRSIG records and chain of trust analysis
Result: sberbank.ru
❌
DNSSEC not enabled
DNS responses for this domain are unsigned and may be forged
| DNSKEY | None |
| DS | None |
| RRSIG | None |
| NSEC/NSEC3 | None |
What is DNSSEC? ▾
DNSSEC (DNS Security Extensions) adds cryptographic signatures to DNS responses, protecting against DNS spoofing attacks where attackers substitute fake DNS responses. DNSSEC does not encrypt traffic — SSL/TLS does that. It only guarantees authenticity of DNS responses.