DNSSEC checker

Inspect resolver behavior for DNSSEC-related symptoms such as SERVFAIL patterns.

Problems this check can reveal

  • SERVFAIL from validating resolvers
  • Registrar DS records not matching DNSKEY data
  • Expired or incomplete DNSSEC signatures

Related checks

ns lookupSOA lookupDNS lookup