Verify DNSSEC signing status for a domain.
Enter a domain above.
The "Validated (AD flag)" result reflects Cloudflare's 1.1.1.1 resolver validating the chain over plain UDP a reasonable signal, not cryptographic proof. It can be spoofed by an on-path attacker, so treat it as informational, not an audit-grade guarantee.