dnscheck.tools

Use the browser check to inspect the resolvers serving that request path. For a more specific validation question, the help documents test-zone names for different signature algorithms, IPv4 or IPv6 authoritative paths, and deliberately invalid or expired signatures. Random labels can avoid reusing a cached test answer; keep the test name and options with the result. The default algorithm can change, so an unlabeled pass does not establish support for every DNSSEC algorithm. Network ownership and location labels come from RDAP, reverse DNS and MaxMind data. This is evidence about the tested resolver path, rather than every DNS request made by the device.