Sponsor Star on GitHub

Loading DNSSEC chain

Created with love by Felix Wotschofsky

Free Tools

DNS Lookup Global DNS Lookup DNSSEC Lookup WHOIS Lookup Certificate Logs Subdomains Finder

Source on GitHub Powered by Vercel

DNSSEC Lookup for then.io - Domain Digger

Results forthen.io

Registrar

Creation Date

DNSSEC

DNS
DNS Map
DNSSEC
Whois
Certs
Subdomains

Unsigned at then.io

This view checks DS digest links and DNSKEY signatures.

.

Intact

DNSKEYs

8763 RSASHA256 · ZSK
20326 RSASHA256 · KSK
38696 RSASHA256 · KSK

Signature: Valid until 2026-11-11

IANA trust anchor

20326SHA-256Matched
E06D44B80B8F1D39…C7F8EC8D
38696SHA-256Matched
683D2D0ACB8C9B71…C0FB2B16

io

Intact

DNSKEYs

60948 RSASHA256 · ZSK
4300 RSASHA256 · ZSK
43371 RSASHA256 · ZSK
57355 RSASHA256 · KSK
38690 RSASHA256 · KSK

Signature: Valid until 2026-11-15

Parent DS

57355SHA-256Matched
95A57C3BAB7849DB…E865C3E2
38690SHA-256Matched
CBBD98BAEBCB9D11…44AA3A1B

then.io

Unsigned

DNSKEYs

No DNSKEYs

Parent DS

No DS records

Signatures over DS records and the queried name’s own records are not verified yet, so a forged DS or record is not detected.