26 validating0 signed only74 no DNSSEC0 pending
google.comunsignedyoutube.comunsignedfacebook.comunsignedinstagram.comunsignedx.comunsignedtwitter.comunsignedwikipedia.orgunsignedamazon.comunsignedyahoo.comunsignedwhatsapp.comunsignedreddit.comunsignedtiktok.comunsignedlinkedin.comunsignednetflix.comunsignedmicrosoft.comunsignedlive.com🔒 validoffice.com🔒 validbing.comunsignedpinterest.comunsignedtwitch.tvunsignedbaidu.comunsignedapple.comunsignedicloud.comunsignedgithub.comunsignedgitlab.comunsignedcloudflare.com🔒 validstackoverflow.comunsignedmedium.comunsignedwordpress.comunsignedwordpress.orgunsignedtumblr.comunsignedebay.comunsignedaliexpress.comunsignedalibaba.comunsignedpaypal.com🔒 validstripe.comunsignedspotify.comunsignedadobe.comunsigneddropbox.comunsignedsalesforce.com🔒 validzoom.usunsignedslack.com🔒 validdiscord.com🔒 validtelegram.orgunsignedsignal.org🔒 validmozilla.orgunsignedietf.org🔒 validiana.org🔒 validicann.org🔒 validisc.org🔒 validverisign.com🔒 validnic.cz🔒 validnlnetlabs.nl🔒 validripe.net🔒 validarin.net🔒 validinternetsociety.org🔒 validcomcast.net🔒 validatt.comunsignedverizon.comunsignedt-mobile.comunsignedvodafone.comunsignedbbc.co.ukunsignedtheguardian.comunsignednytimes.comunsignedcnn.comunsignedforbes.comunsignedbloomberg.comunsignedwsj.comunsignedespn.comunsignedimdb.comunsignedbooking.comunsignedairbnb.comunsigneduber.comunsignedshopify.comunsignedsquarespace.comunsignedwix.comunsignedgodaddy.comunsignednamecheap.com🔒 validdynadot.comunsignedgandi.netunsignedovh.comunsignedhetzner.comunsigneddigitalocean.comunsignedlinode.comunsignedvultr.comunsignedoracle.comunsignedibm.comunsignedintel.comunsignednvidia.comunsignedsamsung.comunsignedsony.comunsignednintendo.comunsignedsteampowered.comunsignedroblox.comunsignednasa.gov🔒 validnih.gov🔒 validcisa.gov🔒 validirs.gov🔒 validwhitehouse.gov🔒 validusa.gov🔒 valid
Checked 26 Oct 2026 by our weekly check.
How we check
Every week we ask Cloudflare's validating resolver (1.1.1.1) for each domain's DNSKEY, DS and A records with DNSSEC turned on. Validating means the resolver set the AD flag. Signed only means the zone has keys but no working chain of trust, usually a missing DS record. No DNSSEC means no keys at all. "Re-check all" runs the same check from your browser now.