Brand extension sites

Popular sites on companies' own extensions: onlinesbi.sbi, repost.aws, blog.google and more. Which are DNSSEC-signed? Click any domain for details, or check your own.

6 validating3 signed only19 no DNSSEC0 pending

State Bank of India (.sbi)

onlinesbi.sbi🔒 valid bank.sbi🔒 valid

Amazon and AWS (.aws, .amazon)

repost.awsunsigned community.awsunsigned workshops.awsunsigned skillbuilder.awsunsigned sustainability.amazonunsigned

Google (.google)

blog.google🔒 valid about.google⚠ signed safety.google⚠ signed grow.googleunsigned research.googleunsigned ai.googleunsigned design.google🔒 valid sustainability.google⚠ signed

Other companies and organisations

about.microsoftunsigned home.cernunsigned home.barclays🔒 valid group.bnpparibasunsigned home.kpmgunsigned global.canonunsigned global.toyotaunsigned global.hondaunsigned global.fujitsuunsigned global.brotherunsigned corporate.epsonunsigned global.nttunsigned group.ntt🔒 valid

Checked 26 Oct 2026 by our weekly check.

How we check

Every week we ask Cloudflare's validating resolver (1.1.1.1) for each domain's DNSKEY, DS and A records with DNSSEC turned on. Validating means the resolver set the AD flag. Signed only means the zone has keys but no working chain of trust, usually a missing DS record. No DNSSEC means no keys at all. "Re-check all" runs the same check from your browser now.