DNSSEC Validator

Checks for DS records at the registrar and DNSKEY records at the domain — the two halves of a working DNSSEC setup — via live DNS queries. This checks presence and structure, not full cryptographic signature validation.