DNS Checker & Propagation
Check what the internet sees for any domain: every common record, whether a change has spread to the big public resolvers, the full delegation path and DNSSEC.
- 6 public resolvers
- Authoritative comparison
- Live, uncached checks
What this checks
- Full lookup: A, AAAA, CNAME, MX, NS, TXT, SOA and CAA records, a health report (nameserver redundancy, zone serials, www setup, SPF, DMARC, CAA, DNSSEC) and a comparison of the public answer with the authoritative one.
- Propagation: asks Google, Cloudflare, Quad9, OpenDNS, Control D and AdGuard, plus each of the domain's own nameservers, so you can see whether a change has spread.
- Trace: follows the delegation from a root server through the TLD to the authoritative server, like
dig +trace. - DNSSEC: checks for DS and DNSKEY records and whether validating resolvers accept the answers.
Why changes take time
When you change a DNS record, your DNS host updates it straight away, but resolvers around the world keep their cached copy until its TTL (time to live) runs out. A record with a TTL of 3600 can take up to an hour to change everywhere. The propagation view shows the remaining TTL each resolver reports, so you can see how long is left.
If the authoritative nameservers already give the new answer but public resolvers don't, just wait. If the nameservers themselves give the old answer, the change hasn't been saved at your DNS host.