Know what your DNS is telling you.
DNS translates domain names into the records that connect websites, email, and other services. This checker compares what different resolvers return at the time of a lookup.
What does “propagation” mean?
When you change DNS, resolvers may continue serving cached answers until their time to live (TTL) expires. A lookup is a sample of selected resolvers, not proof that every device worldwide has the new answer.
Why can answers differ?
Different cache ages, location-based routing, load balancing, and resolver policies can all cause different answers. Agreement is the share of resolved responses in the largest matching answer group. Unavailable responses and empty answers are excluded from that percentage and remain visible in the results.
Are these checks geographic?
The built-in Cloudflare and Google endpoints use anycast and are contacted from this website’s hosting server. They are not separate country measurements. Regional probes run on remote hosts chosen by the administrator; their city labels and coordinates are administrator-provided.
What does DNSSEC validated mean?
The public resolver reported the AD (authenticated data) flag. An absent flag does not by itself mean a domain is insecure or broken. The optional PHP regional probe does not expose DNSSEC validation.
Choose the right record
| Type | What it tells you |
|---|---|
| A | IPv4 address for a website or host. |
| AAAA | IPv6 address for a website or host. |
| CNAME | Alias pointing to another hostname. |
| MX | Mail delivery servers, including priority. |
| NS | Authoritative nameservers for a domain. |
| PTR | Reverse lookup from an IP address to a hostname. Enter an IPv4 or IPv6 address directly. |
| SOA | Zone authority, serial number, and timing settings. |
| SRV | Service target, port, priority, and weight. Enter a full service name, such as _sip._tcp.example.com. |
| TXT | Text records for SPF, DKIM, DMARC, and verification. |
| CAA | Certificate authorities allowed to issue certificates. |
A practical migration checklist
- Record your existing DNS values and take a backup at your DNS provider.
- Lower relevant TTLs ahead of the migration and wait for the previous TTL to pass.
- Configure the new hosting server, SSL certificate, and mail service before changing DNS.
- Update the records at the authoritative DNS provider.
- Check A, AAAA, CNAME, MX, NS, and relevant TXT records separately.
- Keep the previous service available while old cached records remain in use.
Changing a record in this checker is not possible: it reads DNS only. Edit DNS through your domain provider or authoritative DNS hosting control panel.
Understanding errors
- No records: no answer of the requested type was returned. Other record types may still exist.
- Domain not found: the public resolver returned NXDOMAIN.
- SERVFAIL: resolution failed. DNSSEC or authoritative-server issues are possible causes.
- Unavailable: an HTTP, TLS, network, or timeout problem prevented a DNS response.
Regional PHP probes cannot distinguish NXDOMAIN from other empty responses through the system DNS API; they report “No records.”
Technical references
Provider integrations follow the Google Public DNS JSON API and Cloudflare DNS JSON documentation.