Free DNS Records & Propagation Checker
Look up every DNS record type for any domain against Google and Cloudflare side by side - so you can spot propagation delays and confirm DNSSEC in one pass.
Every record type, two resolvers, one view
DNS is the address book of the internet, and a single wrong record can silently break your website, your email, or your SSL certificate. This checker looks up every common record type - A and AAAA (where your domain points), MX (who handles your mail), TXT (SPF, DKIM, verification tokens), NS (your nameservers), CNAME, CAA (which certificate authorities may issue for you), and SOA - in a single pass. Crucially, it queries two independent public resolvers, Google and Cloudflare, at the same time and compares their answers, so you see not just what your DNS says but whether the whole internet agrees on it yet.
The propagation check that saves you guessing
When you change a DNS record, the update does not reach every resolver instantly - it "propagates" over minutes to hours as caches expire. During that window, some visitors see the old value and some see the new one, which is maddening to debug. By comparing Google and Cloudflare directly, this tool gives you a fast signal: if they agree, your change has propagated widely and you can stop waiting; if they differ, it is still rolling out and you should re-check shortly. That single comparison replaces the usual cycle of clearing caches and refreshing in hope.
DNSSEC and a copyable zone summary
The checker also reports whether DNSSEC is enabled - the cryptographic signing that lets resolvers verify your records were not tampered with in transit - by reading the authenticated-data flag from the resolver. And it gives you a clean, copyable summary of the whole zone in a familiar records format, handy for documentation, migrations, or handing to a developer. Everything runs in your browser against the resolvers' public APIs; we never see or store the domains you check.
Frequently Asked Questions
It depends on the record's TTL (time to live) - the caching duration you or your DNS provider set. Common TTLs are 300 seconds (5 minutes) to 86400 seconds (24 hours). Most changes are widely visible within an hour, but a high TTL set before the change can make it linger up to a day. Lowering the TTL a day before a planned change speeds up the eventual switch.
Almost always because a recent change is still propagating - one resolver has cached the new value and the other still holds the old one until its cache expires. Occasionally it reflects a genuinely inconsistent setup (for example, split-horizon DNS or a half-finished migration). Either way, a mismatch is a signal to wait and re-check; a match means both major resolvers agree.
At minimum: an A (or AAAA) record pointing your domain to your server, NS records for your nameservers, and - if you send email - MX records plus TXT records for SPF, DKIM, and DMARC. A CAA record (restricting which certificate authorities can issue SSL for you) and DNSSEC are recommended security hardening. Missing email TXT records is the most common cause of messages landing in spam.
DNSSEC adds cryptographic signatures to your DNS so resolvers can verify the answers genuinely came from you and were not altered in transit, defending against cache-poisoning and spoofing attacks. It is a best practice, especially for domains handling email, payments, or logins. It is not mandatory and many sites run fine without it, but enabling it through your registrar or DNS provider is a worthwhile step.
No - this checks DNS records (where your domain points and how it is configured), which change often. A WHOIS/RDAP check looks at registration data (who owns the domain, when it was registered, when it expires), which changes rarely. For registration details, use our Domain Age & Registration Checker; for how the domain is wired up right now, use this DNS checker.
DNS or Hosting Giving You Trouble?
Misconfigured DNS breaks email, sites, and SSL in ways that are hard to trace. We set up and maintain reliable DNS and hosting so it just works.