Resolve DNS records for any domain. Compare across resolvers. Check mail authentication.
Resolve DNS records for any domain using DNS-over-HTTPS. Results come from Cloudflare, Google, and Quad9 resolvers, so you see what the internet actually sees. Supports A, AAAA, MX, CNAME, TXT, NS, SOA, and CAA records, plus SPF, DKIM, and DMARC mail authentication checks.
DNS propagation typically takes anywhere from a few minutes to 48 hours, depending on TTL values set on the records. Most changes propagate within 1-4 hours. You can use this tool to check multiple resolvers and see if your changes have reached them yet.
This tool queries records via DNS-over-HTTPS using Cloudflare (1.1.1.1), Google (8.8.8.8), and Quad9 (9.9.9.9) resolvers, plus authoritative nameservers for propagation checks.
A missing SPF record means your domain has no published policy for which mail servers are authorized to send email on its behalf. This makes your domain more vulnerable to email spoofing and can cause legitimate email to be marked as spam.
Different resolvers may cache records at different times. If you recently changed a record, some resolvers may still serve the old cached value until the TTL expires. Geographic differences in anycast routing can also cause variation.
A CAA (Certificate Authority Authorization) record specifies which certificate authorities are allowed to issue certificates for your domain. It helps prevent unauthorized certificate issuance.