DNS propagation checker

Query resolvers around the world and the zone's authoritative nameservers in one go, and see on the map where your change has arrived.

Frequently asked questions

How long does DNS propagation take?

It depends on the TTL of the old record. Resolvers that cached the old answer keep it until its TTL runs out — usually minutes to a few hours, up to 48 hours for long TTLs. Lower the TTL a day before a planned change to speed it up.

Why do resolvers show different answers?

Each resolver caches answers independently. Until the cached copy expires, a resolver keeps returning the old value, so during a change some locations show the new record and others the old one.

What does a different SOA serial between nameservers mean?

The SOA serial is the zone's version number. If the authoritative nameservers report different serials, a secondary server has not synced the latest zone from the primary yet, and some visitors may get outdated answers.

Tools

PingRound-trip time and packet loss from our server. Use TCP mode when a host drops ICMP.TracerouteThe path packets take from our server to the target, hop by hop, with the network (ASN) each router belongs to.SSL / TLS checkCertificate validity, chain, hostname match and which TLS versions the server accepts.Port checkIs a TCP port reachable from the internet? Test a server, or your own connection to confirm port forwarding.HTTP headersFollow the redirect chain, see response headers and timing, and grade the security headers.WHOIS lookupRegistration details for a domain or the owner of an IP range, straight from the registry's WHOIS servers.Mail & blacklistMX, SPF, DMARC and DKIM for a domain, plus a check of its mail servers against public DNS blocklists.Subnet calculatorEnter an address with a prefix or a mask, for example 192.168.10.37/26 or 10.0.0.1 255.255.240.0.What is my IP?This is the address websites see when you connect to them.