Start your 7-day free trial, card not charged until it ends
Browse all topics

DNS propagation checker

Monitoring · Last updated 11 September 2026

You have changed an A record or moved nameservers. It works for you, but a colleague still sees the old site. The propagation checker asks twenty public resolvers around the world what they are currently serving, so you can see exactly who has the new value and who has not.

What it is

A one-off lookup tool. You give it a domain and a record type, and it queries twenty public DNS resolvers at the same time and shows what each one answers. It works out the most common answer, then flags every resolver that disagrees or did not reply.
Read more
The twenty resolvers are a fixed, curated list spread across the Americas, Europe, Asia, Oceania and Africa, and include Cloudflare, Google, Quad9, OpenDNS, Verisign, Yandex, DNSPod and AdGuard. Eight record types are supported: A, AAAA, CNAME, MX, NS, TXT, SOA and CAA. Every query is fired in parallel, so the whole check takes about as long as the slowest resolver rather than the sum of all of them.

Why it matters

A DNS change does not reach the whole internet at once. Old values stay cached for as long as the previous record told resolvers to keep them. This tells you whether a change has actually landed, and where it has not, instead of guessing from your own machine.
Read more
It is also the quickest way to settle "it works for me but not for them". If one resolver is still handing out the old address, the people using it will keep landing on the old server until its cache expires, however correct your records now are.

This is not DNS monitoring

This tool is a live lookup you run by hand. It records nothing and alerts nobody. Watching a domain and being told when its records change is a different feature: see DNS monitoring.

Running a check

  1. 1
    Open DNS propagation. It is in the sidebar under Tools.
  2. 2
    Type the domain. A full address works too: anything before the host name and anything after it is stripped, so https://example.com/page is read as example.com.
  3. 3
    Pick the record type. It starts on A, which is the right choice for "has my site moved yet".
  4. 4
    Press Check propagation. The results appear within a few seconds.

Reading the result

The top of the result gives three counts and the most common answer:

  • Match. Resolvers that replied with exactly the most common answer.
  • Mismatch. Resolvers that replied with something different. This is the stale cache you are hunting for, and each mismatching value is highlighted in the list below.
  • Timeout. Resolvers that gave no usable answer at all. This bucket covers three different cases: the resolver timed out, the query failed, or it replied with nothing.

Below the counts is the full list, one row per resolver, with its name, location, address, how long it took in milliseconds, and what it returned. A resolver that returned nothing shows timed out, no answer or error in place of a value, so you can tell an unreachable resolver from one that answered "this record does not exist".

How the most common answer is chosen

Only resolvers that returned something are counted. Their answers are compared as whole sets, so two values in a different order still count as the same answer. The set returned by the most resolvers wins. If nothing answered, you get a note saying the record may not exist yet rather than an empty result.

When resolvers time out

Each resolver gets two seconds to answer, and the whole check gives up after four. A handful of timeouts on any given run is normal: these are public resolvers on the open internet, some of them rate-limit, and a few are simply slow to reach from our servers. Treat timeouts as no information rather than as a problem with your domain. What matters is the split between match and mismatch among the resolvers that did reply.

What it cannot tell you

  • How much longer. It reports the state right now. It does not predict when a stale resolver will refresh, because that depends on the cached lifetime of the old record, not the new one.
  • Whether the record is correct. It reports what resolvers are serving, not whether that value is the one you meant to publish.
  • Your visitors' own resolvers. The list is twenty well-known public resolvers. Most people use whatever their internet provider gives them, and those are not on the list.

Who can open it

The in-dashboard version is available on Starter, Pro and Agency. Free accounts are held to their own one-page dashboard and cannot open it. If you are on the free plan, use the public checker instead, which works the same way.

There is also a public version at /tools/dns-propagation-checker, open to anyone. It asks for an email address before it will run a check, and limits visitors who are not signed in to twenty checks a day. The dashboard version does neither: no email, no daily limit.

Where to find this

Good to know

  • Running a check costs nothing and uses no credits.
  • Nothing is saved. Re-run the check to see the current picture; there is no history.
  • A mismatch is usually a cache that has not expired yet, not a mistake. Re-check in an hour before changing anything.
  • To be told automatically when a record changes, switch on DNS monitoring for that site instead.
Available on:StarterProAgency

Was this guide helpful?

If anything is unclear or missing, tell us and we will improve it.

Contact support