After you change a DNS record, resolvers around the internet pick it up at different times. Enter a domain and record type to query Cloudflare, Google Public DNS, and Quad9 and compare what each one currently returns. The lookups run from your browser directly to each resolver — Emberix never sees the domain you check.
Different answers are usually normal. For a few minutes to a few hours after a change, resolvers legitimately disagree while caches expire. That is propagation, not a security problem. If answers still disagree long after the record's TTL, look closer.
How to read the result
- Resolvers agree — every reachable resolver returned the same values. The change has propagated to these three.
- Propagation variance — reachable resolvers returned different values, TTLs, or DNSSEC validation state. Expected right after a change; re-check later.
- Resolver failure — at least one resolver could not be reached from your browser or returned an error. The others still agreed.
- Indeterminate — fewer than two resolvers gave a usable answer, so there is nothing to compare.
Privacy and handling
This tool is client-side JavaScript. Each check is sent only to the three resolver providers named above, over their public DNS-over-HTTPS endpoints, and carries only the domain and record type you enter. Emberix does not receive, log, or store your queries. Use it as an occasional diagnostic in line with each provider's current privacy policy and acceptable-use terms — it is not a bulk-monitoring or resolver-proxy service.