NetworkAI
  • MonitoringCertificate & Domain MonitorDaily checks of TLS certificates, domain registration and DNS, with alerts when a renewal fails.
  • AssessmentSecurity AssessmentA passive security report for a domain you own: TLS, DNS, email authentication, headers and registration.
Free tools
Start hereDomain Health CheckSSL, DNS, email authentication, security headers and expiry in one scored report.Run a health check →
Domain
  • Bulk Domain Expiry Checker
  • RDAP Domain Lookup
  • WHOIS Lookup
SSL / TLS
  • SSL Certificate Checker
  • Bulk SSL Expiry Checker
  • 47-Day Certificate Lifetime Calculator
  • Certificate Lifetime Readiness
  • Post-Quantum TLS Checker
DNS
  • DNS Lookup
  • MX Lookup
  • CAA Record Checker
  • DNS Propagation Checker
  • TXT Record Lookup
  • NS Lookup
  • CNAME Lookup
  • Reverse DNS Lookup
Email authentication
  • SPF Record Checker
  • SPF Record Generator
  • DMARC Record Checker
  • DMARC Record Generator
  • DKIM Record Checker
  • Email Sender Requirements Checker
Website security
  • Security Headers Checker
Network & IP
  • What Is My IP Address
  • Subnet Calculator
All free tools →
PricingDocsGuides
Log inStart free
  • MonitoringCertificate & Domain MonitorDaily checks of TLS certificates, domain registration and DNS, with alerts when a renewal fails.
  • AssessmentSecurity AssessmentA passive security report for a domain you own: TLS, DNS, email authentication, headers and registration.
Free tools
Start hereDomain Health Check
Domain
  • Bulk Domain Expiry Checker
  • RDAP Domain Lookup
  • WHOIS Lookup
SSL / TLS
  • SSL Certificate Checker
  • Bulk SSL Expiry Checker
  • 47-Day Certificate Lifetime Calculator
  • Certificate Lifetime Readiness
  • Post-Quantum TLS Checker
DNS
  • DNS Lookup
  • MX Lookup
  • CAA Record Checker
  • DNS Propagation Checker
  • TXT Record Lookup
  • NS Lookup
  • CNAME Lookup
  • Reverse DNS Lookup
Email authentication
  • SPF Record Checker
  • SPF Record Generator
  • DMARC Record Checker
  • DMARC Record Generator
  • DKIM Record Checker
  • Email Sender Requirements Checker
Website security
  • Security Headers Checker
Network & IP
  • What Is My IP Address
  • Subnet Calculator
All free tools →
PricingDocsGuides
Start freeLog in
  1. Home
  2. /Free tools
  3. /DNS
  4. /DNS Propagation Checker
Free tool · No signup

DNS Propagation Checker

Enter a domain and pick a record type to see, side by side, whether 20 public DNS resolvers across North America, Europe and Asia already return your new value — so you know if a DNS change has gone live or is still cached somewhere.

What is DNS propagation?

DNS propagation is the time it takes for a changed DNS record to be seen everywhere. Your authoritative name servers update at once, but recursive resolvers around the world keep the old answer cached until its TTL (time to live) runs out. Propagation is complete when every cache has expired and fetched the new value.

How this DNS propagation check works

The tool sends the same query — your name and record type — to 20 independent public resolvers at the same moment, over DNS-over-HTTPS, and lists each answer with its remaining TTL. The most common answer is shown at the top; resolvers that return something else are highlighted.

OperatorHome country
Cloudflare, Google Public DNS, Cisco OpenDNS, NextDNS, Hurricane Electric, Wikimedia DNSUnited States
Quad9, Digitale GesellschaftSwitzerland
Control D, CIRA Canadian ShieldCanada
Mullvad (Sweden), DNS.SB (Germany), Applied Privacy (Austria), RESTENA (Luxembourg), LibreDNS (Greece), AdGuard (Cyprus), DNS4EU (EU)Europe
IIJ (Japan), Alibaba and Tencent DNSPod (China)Asia
Most of these services are anycast: your query reaches the operator's site nearest our server, not a server in the listed country. What differs between them is their cache — and stale caches are exactly what "not propagated yet" means.

How long does DNS propagation take?

As long as the old record's TTL. If the record you replaced had a TTL of 3600, resolvers that cached it just before your change keep it for up to an hour. A TTL of 86400 means up to a day. The often-quoted "24 to 48 hours" comes from those long default TTLs, not from anything inherent in DNS.

ChangeTypical wait
A / AAAA / CNAME with TTL 300About 5 minutes
MX or TXT with TTL 3600Up to 1 hour
Name servers changed at the registrarUp to 48 hours — the TLD's NS records usually carry a 1–2 day TTL
A brand-new record that never existedUsually minutes, but negative caching (the SOA minimum) can hold "no such record" for up to an hour

To make a planned change propagate fast: lower the TTL to 300 a day before the change, make the change, check here, then raise the TTL again.

Reading the results

  • All resolvers agree — the change is live everywhere this tool can see.
  • Some return the old value — those caches have not expired yet. Their TTL column tells you roughly how long they will keep it.
  • No record / name does not exist — either the record has not been created, the name is misspelled (www vs the bare domain), or the resolver cached a "no such record" answer from before you created it.
  • No answer — a timeout or error talking to that resolver. Usually temporary and unrelated to your DNS.

If every resolver still shows the old value long after the TTL, the change probably never reached your authoritative servers: check that you edited the zone at the provider your name servers point to. A DNS lookup shows all record types for the name at once.

Flushing your own DNS cache

If this tool shows the new value but your computer still gets the old one, the stale copy is local. Flush it:

Flush local DNS cache
# Windows
ipconfig /flushdns

# macOS
sudo dscacheutil -flushcache; sudo killall -HUP mDNSResponder

# Linux (systemd-resolved)
resolvectl flush-caches

# Chrome's own cache: chrome://net-internals/#dns → Clear host cache

Your router and your ISP's resolver have caches too, which you cannot flush. Switching your device to a public resolver such as 1.1.1.1 avoids waiting on the ISP's cache.

Know when a record changes without checking

A propagation check answers "has my change landed". The opposite question — "did a record change when nobody meant it to?" — matters just as much: a hijacked registrar account or a mistaken edit can redirect your site or mail silently. NetworkAI's monitor checks your domains' DNS, certificates and registration every day and alerts you when something breaks. For mail changes, confirm the result with the MX lookup and TXT record lookup.

Frequently asked questions

Why do different DNS servers show different results?

+

Each resolver cached the record at a different moment and keeps it until the TTL expires. Until every cache has refreshed, some return the old value and some the new one. That gap is DNS propagation, and it ends on its own once the old TTL has passed.

Can I speed up DNS propagation?

+

Not after the change — you cannot clear other people's caches. Before a planned change, lower the record's TTL to 300 seconds at least one old-TTL period in advance. Then the switch itself reaches everyone within about five minutes.

Why does it say my new record does not exist?

+

Check the exact name and type first. If they are right, the resolver probably cached a "no such record" answer from before you created it. That negative answer is kept for the SOA minimum TTL, often up to an hour, and then clears.

How long do name server changes take to propagate?

+

Up to 48 hours. The NS records for your domain live in the top-level domain's zone, which typically uses TTLs of one to two days, and you cannot lower them. Keep the old DNS provider's zone working until the move is complete everywhere.

Does this tool check DNS from different countries?

+

It asks resolvers run by operators in 12 countries and the EU, but most are anycast, so the answer comes from their site nearest our server. It shows whether independent resolver caches have the new value, which is the practical meaning of propagation, rather than routing from each country.

Is the result cached?

+

Only for 30 seconds, so you can re-run the check every minute or so to watch a change land. Each run queries every resolver live over DNS-over-HTTPS and shows the TTL each one still holds.

Related tools

All DNS tools →
  • DNS Lookup

    A, AAAA, CNAME, MX, NS, TXT, CAA and SOA records in one view.

  • NS Lookup

    A domain's name servers, their IP addresses, and whether each one answers with the same zone.

  • CNAME Lookup

    Follow a CNAME chain hop by hop to the final hostname and its IP addresses.

  • TXT Record Lookup

    Every TXT record on a domain, with SPF, DMARC and verification tokens labelled.

  • MX Lookup

    Mail servers in priority order, what they resolve to, and the provider behind them.

Written and maintained by the NetworkAI team, built by a working network security engineer · Last updated November 2, 2026

NetworkAI

Renewal-failure alerts for TLS certificates and domain registrations.

Product

  • Certificate monitor
  • Pricing
  • Log in
  • Start free

Free tools

  • Domain Health Check
  • SSL Certificate Checker
  • SPF Record Checker
  • DMARC Record Checker
  • Security Headers Checker
  • DNS Lookup
  • All free tools →

Tool categories

  • Domain
  • SSL / TLS
  • DNS
  • Email authentication
  • Website security
  • Network & IP

Resources

  • Documentation
  • Slack & webhook alerts
  • Guides
  • All comparisons
  • NetworkAI vs UptimeRobot
© 2026 NetworkAI · Built by a network security engineer
PrivacyTerms
EspañolالعربيةDeutsch