Node.js: node:dns
Use resolve methods for DNS record queries; lookup uses the operating system’s name-resolution facilities.
DNS tool
DNS resolver comparison
Compare answers from Cloudflare and Google Public DNS, including the remaining TTL of each returned record.
Your domain query is sent from our server to both public resolvers. Your browser's IP address is not sent as an EDNS client subnet.
Advertisement
How to interpret the comparison
Matching answers are a useful check after a DNS change. Different answers can reflect cached data, geographic routing, load balancing, or an incomplete change. These are two resolver views from ShowIP's server, not a worldwide propagation test and not a query of your device's configured DNS resolver.
TTL is the remaining cache lifetime reported by each resolver, in seconds. A smaller TTL does not mean a record is wrong. CNAME chains can include several names and TTLs. NXDOMAIN means the queried name does not exist; an empty NOERROR answer means no requested records were returned. SERVFAIL is a resolution failure, which can include DNSSEC validation problems.
The authenticated-data flag reports whether the resolver marked the answer as DNSSEC validated. Its absence does not by itself mean a domain is unsafe.
Try example.com A records · Learn about DNS record types
API references: Google Public DNS and Cloudflare DNS over HTTPS.
DNS libraries
Build the same kind of checks into your code using these documented libraries.
Python: dnspython
A third-party DNS library for record and PTR queries, including TTL values.
Go: net.Resolver
Standard-library queries for common record types and PTR names. These lookup methods do not return TTLs.
Next steps
Related guides and tools
Advertisement