DNS resolver comparison

How to interpret the comparison

Matching answers are a useful check after a DNS change. Different answers can reflect cached data, geographic routing, load balancing, or an incomplete change. These are two resolver views from ShowIP's server, not a worldwide propagation test and not a query of your device's configured DNS resolver.

TTL is the remaining cache lifetime reported by each resolver, in seconds. A smaller TTL does not mean a record is wrong. CNAME chains can include several names and TTLs. NXDOMAIN means the queried name does not exist; an empty NOERROR answer means no requested records were returned. SERVFAIL is a resolution failure, which can include DNSSEC validation problems.

The authenticated-data flag reports whether the resolver marked the answer as DNSSEC validated. Its absence does not by itself mean a domain is unsafe.

Try example.com A records · Learn about DNS record types

API references: Google Public DNS and Cloudflare DNS over HTTPS.