Developer tools
DNS Checker
One domain. A worldwide view of its DNS answers.
Resolver map
Select a location for its answer. Locations are approximate; anycast providers may respond from elsewhere. Checks run from our server to each resolver.
Map data: Natural Earth / Highcharts Map Collection
Resolver responses
Filter locations ↓No resolvers match this filter. Clear the country or search filter to show them again.
Choose your locations
Filter the map and select which resolvers to query.
Check a DNS record
Enter a hostname such as example.com, select a record and press Check DNS. Worldwide mode queries the selected public resolvers through the HacksDomain server. Country and text filters select which resolvers to check. Browser mode remains available for direct Google and Cloudflare queries. Unavailable resolvers are reported individually; their results are never substituted with another provider’s answer.
What do the map symbols mean?
A dotted circle identifies a resolver that has not been checked. A teal check means that resolver returned the requested record and matched your expected value, if supplied. An amber exclamation mark can mean no record, a mismatch, a refused query or a connection problem. Select the marker or read the resolver row for the reason.
Why can DNS answers differ?
Resolvers can retain older answers until a record’s time to live expires. DNSSEC validation, filtering and location-dependent records can also change the response. Even a check across many resolvers cannot confirm that every cache worldwide has updated. Server location labels are approximate; anycast addresses may be answered from a different location.
Which record type should I select?
A returns IPv4 addresses; AAAA returns IPv6 addresses. MX identifies mail servers, NS identifies name servers, and TXT contains text such as verification records. CNAME, PTR, SRV, SOA, CAA, DS and DNSKEY are also available when the queried name and provider support them.
What does CD Flag mean?
The Checking Disabled flag asks resolvers not to reject an answer for DNSSEC validation failure. It does not bypass the resolver’s cache. Browser mode also includes a separate Google query with this flag so you can compare it with the validating response.
Are my lookups saved or shared?
Worldwide checks send the hostname and record type to our server, which queries the selected resolver addresses. Browser checks contact Google and Cloudflare directly. The endpoint does not store query names or answers, and these values are excluded from analytics. Short-lived hashed client identifiers are used for rate limiting. Sharing creates a URL containing the domain and expected value; inspect it before sending. Map exports also include the queried domain when a lookup has run.
Published by Hazoncorp Solution LLP. Report an error.