webupcheck+
DNS RECORDS · TWO RESOLVERS

Find the answer.
At the DNS layer.

Compare what Cloudflare and Google return for a public hostname. Records, TTLs and response codes, with the limits in view.

Hostname only. For TXT records, names such as _dmarc.example.com are supported.

A comparison, with context.

Different can be normal.

CDNs, caches and timing can produce different answers. Remaining TTLs and answer order are excluded from our comparison. Matching answers do not prove worldwide propagation.

No record is not a failed resolver.

NXDOMAIN means the resolver reports that the name does not exist. NOERROR with no requested records is a different result. SERVFAIL and resolver unavailability are shown separately.

DNSSEC, accurately labelled.

We show each resolver’s authenticated-data flag. A missing flag does not establish broken DNSSEC. This is not an independent signature-chain audit.

For your agent, too.

Call check_dns({"name":"example.com","type":"MX"}) through our keyless MCP or REST API. Only two fixed public resolvers are queried; answers are never followed as connection targets. Results may be cached for 30 seconds. DNS answers can vary by network and resolver cache.