See whether two DNS resolvers agree.
Compare published email records after a change. See exactly what Google and Cloudflare return.
Example: an SPF change still returns different answers
Illustrative comparison for yourdomain.example.
| Resolver | Returned record |
|---|---|
| Google Public DNS | v=spf1 include:_spf.google.com -all |
| Cloudflare 1.1.1.1 | v=spf1 include:_spf.google.com include:mailgun.org -all |
One answer includes Mailgun; the other does not. Check the intended record with your DNS provider and retry later. Different caches may update at different times.
What agreement tells you
This checks two public resolver services from your browser at a single point in time. Matching answers do not prove that all caches worldwide have updated. TTL is the cache lifetime returned with the answer, not a countdown to global propagation.
SPF and DMARC show matching TXT records at the exact query name. This comparison does not follow DMARC parent policies. DKIM shows TXT answers at the supplied selector, including keys reached through CNAME records. A network failure is kept separate from NXDOMAIN or a missing TXT record.
Validate the SPF record · Inspect the DMARC policy · Inspect a DKIM key · Check email provider changes