🌐 DNS Propagation Checker

What you get: one row per domain and record type with the answer from each of 8 public resolvers (Google, Cloudflare, OpenDNS, Quad9, Comodo, Verisign) and an isConsistent flag that tells you whether a DNS change has reached all of them.

Sample output from a real run (2026-10-18, default input: example.com + google.com, A and MX, 4 rows):

domain	recordType	isConsistent	inconsistencies	answer at Google 8.8.8.8
example.com	A	true	–	104.20.23.154, 172.66.147.243
example.com	MX	true	–	0 (null MX)
google.com	A	false	6 different answer sets across 8 resolvers	192.178.155.100, 192.178.155.101, …
google.com	MX	true	–	10 smtp.google.com

That run was 4 result rows × $0.008 = $0.032 (there is no separate start fee).

Open Input (leave defaults → Start) Paid first run ≈ USD 0.008/row (1 domain + A record). Keep reports, exports, and movement options off for the first run. Open Console Input (deep link above) and run this JSON.

{
  "domains": [
    "example.com"
  ],
  "recordTypes": [
    "A"
  ],
  "dryRun": false
}

Paste domain and Start.

Query up to 200 domains across 8 global resolvers to extract structured A, MX, TXT, NS, and SOA records for bulk domain auditing and configuration monitoring. Managing large portfolios of websites requires robust tools to ensure fundamental infrastructure settings remain correct across all regions. This DNS propagation checker automates the process of validating nameserver updates across primary networks like Google (8.8.8.8), Cloudflare (1.1.1.1), and Quad9. Instead of performing tedious manual lookups in your browser or terminal, you can run automated jobs to scrape vital domain details and confirm that updates have successfully propagated worldwide. The tool is highly effective for identifying regional caching delays that might prevent users from accessing the latest deployment. By detecting inconsistencies in TTL values across different DNS servers, operations teams can confidently schedule runs to monitor nameserver changes during large-scale hosting migrations. Collect the exact data you need to verify global availability and maintain domain health. Easily track NS record shifts, validate A record IPs, and extract historical logs of your DNS states over time, ensuring your web properties are consistently accessible to all international traffic and preventing costly routing outages.

Store Quickstart

Start with the Quickstart template (3 domains, A records). For multi-record audits, use Full DNS Audit (A, AAAA, MX, TXT, CNAME, NS).

Use with Apify MCP

Exact actor: taroyamada/dns-propagation-checker

Sample input JSON:

{
  "domains": [
    "example.com"
  ],
  "recordTypes": [
    "A"
  ]
}

Key Features

• 🌐 8 global DNS resolvers — Google, Cloudflare, Quad9, OpenDNS, Cisco Umbrella, Level3, Verisign, Dyn
• 📋 7 record types — A, AAAA, MX, TXT, CNAME, NS, SOA
• ⚠️ Inconsistency detection — Instantly spots resolvers that disagree
• ⏱️ TTL reporting — See caching behavior across resolvers
• 📦 Bulk domains — Check up to 200 domains per run
• 🔑 No API key needed — Uses Node.js built-in dns.Resolver

Use Cases

Who	Why
DNS administrators	Verify DNS changes propagated globally before changing URLs
Hosting migrations	Confirm nameserver switch completed at all resolvers
Email deliverability	Check MX, SPF, DKIM TXT records consistency
Security teams	Detect DNS hijacking via inconsistent resolver responses
DevOps teams	Pre-deploy DNS verification for production cutover

Input

Field	Type	Default	Description
domains	string[]	(required)	Domains to check (max 200)
recordTypes	string[]	["A"]	A, AAAA, MX, TXT, CNAME, NS, SOA

Input Example

{
  "domains": ["example.com", "api.example.com"],
  "recordTypes": ["A", "MX", "TXT"]
}

Input Examples

Example: Single domain global check

{
  "domains": [
    "example.com"
  ],
  "recordTypes": [
    "A",
    "AAAA"
  ]
}

Example: After-change propagation watch

Re-run (or schedule) this until every row shows isConsistent: true.

{
  "domains": [
    "example.com"
  ],
  "recordTypes": [
    "A",
    "MX",
    "TXT"
  ]
}

Example: Multi-domain audit

{
  "domains": [
    "example.com",
    "google.com",
    "github.com"
  ],
  "recordTypes": [
    "A"
  ]
}

Output

One dataset row per domain × record type.

Field	Type	Description
domain	string	Domain queried
recordType	string	DNS record type (A, AAAA, MX, TXT, CNAME, NS, SOA)
resolvers	object[]	One entry per resolver: name, ip, values, ttl, error
isConsistent	boolean	true when all resolvers returned the same answer
inconsistencies	string[]	Why the answers differ, if they do
checkedAt	timestamp	When the check ran

Output Example

Row from the real run above (resolver list shortened to 3 of 8):

{
  "domain": "example.com",
  "recordType": "A",
  "resolvers": [
    {
      "name": "Google",
      "ip": "8.8.8.8",
      "values": [
        "104.20.23.154",
        "172.66.147.243"
      ],
      "ttl": null,
      "error": null
    },
    {
      "name": "Cloudflare",
      "ip": "1.1.1.1",
      "values": [
        "104.20.23.154",
        "172.66.147.243"
      ],
      "ttl": null,
      "error": null
    },
    {
      "name": "Quad9",
      "ip": "9.9.9.9",
      "values": [
        "104.20.23.154",
        "172.66.147.243"
      ],
      "ttl": null,
      "error": null
    }
  ],
  "isConsistent": true,
  "inconsistencies": [],
  "checkedAt": "2026-10-18T11:43:00.446Z"
}

API Usage

Run this actor programmatically using the Apify API. Replace YOUR_API_TOKEN with your token from Apify Console → Settings → Integrations.

cURL

curl -X POST "https://api.apify.com/v2/acts/taroyamada~dns-propagation-checker/run-sync-get-dataset-items?token=YOUR_API_TOKEN" \
  -H "Content-Type: application/json" \
  -d '{ "domains": ["example.com", "api.example.com"], "recordTypes": ["A", "MX", "TXT"] }'

Python

from apify_client import ApifyClient

client = ApifyClient("YOUR_API_TOKEN")
run = client.actor("taroyamada/dns-propagation-checker").call(run_input={
  "domains": ["example.com", "api.example.com"],
  "recordTypes": ["A", "MX", "TXT"]
})

for item in client.dataset(run["defaultDatasetId"]).iterate_items():
    print(item)

JavaScript / Node.js

import { ApifyClient } from 'apify-client';

const client = new ApifyClient({ token: 'YOUR_API_TOKEN' });
const run = await client.actor('taroyamada/dns-propagation-checker').call({
  "domains": ["example.com", "api.example.com"],
  "recordTypes": ["A", "MX", "TXT"]
});

const { items } = await client.dataset(run.defaultDatasetId).listItems();
console.log(items);

Security cluster — Adjacent actors

Most defensive-security audits cover multiple layers on the same domains. The actors below pair naturally with this one:

• dns-dmarc-security-checker — Verify email DNS records (DMARC / SPF / DKIM) propagated globally — audit + propagation pairing.
• ssl-certificate-monitor — Cert renewal propagation check on the same hostnames.
• security-headers-checker — After DNS-side changes are visible, audit HTTP security headers on the same hosts.

Tips & Limitations

• Compare results across resolvers (8.8.8.8, 1.1.1.1, 208.67.222.222) to verify propagation.
• Use after a DNS change to confirm global rollout before pointing production traffic.
• Query MX + TXT records together to audit email configuration in one run.
• Low TTLs (<300s) propagate fast; high TTLs (>3600s) may take hours globally.

FAQ

Why use 8 resolvers?

DNS caching varies by resolver. Checking multiple reveals which have updated after a change.

What's a typical propagation time?

TTL-dependent. Most DNS changes propagate globally within 1-24 hours.

Does it check geographic propagation?

No — all resolvers queried are major public ones. For geographic checks, use specialized tools.

Can I check private DNS?

No, only public DNS. Internal/private domains return NXDOMAIN.

Does this support DNSSEC validation?

Not currently — DNSSEC chain verification is on the roadmap.

Why do different resolvers return different values?

DNS propagation isn't instant. Different resolvers cache records based on TTL.

Related Actors

• Security Headers Checker
• SSL Certificate Monitor
• DNS DMARC Security Checker
• Domain Trust Monitor

Cost

Pay Per Event (current Store prices):

• Result row: $0.008 per row written to the default dataset (no separate start fee)

Example: 1,000 rows = 1,000 × $0.008 = $8.00

No subscription required — you only pay for what you use.

⭐ Was this helpful?

If this actor saved you time, please leave a ★ rating on Apify Store. It takes 10 seconds, helps other developers discover it, and keeps updates free.

Bug report or feature request? Open an issue on the Issues tab of this actor.