See whether your SOA record change has spread: 12 public resolvers, queried live, side by side.
Map key: each dot is the country where a resolver's operator is headquartered (number = resolvers), coloured by result. It does not show where the query ran — most of these resolvers are anycast networks with servers in many cities.
These are 12 large public resolvers, queried live over encrypted DNS-over-HTTPS from our servers. Most are anycast networks with many locations, so we show which resolver answered — not a city. Two (CIRA Canadian Shield) are run by the organization that operates .ca. Your ISP's resolver may still show an older answer until its cache expires.
The SOA (Start of Authority) record holds a zone's primary nameserver, the admin contact, and a serial number that increases each time the zone changes. It is the quickest way to tell whether resolvers have the latest version of your zone.
Type your domain in the box above, keep SOA selected and press Search. We ask 12 public DNS resolvers — including two run by CIRA Canadian Shield — at the same moment and show each answer side by side.
Compare the serial number on every row. If all rows show the same serial, they are on the same zone version. A lower serial on some rows means they are serving an older copy.
A version counter for the zone, often in date format such as 2026100501. It rises on every change.
If the same serial appears everywhere, every resolver has the current zone.
Some resolvers hold an older cached SOA until it expires.