VSPIC
DNS Tools

DNS Change Verification — Post-Change Zone Snapshot

Capture post-change DNS snapshot with queriedAt — diff against your pre-change baseline export

How to Use This Tool

  1. Enter the domain whose post-change DNS you want to verify.
  2. dns-history queries A, AAAA, MX, TXT, NS, CNAME, and other returned types.
  3. Results include records, byType, summary, and queriedAt ISO timestamp.
  4. note clarifies snapshot scope — not passive DNS archives.
  5. Export JSON and diff against your pre-change baseline file.
  6. Re-run hourly during the change window until stable match.

About This Tool

Change windows close when operators believe DNS updated everywhere, yet verification often stops at a single dig from one laptop. VSPIC DNS change verification tool runs dns-history with lookupAllDnsRecords after you apply edits, returning records, byType, summary, nameservers, queriedAt, and note that this captures current public DNS at one resolver path — not automatic proof every global cache agrees.

Export JSON immediately after the change, diff against the pre-change baseline you saved from the same tool, and attach both files to the ticket. Propagation completeness still requires TTL-aware re-sampling — we are explicit about snapshot honesty versus fake propagation maps.

Common use cases

  • •View all DNS records of a domain after migration
  • •Confirm DNS records after domain changes
  • •Test for DNS leaks when using a VPN
  • •Debug email delivery with MX and TXT records

Why use VSPIC for ?

  • Full multi-record snapshot for holistic change verification.
  • queriedAt anchors post-change evidence on tickets.
  • Structured JSON ideal for automated diff scripts.
  • Honest note — no misleading global propagation UI.
  • Same dns-history API as other snapshot tools.
  • Free verification sample with no account required.

Change verification versus propagation theater

True propagation dashboards poll dozens of resolvers. dns-history returns one authoritative public snapshot with queriedAt — enough to verify your publish succeeded on the path we query and to diff against your saved pre-change export.

Honest verification combines post-change snapshot, timed re-samples, and optional manual checks on other resolvers you trust.

Pre-change and post-change baseline discipline

Before any DNS edit: run this tool and archive JSON with domain and queriedAt in the filename. Apply change. Run again. Script diff on records, byType, and summary fields relevant to your change type.

Attach both exports permanently to change tickets for SOC2 and ISO evidence.

What lookupAllDnsRecords returns for verification

Aggregated A, AAAA, MX, TXT, NS, CNAME, SOA, SRV, and CAA when returned, plus _dmarc lookup. summary flags SPF, DMARC, mail, and IP targets for quick pass-fail on common change types.

byType grouping simplifies diffing only MX or only TXT when the change was mail-specific.

TTL-aware re-sampling during change windows

One clean post-change snapshot proves publication to our resolver path — not instant global cache flush. Re-sample hourly until exports match intended state and TTL multiples elapsed.

Pair with DNS TTL checker on affected names when estimating external cache persistence.

Record-type-specific verification tips

A/AAAA cutovers: diff summary.ipv4 and summary.ipv6 arrays. MX migrations: diff byType.MX priorities and hosts. Authentication: diff TXT SPF strings and emailAuth blocks. NS moves: diff nameservers and summary alongside dns-trace delegation steps.

CNAME flips: confirm summary.cnameTarget matches intended alias target.

Relationship to dns-update-checker and propagation pages

dns-update-checker emphasizes ongoing drift detection language; propagation siblings emphasize record-type SEO. All use dns-history with identical JSON shape — choose page title matching workflow vocabulary.

dns-change-verification-tool button label Verify Changes reflects post-change ticket workflows.

Automated verification in CI/CD

After Terraform or DNS provider apply: GET /ip-tools/api/extended?action=dns-history&domain=example.com. Fail pipeline when diff against checked-in baseline exceeds approved scope.

queriedAt in API response timestamps the verification instant for audit logs.

When verification fails unexpectedly

Mismatch may mean incomplete publish, wrong DNS host edited, parent delegation still pointing at old NS, or split-horizon difference. Run dns-trace for delegation context and confirm authoritative panel matches snapshot.

Do not close tickets on first mismatch — re-sample after provider sync delays.

Privacy and authorization

Verify only domains you own or administer. Snapshots copy public DNS including authentication TXT — treat exports as sensitive.

We do not permanently store your verification queries.

Important notes & limitations

  • NOT worldwide recursive resolver polling.
  • Does not store baselines — you save pre-change exports yourself.
  • Single public resolver path — split-horizon DNS may differ.
  • Cannot prove all external caches updated from one scan.
  • Not AXFR — hidden authoritative-only records may be absent.
  • TXT exports may contain verification tokens — handle securely.

Frequently Asked Questions

Yes. VSPIC offers this DNS change verification tool at no cost with no account required. Results load in real time.

We do not permanently store your queries on our servers. Some tools run entirely in your browser; others fetch public data for the request only.

Yes. Open the page in any modern phone or tablet browser. Results work on Wi‑Fi and mobile data.

No. It returns a current snapshot from one public lookup path. Combine timed re-samples, TTL awareness, and optional manual resolver checks.

dns-history with a domain parameter.

Yes for meaningful diff verification. Save baseline JSON before editing DNS, then compare post-change exports.

Hourly during active cutovers, or more frequently when TTL is lowered for faster cache expiry.

Snapshot includes NS in export. Pair with dns-trace for step-by-step delegation walk during registrar migrations.

Same dns-history backend. This page emphasizes post-change verification against baselines; dns-update-checker emphasizes ongoing update monitoring language.

Next step for your check

Continue with dns update checker on VSPIC.

DNS Update Checker

Related Tools

Explore more free VSPIC tools for IP, DNS, security, and network diagnostics.

Browse all toolsComparison guides

Trusted by Users Who Value Privacy

Always Free

No premium plan ever

100% Private

Files processed in browser

Instant Results

Convert in seconds

Works Everywhere

Any device, any OS