Queries go over encrypted DNS (DoH). Pick Compare both to spot propagation differences between resolvers.
Checks nameservers, website records, SPF, DMARC, resolver agreement — and DKIM if you know your selector (Microsoft 365 uses selector1, Google Workspace uses google).
How this works: your browser sends real encrypted DNS queries (DNS-over-HTTPS) to each resolver and measures the round trip from your device, on your network — so results reflect the node nearest to you, not to our server. Big providers like Cloudflare, Google and Quad9 are anycast: the same IP answers from hundreds of cities, which is why they appear under "Global." Regional resolvers are operated from a home region and tend to shine when you're nearby. Results vary with Wi-Fi, VPNs and network load; run the race a couple of times for a fair picture.