Compare DNS results across four public resolvers and test for NXDOMAIN hijacking - a sign of ISP DNS interception.
Enter a domain to compare DNS results across public resolvers
DNS Privacy Checker tests whether public DNS resolvers agree on your domain and whether NXDOMAIN responses are being hijacked. Queries run against Cloudflare (1.1.1.1), Google (8.8.8.8), NextDNS and Quad9 using DNS-over-HTTPS - an encrypted alternative to plaintext UDP DNS that prevents ISP interception.
NXDOMAIN hijacking is a technique used by some ISPs to redirect failed DNS lookups to ad pages or search engines instead of returning the correct "domain not found" response. The test queries a random subdomain under the IANA-reserved .invalid TLD - which must always return NXDOMAIN per RFC 2606. Any other response indicates the resolver is manipulating DNS responses.
Note: different resolvers returning different IPs for the same domain is normal for CDN-hosted sites - CDNs serve requests from the nearest edge node. This tool only flags inconsistency when some resolvers find a domain and others return NXDOMAIN for the same name.