Answers come from Cloudflare's public resolver (1.1.1.1) over DNS-over-HTTPS, asked by our server. Tick "compare" to also ask Google (8.8.8.8): if they disagree, a change may still be spreading. Nothing is logged.