Authoritative DNS Lookup
Query a domain's authoritative name servers directly for any record type and compare each server's answer, TTL and response time side by side.
About Authoritative DNS Lookup
The Authoritative DNS Lookup bypasses recursive resolvers and caches entirely. It first discovers the domain's authoritative name servers, then sends your chosen query straight to each of them and lays their answers out together. Because you are talking to the source of truth rather than a cached copy, you see the record exactly as the zone currently defines it, with no propagation delay in the way. This is the fastest way to know what a record really is right now, the moment after you save a change at your DNS provider.
For every name server the tool reports the exact records returned, the TTL attached to each, the server's IP address, and the response time in milliseconds. It also delivers a verdict on the whole delegation: consistent across all name servers when every reachable server serves the same record set, or a warning when their answers differ. That side-by-side view makes it easy to catch a single lagging or misconfigured server that a normal resolver, which would silently pick just one answer, would hide from you.
Any record type is available, including A, AAAA, CNAME, MX, NS, TXT, SOA, SRV, CAA, DNSKEY and DS. Reading the TTL directly from the authoritative server is particularly useful before a planned change, because the TTL tells you how long the current value can remain cached elsewhere, which sets your propagation window. Comparing response times across servers can also reveal a geographically distant or overloaded name server that is slowing resolution for some users.
Think of this as the online equivalent of running dig against each name server with the plus-norecurse behaviour, but presented as a single comparative table. It pairs naturally with the propagation checker: use authoritative lookup to confirm the source of truth is correct and identical everywhere, then use propagation to watch that truth spread through the world's caches. The queries run server-side from our EU infrastructure, so no client software or command line is required.
How to use it
- 1Enter the domain whose authoritative servers you want to query, for example example.eu.
- 2Choose the record type you need, such as A, MX, TXT or NS.
- 3Select Query name servers to discover the delegation and send the query directly to each authoritative server.
- 4Compare the Answer column across servers, noting the TTL on each record and the per-server response time.
- 5Check the consistency badge: consistent across all name servers means the zone agrees everywhere, while a warning means at least one server disagrees and needs attention.
Common use cases
- -Reading the true, uncached value of a record immediately after editing it, without waiting for propagation.
- -Confirming every authoritative name server serves an identical record set after a zone edit or DNSSEC key change.
- -Checking a record's TTL at the source to calculate how long a change will take to propagate before you make it.
- -Isolating a single misbehaving name server whose answer differs from its peers.
- -Comparing per-server response times to identify a slow or distant authoritative server affecting resolution.
Frequently asked questions
- What is an authoritative name server?
- An authoritative name server holds the original, definitive DNS records for a domain, as configured by its owner. Unlike a recursive resolver, which caches answers it fetches from elsewhere, an authoritative server is the source of truth for the zones it serves.
- How is an authoritative lookup different from a normal DNS lookup?
- A normal lookup asks a recursive resolver, which may return a cached, possibly stale answer and only shows one result. An authoritative lookup queries the domain's own name servers directly, bypassing all caches, and compares every server's answer so you see the current record with no propagation delay.
- Why would authoritative name servers give different answers?
- All authoritative servers for a domain should return identical records. Differences usually mean a zone transfer has not completed, so a secondary is still serving an older version, or a server has been misconfigured. This tool flags any such disagreement across the delegation.
- What does the TTL value tell me?
- The TTL (time to live) is how many seconds a resolver may cache a record before refetching it. Read straight from the authoritative server, it tells you how long the current value can persist in caches worldwide, which is effectively your propagation window for a change.
- Is this the same as running dig against a name server?
- Functionally yes. It performs a direct, non-recursive query to each authoritative name server, much like dig @nameserver domain type, but it queries every server in the delegation at once and presents the answers, TTLs and response times in one comparative table, with no command line needed.
- Which record types can I query authoritatively?
- You can query A, AAAA, CNAME, MX, NS, TXT, SOA, SRV, CAA, DNSKEY and DS records directly from a domain's authoritative name servers, covering web, mail, delegation, certificate authorization and DNSSEC records.