Skip to main content
KX Toolkit

SOA Record Lookup

SOA stands for Start of Authority. Every DNS zone has exactly one SOA record, which holds metadata about the zone itself rather than any host. It names the primary nameserver, the email address of the zone administrator, the current serial number, and several timer values that se

Domain Tools

SOA stands for Start of Authority. Every DNS zone has exactly one SOA record, which holds metadata about the zone itself rather than any host. It names the primary nameserver, the email address of the zone administrator, the current serial number, and several timer values that se

This free SOA Record Lookup from KX Toolkit is part of our all-in-one online toolkit. It runs entirely in your browser, so your data never leaves your device for client-side operations. 100% free, forever - no paywall, no credit card, no trial.

How to use the SOA Record Lookup

  1. Enter the domain or IP address.
  2. Pick the record type if the tool supports filtering.
  3. Run the lookup - most checks return in under a second.
  4. Copy the records for your DNS migration or audit notes.

What you can do with the SOA Record Lookup

  • Audit DNS before a domain migration.
  • Verify SSL certificate expiry and chain.
  • Check domain age and history before buying.
  • Diagnose email-delivery issues (SPF, DKIM, DMARC).

Why use KX Toolkit's SOA Record Lookup

  • Browser-based: Works on Windows, macOS, Linux, iOS and Android - no install, no extension.
  • Privacy-first: Client-side tools never upload your data; server-side tools delete files right after processing.
  • Mobile-friendly: Full feature parity on phones and tablets - not a stripped-down view.
  • Fast: Optimised for instant feedback. No artificial waiting screens, no email-gated downloads.
  • One hub for everything: 300+ tools across SEO, text, image, PDF, code, color, calculators and more - skip switching between sites.

Tips for the best results

DNS changes propagate at different speeds across resolvers - run the same check from Google (8.8.8.8) and Cloudflare (1.1.1.1) before declaring a problem.

Related Domain Tools

If you find this tool useful, explore the full Domain Tools collection or browse our complete tool directory. KX Toolkit is built for marketers, developers, designers, students and anyone who needs a quick utility without signing up for yet another SaaS.

What is an SOA record?
SOA stands for Start of Authority. Every DNS zone has exactly one SOA record, which holds metadata about the zone itself rather than any host. It names the primary nameserver, the email address of the zone administrator, the current serial number, and several timer values that secondary servers use to decide when to refresh, retry, and expire the data. Reading the SOA is essential when diagnosing replication or staleness issues.
How do I read the email address inside an SOA record?
The admin contact in an SOA replaces the @ sign with a dot, so admin.example.com really means admin@example.com. If the local part contains a literal dot, it is escaped with a backslash. Mail to this address should reach whoever maintains the zone. Many tools show the human-readable form automatically, but the raw record uses the dotted notation defined in the DNS standard.
What does the serial number tell me?
The SOA serial is a counter that secondary nameservers compare against their own copy of the zone. When the primary increments the serial, secondaries pull the latest version. Many operators format it as YYYYMMDDNN, like 2026042601, so the date of the last change is human readable. If two name servers report different serials for the same zone, they are out of sync and replication should be investigated.
What do refresh, retry, and expire mean?
Refresh tells secondaries how long to wait before checking the primary for a new serial. Retry is how long they wait if a refresh attempt fails. Expire is how long they keep serving the zone if the primary remains unreachable. Lower values mean faster propagation but more traffic. Typical defaults are 3600, 600, and 1209600 seconds, which balance load against responsiveness during outages.
What is the minimum TTL field actually used for?
The final SOA timer was historically a default TTL, but modern DNS uses it as the negative caching TTL. When a resolver receives an NXDOMAIN or NODATA response, it caches that absence for the SOA minimum value, often 300 to 3600 seconds. Setting this too high means deletions and typo fixes take a long time to clear. Around 300 seconds is a sensible balance for active zones.
Can I have more than one SOA record per domain?
No. Each zone must have exactly one SOA record at its apex. Publishing more than one is a protocol violation and breaks resolution. You can have separate SOA records for delegated subzones, but never duplicates within the same zone. The lookup will only ever return a single SOA result, which makes it a quick sanity check that your zone configuration is well formed.

No reviews yet

Be the first to share your experience with the SOA Record Lookup.