ANY queries are often misunderstood. They do not reliably return every DNS record in a zone, and many providers intentionally limit them.

Commands to use

dig example.com ANY
dig example.com MX
dig example.com TXT

Checklist

  1. Use specific record types instead of ANY.
  2. Ask for A, AAAA, MX, TXT, NS, or SOA directly.
  3. Do not treat an empty ANY answer as proof the zone has no records.
  4. Use provider APIs or zone exports when you need a full inventory.

How to use the result

The DNS answer should be compared with the intended source of truth: registrar delegation, DNS provider zone, hosting target, email provider instructions, certificate authority challenge, or internal network documentation. If they do not match, fix the source record before troubleshooting higher layers.