NS Lookup
Find the authoritative nameservers (NS records) for any domain to see who controls its DNS.
Did this tool work for you?
How to use this calculator
- 1
Enter the domain name you want to look up.
- 2
Click "Check Now" to query NS records.
- 3
Results show all authoritative nameservers for the domain.
- 4
Nameservers indicate which DNS provider controls the domain.
Frequently asked questions
What does the tool return?
A table of Nameserver and TTL, one row per NS record the resolver gives for the exact name you typed, plus a "Nameservers found" count. Trailing dots are removed from the host names. Nothing else is shown: no IP addresses for the servers, no SOA data and no check of whether each server actually answers.
Why does a subdomain say "No NS records found"?
NS records exist where a zone starts. In most setups www.example.com or blog.example.com sits inside the zone of example.com and has no NS records of its own, so the lookup is empty. Only a subdomain that has been delegated to other nameservers returns NS records. To find who serves a subdomain’s DNS, look up the parent domain instead.
How do I tell which DNS provider hosts a domain?
Read the host names. Cloudflare’s end in ns.cloudflare.com, Amazon Route 53 uses names containing awsdns, and GoDaddy’s default nameservers are under domaincontrol.com. A registrar’s own nameservers often mean DNS is managed at the registrar. The hosts tell you where the zone is edited, which may differ from where the domain is registered.
Are these the same nameservers set at my registrar?
They should be, but this tool cannot confirm it. A domain’s nameservers are set at the registrar and published by the registry in the parent zone (.com and so on), and the zone itself also lists NS records. Depending on the resolver and what it has cached, the answer may come from either copy. A mismatch between the two sets, a common cause of intermittent failures after a provider switch, is not detected here.
I changed nameservers but still see the old ones. Why?
The delegation is cached by resolvers according to the TTL, and the one shown here is a counted-down value from Cloudflare’s resolver. Delegation records at the top level often carry long TTLs, so a change can take hours to a day or more to be seen everywhere. Check the TTL column to see how much longer the old answer can last.
What should I do about DNSSEC when switching providers?
If the domain is DNSSEC-signed, the DS record at the registrar refers to the old provider’s key. Moving nameservers without removing or replacing that DS record can make the domain fail validation. This tool does not show DS or DNSSEC status, so check that at your registrar before the switch.
How many nameservers should a domain have?
Providers usually assign two or more so that DNS keeps working if one server is down, and often spread them over different networks. The count shown is only what is published; this tool does not judge whether the number is adequate.
Finding the authoritative nameservers for a domain
What NS records tell you
NS records name the servers that hold the real DNS records for a zone, called its authoritative nameservers. Resolvers start at the root, are referred to the registry for the top-level domain, and from there to those servers, which give the final answer for A, MX, TXT and every other type. This tool asks Cloudflare’s public resolver for the NS set of the name you enter and lists it with each record’s TTL.
| Host name contains | Usually means |
|---|---|
| ns.cloudflare.com | DNS hosted at Cloudflare |
| awsdns | Amazon Route 53 |
| domaincontrol.com | GoDaddy default DNS |
| The registrar’s own domain | DNS managed at the registrar |
| The domain itself (ns1.example.com) | Self-hosted, with glue records at the registry |
Example inputs and what to look for
Enter a registrable domain such as example.com. A normal result lists two or more hosts with the same provider’s domain in the names and TTLs of the same size. Mixed providers can be deliberate redundancy or leftovers from an unfinished migration. An entry like a subdomain, blog.example.com, returns "No NS records found" unless that subdomain has been delegated. The results come from live DNS, so they describe the pattern to expect rather than output stored on this page.
Using NS data when moving DNS
A DNS move has two parts: recreate every record at the new provider, then change the nameservers at the registrar. Run this lookup before the switch to record the current set, and again after, to see when resolvers start returning the new hosts. If the domain uses DNSSEC, its DS record at the registrar must be removed or updated first, otherwise validating resolvers can reject the domain. The email and website records need to be copied before the cutover, or mail and the site stop working.
Parent and child delegation
Two copies of the NS list exist: one in the parent zone, held by the registry and set through your registrar, and one inside your own zone. The first decides where resolvers go; the second should repeat it. When they disagree, some resolvers see one set and some the other. This lookup shows what the resolver returns, and it does not compare the two, so for a suspected mismatch also compare against what your registrar shows.
What this tool does not do
It does not probe the nameservers, measure their speed, or check that each one answers with the same data. It does not display glue addresses, SOA serial numbers or DNSSEC status. For the actual record contents of a domain, use the DNS Lookup; to see how a change is spreading, use the DNS Propagation Checker. Results are from one resolver and cached briefly by the web service.
Learn more from an authoritative source:
MDN Web DocsCNAME Lookup
Check CNAME (canonical name) records for any domain to see where it is aliased to.
TXT Record Lookup
View all TXT DNS records for a domain — including SPF, DKIM, DMARC, domain verification, and ownership tokens.
SPF Record Checker
Validate the SPF (Sender Policy Framework) record for any domain and understand its email authentication policy.
DKIM Record Checker
Look up and validate the DKIM (DomainKeys Identified Mail) public key record for a domain and selector.
DMARC Record Checker
Check and analyse the DMARC policy for any domain to understand how email authentication failures are handled.
DNS Propagation Checker
Check whether your DNS changes have propagated across Cloudflare, Google, and Quad9 resolvers worldwide.
Results are estimates for informational purposes only and do not constitute professional financial, medical, legal, or technical advice. Read full disclaimer →