NS Lookup

Query Nameserver (NS) DNS records for any domain — see authoritative name servers and SOA data

Try:

Frequently Asked Questions

An NS (Nameserver) record specifies which DNS servers are authoritative for a domain — meaning they hold the official DNS records (A, MX, TXT, etc.) for that domain. When a resolver wants to look up any record for example.com, it first queries the NS records to find out which server to ask.

The SOA (Start of Authority) record contains administrative information about the DNS zone: the primary nameserver, the admin email address, the serial number (used for zone transfers), and timing values like refresh, retry, and expire intervals. The serial number increments every time DNS records are updated.

Nameservers are set at your domain registrar (e.g. GoDaddy, Namecheap, Google Domains). Log in to your registrar's control panel, find the domain, and update the nameserver fields to the new values provided by your DNS hosting provider (e.g. Cloudflare: anita.ns.cloudflare.com). Changes can take up to 48 hours to propagate globally.

The nameserver hostname reveals the provider: ns.cloudflare.com = Cloudflare, awsdns = Amazon Route 53, domaincontrol.com = GoDaddy, dnsimple.com = DNSimple, googledomains.com or ns-cloud = Google Cloud DNS, name.com = Name.com. You can also cross-check against their published nameserver lists.

Nameservers are the DNS servers that hold the authoritative DNS records for a domain. When anyone in the world looks up a record for your domain (such as its IP address, mail servers, or TXT records), the DNS lookup chain ultimately ends at your authoritative nameservers. They answer questions like "what is the IP for www.example.com?" with the definitive, official answer. Nameservers are typically provided by your DNS hosting provider (Cloudflare, Route 53, GoDaddy, etc.) and are listed in the domain's NS records, which are delegated by the TLD registry (e.g. Verisign for .com).

An authoritative nameserver holds the official DNS records for a domain. It only answers questions about domains it has been delegated authority over. Examples: Cloudflare's nameservers for domains hosted on Cloudflare DNS, or Route 53 for AWS-hosted domains.

A recursive nameserver (also called a resolver) does not hold zone data — instead, it performs lookups on behalf of clients by querying root servers, TLD servers, and finally authoritative servers. Examples: 8.8.8.8 (Google), 1.1.1.1 (Cloudflare). When your browser looks up a domain, it queries your recursive resolver, which in turn queries the authoritative servers.

Nameserver changes are made at your domain registrar (where you purchased the domain), not your DNS provider. Log in to your registrar (GoDaddy, Namecheap, Google Domains, etc.), find your domain's settings, and update the nameserver fields to the values provided by your new DNS host. For example, Cloudflare provides two nameservers like anita.ns.cloudflare.com and boris.ns.cloudflare.com. Changes propagate within 24–48 hours globally, though often much faster. During propagation, some users may resolve to the old DNS while others see the new one.

NS record propagation (nameserver changes) typically takes 24–48 hours to complete worldwide, though it often completes in a few hours. The delay is caused by the TTL of the old NS records cached at resolvers across the internet. The TLD registry (e.g. Verisign for .com) also has its own update schedule, usually every few minutes to an hour. To minimize disruption during a nameserver change, ensure your new nameservers have all your DNS records ready before making the change at the registrar. You can monitor propagation with tools like whatsmydns.net.

Glue records solve a chicken-and-egg problem. If your nameservers are subdomains of your own domain (e.g. ns1.example.com for example.com), a resolver can't look up the NS record without first knowing the IP of ns1.example.com — which requires looking up example.com. The glue record is an A record stored at the TLD registry level (not in your zone) that provides the IP address of your nameservers directly, breaking the circular dependency. Glue records are only required when your nameserver hostnames are within the domain they're serving.

ICANN requires domains to have a minimum of two nameservers for redundancy. If a domain only had one nameserver and it went offline (hardware failure, network outage, DDoS attack), the entire domain would become unresolvable — websites, email, and all DNS-dependent services would stop working. With two or more nameservers, resolvers can fall back to the secondary if the primary fails. Most DNS providers (Cloudflare, Route 53, Google Cloud DNS) provision at least two nameservers automatically, often spread across different geographic locations and network providers for maximum resilience.

About This NS Lookup

This free NS Lookup tool queries DNS Nameserver and SOA records in real time for any domain. It returns all authoritative nameservers with their IP addresses, and includes SOA (Start of Authority) zone metadata such as the serial number, refresh interval, and admin contact — useful for verifying DNS hosting and diagnosing zone propagation.

When to use this tool

  • Verify that nameserver changes have propagated after an update
  • Identify the DNS hosting provider for any domain
  • Check NS records after a domain transfer or registrar change
  • Audit the SOA serial number to confirm zone updates

SOA Record Fields

FieldDescription
mnamePrimary nameserver for the zone
rnameAdmin contact email (dot-encoded)
serialZone version number — incremented on each change
refreshHow often secondaries check for zone updates (seconds)
retryRetry interval if a refresh fails (seconds)
expireHow long secondaries serve the zone without a refresh
minimumDefault TTL for negative (NXDOMAIN) caching

Related Articles

View all articles
Glue Records and DNS Delegation: Why Changing Nameservers Can Silently Break a Domain

Glue Records and DNS Delegation: Why Changing Nameservers Can Silently Break a Domain

A nameserver named ns1.example.com creates a circular dependency — to find its IP, you'd normally ask example.com's nameservers, which it is one of. Glue records solve this by storing nameserver IPs directly in the parent zone. Here's how delegation chains work, when glue is required vs unnecessary, and why stale glue at the registrar causes confusing migration failures.

Jun 16, 2026
DNS Providers Compared: Cloudflare vs Route 53 vs Google Cloud DNS — and Why It Matters

DNS Providers Compared: Cloudflare vs Route 53 vs Google Cloud DNS — and Why It Matters

Registrar DNS is almost always the weakest option — slow global performance, poor TTL flexibility, and limited routing features. Here's how Cloudflare, Route 53, and Google Cloud DNS compare on performance, pricing, and features, and how to move DNS without moving your domain registration.

Jun 9, 2026
DNS Propagation Explained: Why the 48-Hour Wait Is Mostly Avoidable

DNS Propagation Explained: Why the 48-Hour Wait Is Mostly Avoidable

DNS propagation isn't magic — it's cache expiry. Understanding how TTL, authoritative nameservers, and recursive resolvers interact makes domain migrations predictable and the 48-hour wait mostly avoidable.

Jun 8, 2026
NS Lookup — Find the Authoritative Nameservers for Any Domain

NS Lookup — Find the Authoritative Nameservers for Any Domain

Learn what NS records are, how DNS delegation works, why NS records are the first thing to check when DNS fails, and how to use a free NS lookup tool to verify nameserver configuration.

Jun 6, 2026