[{"data":1,"prerenderedAt":41},["ShallowReactive",2],{"$f127efxyoepnlt":3},{"title":4,"seoTitle":5,"description":6,"route":7,"kind":8,"toolKey":9,"intro":10,"indexable":11,"sections":12,"related":38},"NS Lookup","NS Lookup | nslookup.online","Find nameserver records and supplemental host addresses using a selected recursive resolver. Understand the limits of delegation checks.","\u002Fns-lookup\u002F","tool","ns","Find the nameservers returned by a public recursive resolver.",true,[13,20,26,32],{"id":14,"title":15,"paragraphs":16,"code":19},"read-answer","Nameservers and zones",[17,18],"NS records identify nameservers for a DNS zone. Enter the exact domain you want to inspect. A subdomain may have a separate delegation or may be served by its parent zone; not every hostname publishes its own NS set.","The selected recursive resolver returns these records. This browser tool does not open direct UDP or TCP DNS connections to each authoritative nameserver.","example.com.  86400 IN NS ns1.example.net.\nexample.com.  86400 IN NS ns2.example.net.\n\nDOCUMENTATION EXAMPLE — not a live DNS response",{"id":21,"title":22,"paragraphs":23},"addresses","Why nameserver addresses are separate",[24,25],"Supplemental A and AAAA queries show addresses attached to returned nameserver hostnames. Returned Additional records are retained in response details if the resolver provides them.","An address lookup is not evidence of parent-zone glue consistency. The first version does not query the parent and child zones directly or assert that every nameserver is reachable.",{"id":27,"title":28,"paragraphs":29},"delegation","Delegation checks need more evidence",[30,31],"A recursive NS answer alone cannot establish that parent and child NS sets agree. It cannot establish zone transfer availability, serial synchronization or authoritative DNSSEC validity either.","If you recently moved DNS providers, compare the registrar’s configured delegation and the intended DNS zone. Do not remove old infrastructure solely because one public cache has changed.",{"id":33,"title":34,"paragraphs":35},"questions","What if no NS records appear?",[36,37],"A hostname below a zone apex may have no NS records of its own. NOERROR without records is therefore not enough to diagnose a broken delegation.","SERVFAIL may involve upstream availability, validation or other resolver conditions. The raw response and DNS flags provide evidence, but AD=false alone is not a DNSSEC failure.",[39,40],"\u002F","\u002Fguides\u002Fnslookup-command\u002F",1792661399016]