Whois DNS Lookup — Delegation Trace & Nameserver Walk
Walk NS and SOA delegation from TLD through each parent zone — live DNS complement to WHOIS nameservers
How to Use This Tool
- Enter the fully qualified domain to trace (for example mail.example.com).
- Labels split into zone suffixes from TLD upward to the full name.
- For each zone cut, parallel NS and SOA queries run via public DNS.
- Nameserver hostnames normalize by stripping trailing dots.
- Steps accumulate from TLD (depth 2 labels) through the complete domain.
- Compare trace NS against WHOIS nameserver fields from a separate lookup.
About This Tool
WHOIS shows registrar-published nameservers; live DNS shows what resolvers actually follow through delegation cuts. Discrepancies between WHOIS NS and TLD NS cause partial propagation failures that look mysterious in WHOIS panels alone. VSPIC whois DNS lookup calls the dns-trace action — walking from the TLD suffix through progressively longer zone labels to your full domain, querying NS and SOA at each step, returning trace array with zone, nameservers, soa, status, plus delegationDepth, authoritativeZone, and summary.
This page does not fetch WHOIS text — it is a live DNS delegation trace operators use alongside registrar WHOIS to verify nameserver cuts match registration intent. Pair with whois-lookup for registration dates and registrar fields; use this trace for authoritative delegation reality.
Common use cases
- •View all DNS records of a domain after migration
- •Confirm DNS records after domain changes
- •Test for DNS leaks when using a VPN
- •Debug email delivery with MX and TXT records
Why use VSPIC for ?
- Live delegation walk complements static WHOIS NS.
- NS and SOA captured together at every zone cut.
- authoritativeZone identifies deepest traced label.
- Status text per step aids NXDOMAIN debugging.
- Useful after registrar NS updates or transfers.
- Free instant trace with copy-friendly JSON.
WHOIS nameservers versus live DNS delegation
WHOIS lists nameservers the registrar should publish to the TLD. Live DNS at the TLD step shows what NS records resolvers retrieve right now. When they disagree, mail and web traffic split across old and new DNS hosts.
Our whois DNS lookup traces live NS at each zone cut — the ground truth resolvers use. Run whois-lookup separately for registrar and expiry context.
Reading each trace step
Every trace entry contains zone (suffix queried), nameservers (NS targets), soa (first SOA answer if present), and status (resolver status text). Zones grow: com, example.com, www.example.com for a www host under .com.
SOA identifies primary master, mailbox, serial, and timers. Serial mismatches across NS sets hint at zone sync problems.
Correlating trace with WHOIS after transfers
Domain transfers update WHOIS quickly while TLD NS may lag until registrar push completes. Trace daily until the TLD step lists only intended nameservers matching WHOIS.
Acquisition due diligence compares WHOIS NS from registration data against trace on day one — catches legacy DNS host delegation.
TLD to apex versus deep subdomains
Tracing mail.example.com includes com, example.com, and mail.example.com when mail is a separate zone cut. delegationDepth counts steps. authoritativeZone names the deepest suffix in trace.
Use authoritativeZone when opening tickets about which zone file should contain records you edit.
When NS and SOA disagree
NS lists who serves the zone. SOA anchors administrative metadata. NS with empty SOA may indicate delegation without local zone file on this resolver path.
After NS changes, trace until TLD NS match DNS panel intent — stale TLD NS are a common partial propagation cause.
Relationship to dns-trace-lookup and root-nameserver-checker
All use dns-trace API. dns-trace-lookup emphasizes general delegation debugging. root-nameserver-checker emphasizes TLD-step NS. whois DNS lookup emphasizes registrar correlation language.
Pair with nameserver-lookup for leaf NS on one QNAME without full walk.
Debugging migration and transfer issues
DNS host migrations leave mismatched NS at registrar versus panel. Trace before and after TTL expiry. Document trace JSON in change tickets beside WHOIS screenshots.
WHOIS redaction hides registrant but usually leaves nameserver hostnames visible for comparison.
Glue and lame delegation limits
Trace lists NS hostnames without resolving glue A/AAAA for in-bailiwick nameservers. Follow with DNS lookup on NS hostnames if glue issues suspected.
Lame delegation — NS pointing at non-responsive hosts — requires SMTP or DNS queries beyond this page.
API action dns-trace
GET /ip-tools/api/extended?action=dns-trace&domain=example.com returns trace, delegationDepth, authoritativeZone, summary. Automate post-transfer verification.
Store trace exports beside WHOIS snapshots in due diligence binders.
Privacy and responsible use
NS and SOA are public. Trace domains you own or investigate with authorization.
We do not permanently store queries.
Important notes & limitations
- Does not return WHOIS registration text — DNS trace only.
- Does not query root servers directly — starts at TLD suffix.
- Glue A/AAAA for in-bailiwick NS are not resolved.
- Cannot detect lame delegations without follow-up queries.
- One resolver path — internal DNS views may differ.
Frequently Asked Questions
Yes. VSPIC offers this whois DNS lookup at no cost with no account required. Results load in real time.
We do not permanently store your queries on our servers. Some tools run entirely in your browser; others fetch public data for the request only.
Yes. Open the page in any modern phone or tablet browser. Results work on Wi‑Fi and mobile data.
No. It performs live DNS delegation trace only. Use whois-lookup for registrar and registration fields.
Registrar panels can show updated NS while TLD delegation still lists old nameservers. Trace shows live cuts.
No. It starts at the TLD suffix (depth 2 labels) and walks downward to your full domain.
The deepest zone label in the trace array — often your full domain or apex depending on cuts.
Yes. Enter the full hostname. Steps include each delegation suffix down to that name.
dns-trace with a domain parameter.
Next step for your check
Continue with whois lookup on VSPIC.
Related Tools
Explore more free VSPIC tools for IP, DNS, security, and network diagnostics.
WHOIS Lookup
Retrieve domain and IP registration WHOIS records
Use Free →DNS Trace Lookup
Walk delegation chain from TLD to domain with NS and SOA at each step
Use Free →Root Nameserver Checker
Root Nameserver Checker — free online tool
Use Free →Nameserver Lookup
Registration and DNS nameserver delegation for any domain
Use Free →DNS Lookup Tool — DNS Checker
Free DNS lookup tool and DNS checker — query A, AAAA, MX, TXT, NS, CNAME, and SOA records for any domain.
Use Free →Reverse DNS Lookup
Resolve IP addresses to hostnames via PTR records
Use Free →
Trusted by Users Who Value Privacy
Always Free
No premium plan ever
100% Private
Files processed in browser
Instant Results
Convert in seconds
Works Everywhere
Any device, any OS