About this tool
Separating the registrar from the DNS provider matters in investigations, because changing nameservers can redirect a domain's mail and website to new infrastructure without ever changing who the domain is registered with.
Example inputs: example.comdigitpol.coma-migrated-domain.net
What the result shows
- Nameserver hostnames
- The authoritative servers delegated to answer DNS queries for the domain, as returned by public DNS.
- TTL
- The cache lifetime of the NS record set in seconds.
- Response status
- Whether the delegation resolved, returned nothing, or produced NXDOMAIN.
- Registry-reported nameservers
- The RDAP registration data also separately reports delegated nameservers, which can be compared against the live DNS answer.
Investigation use cases
- Identifying the DNS or hosting provider behind a domain when the registrar alone is not enough
- Detecting a recent nameserver change that could indicate a domain take-over or migration
- Comparing nameserver patterns across several suspected related scam domains
- Confirming delegation is correctly configured after a DNS migration
Limitations
This tool shows the current delegated nameservers at query time, not a history of past changes, and a shared nameserver provider does not by itself prove common ownership of two domains.
Frequently asked questions
Is the nameserver the same as the web host?
Not necessarily, the nameserver provider manages DNS records, while the actual website may be hosted by a different company identified through the A record's IP address.
Can two unrelated domains share the same nameservers?
Yes, large DNS providers host records for many unrelated customers, so shared nameservers alone are not proof of common ownership.
Does this show past nameserver changes?
No, only the current delegation from live DNS, historical nameserver data is not available through this tool.
Is there a cost?
The lookup is free within daily limits; a sealed report is a paid or account feature.
Need evidence you can keep?
Every lookup produces a full public-source report sealed with a SHA-256 digest. Accounts keep a saved history and can download the DIGITPOL PDF report.