
When your domain stops resolving, you're often faced with two separate places to look: your domain registrar's nameserver settings, and your DNS provider's zone records. Knowing which one to check — and understanding why they're different things — saves significant diagnostic time.
A nameserver is a server that holds the authoritative DNS records for a domain. When someone looks up yourdomain.com, the global DNS system needs to know which server to ask for the answer. That's what nameservers define.
Your domain's nameservers are set at the registrar level. They tell the rest of the internet: "To get DNS records for this domain, ask this server."
# See what nameservers are set for a domain
dig yourdomain.com NS +short
# Returns something like:
# ns1.cloudflare.com.
# ns2.cloudflare.com.
When you switch hosting providers or move to Cloudflare, you're usually changing nameservers — telling the internet to start asking a different authority for your domain's records.
Nameserver changes are managed at your domain registrar (GoDaddy, Namecheap, Google Domains, etc.) — not at your hosting provider. The IANA root zone database is the ultimate source of truth for which registrars manage which TLDs.
DNS records live inside a nameserver. They're the actual answers to DNS queries — what IP address does this domain resolve to, where does email go, what's the SPF record.
Common DNS record types:
# See all DNS records at the authoritative nameserver
dig yourdomain.com ANY @ns1.cloudflare.com
# Check a specific record type
dig yourdomain.com A @ns1.cloudflare.com
dig yourdomain.com MX @ns1.cloudflare.com
DNS records are managed at your DNS provider — which is sometimes your registrar, sometimes your hosting provider, and sometimes a dedicated DNS service like Cloudflare or Route 53.
The nameserver setting at the registrar points to the DNS provider. The DNS provider holds the actual records.
Your Registrar → "For yourdomain.com, ask ns1.cloudflare.com"
↓
Cloudflare (ns1.cloudflare.com) → "yourdomain.com A record = 203.0.113.42"
This is why changing nameservers affects everything. When you switch nameservers from your old host to Cloudflare, all your DNS records need to exist at the new nameserver — the old host's records stop being authoritative.
Symptom: "I changed my A record but the site still points to the old server"
Check nameservers first:
dig yourdomain.com NS +short
If the nameservers point to your old host, your A record change at the new host isn't the authoritative answer. The world is still asking your old host.
Symptom: "I updated the nameservers but nothing is resolving"
The new nameserver may not have all your DNS records. When you switch nameservers, you need to recreate all existing records (A, MX, TXT, CNAME) at the new DNS provider before the switch completes.
Symptom: "My domain resolves but email is broken after migration"
MX records weren't transferred when nameservers changed. Check:
dig yourdomain.com MX @new-ns1.yourdnsprovider.com
| Setting | Where it lives | Who controls it |
|---|---|---|
| Nameservers | Domain registrar | Domain owner |
| A / AAAA records | DNS provider (your nameserver) | DNS admin |
| MX records | DNS provider | DNS admin |
| CNAME records | DNS provider | DNS admin |
| TXT records | DNS provider | DNS admin |
If your registrar and DNS provider are the same (e.g. you're using GoDaddy for both registration and DNS), this distinction is less visible — but it still exists internally.
Nameserver changes and DNS record changes are separate events that warrant separate monitoring. An unexpected nameserver change is a serious security event — it means someone redirected your entire domain to a different DNS authority. An unexpected A record change means traffic is being sent to a different server.
Domain Monitor monitors your DNS records continuously and alerts when any record changes — including nameserver changes. Create a free account to add DNS monitoring for your domain.
See A record vs CNAME vs ALIAS: which should you use? for more on individual record types, and what is DNS propagation for how changes at the nameserver level spread to the rest of the internet.
Wildcard, SAN (multi-domain), and single-domain SSL certificates cover different use cases. Here's a clear comparison to help you pick the right type — and avoid paying for coverage you don't need.
Read moreDNS resolves correctly from your office but fails for users in other countries or on different ISPs. Here's why geographic DNS inconsistency happens and how to diagnose which layer is causing it.
Read moreRegistrar lock and transfer lock are often confused — and disabling the wrong one leaves your domain vulnerable. Here's a clear breakdown of what each does and when to use them.
Read moreLooking to monitor your website and domains? Join our platform and start today.