Glossary
What Is a Nameserver?
A nameserver is the host that answers DNS queries for a zone. Every domain delegates to at least two, and which ones a domain uses is a durable fingerprint of who runs it.
A nameserver holds the authoritative answers for a DNS zone: which address a hostname resolves to, where its mail goes, what its SPF and DMARC records say. When a registrar sets up a domain it delegates to a set of nameservers, usually two or more, and every resolver on the internet follows that delegation to get an answer.
The set a domain delegates to changes rarely and is chosen by whoever operates it, which makes it one of the more durable things you can pivot on. Two domains with nothing else in common that share an unusual nameserver set are very often run by the same hands.
WhisperGraph models this as an edge rather than a record, so the pivot is one hop in either direction: NAMESERVER_FOR runs from the nameserver host to every zone it serves. Follow it forwards to see everything a nameserver answers for, or backwards from a domain to the nameservers behind it.
See it in practice
Run it live: Detect nameserver hijacks and DNS inconsistency.
Workflows that use this
Runnable workflows where this concept does the work.
Nameserver & DNS Delegation Audit
Your name servers decide where your domain points — and a broken or inconsistent setup is a hijacking opportunity. This audits a domain's delegation, flags stale or mismatched name servers, sizes how much each provider actually handles, and surfaces registry facts — so you can catch delegation weakness before it's exploited.
