Delegation path
Trace the delegation path
Walk the delegation chain label by label, from the top-level domain down to a domain’s authoritative nameservers.
When to use it
Use this when
- You want to see exactly where resolution is delegated at each level.
- A lame or missing delegation is causing intermittent or partial failures.
Steps
Do this
- Enter a hostOpen Trace and enter a fully-qualified host such as www.example.com.
- Follow each stepEach delegation hop — TLD → domain → host — is listed with the NS records that own it and any DS record that secures it.
- Spot the breakA missing NS or DS at a hop pinpoints where delegation or DNSSEC stops.
Examples
Copyable commands
curl 'https://dnsbin.ca/api/v1/trace?name=www.google.com'
Operational notes
Keep in mind
- This is a recursive-view trace of the delegation chain the server observes, not an iterative dig +trace run from your own machine.
- Pair it with the DNSSEC tool to confirm each DS hand-off actually validates.