Securealy
Check · Domain · info · passive

Nameservers identified

The DNS provider is identified.

Severity
info
Tier
Passive: runs on any URL
Category
Domain
Fix
Summary below; full runbook in the Fix Kit, Module 00: Foundations
Id
nameservers

What this means

Passing means your domain answers an NS lookup and we can tell which DNS provider holds the zone. That provider is where every DNS fix in this report happens, so knowing it is context for the other checks. Failing means the lookup returns nothing, which usually means the domain is not delegated yet or the nameserver change at the registrar never saved.

How we test it

We run an NS lookup on your domain and match the nameserver hostnames against providers we know. Nameservers returned and the provider recognised is a pass. Nameservers returned but the provider unknown to us is a warn, which is informational only. No nameservers at all is a fail. This is a passive check.

Why it matters

Context for the other checks. Every DNS record in this report, from SPF to DMARC to the host records, has to be added at the provider these nameservers point to, and a record added anywhere else does nothing. The Module 00 runbook stops before any DNS step until dig NS shows the expected provider, because every later step would otherwise go to the wrong place.

The fix

If the lookup is empty or still shows the old registrar, put DNS on Cloudflare (Add a site, Free plan), paste the two nameservers it shows into the registrar's nameserver setting (some registrars need "custom nameservers" chosen first), and wait until dig NS YOUR_DOMAIN +short returns *.ns.cloudflare.com. If the result is a provider you chose on purpose, nothing is wrong; keep it and read the rest of the report with that provider in mind.

The full runbook is in the Fix Kit, Module 00.

Prompt for your AI

Paste this into the coding agent that built the app. It reproduces the finding and stops before changing anything; the fix steps are in the kit.

Do not change anything. Run: dig +short NS YOUR_DOMAIN and show me the output.
Name the DNS provider those nameserver hostnames belong to, or say you cannot tell.
Run: dig +short A YOUR_DOMAIN and dig +short CNAME www.YOUR_DOMAIN and show both.
Tell me whether those values match the hosting provider's records (for Vercel, 76.76.21.21 and cname.vercel-dns.com).
List any record you cannot explain, and stop before changing anything.
Finally run: dig +short NS YOUR_DOMAIN | grep -c . and show the count. Expected 2 or more.

Next

Grade your own URL

Every grade lists this check with its evidence for your site. Two free grades a day.