What this check looks at
“Which provider is authoritative for this zone - that is who can publish the fixes.” - the wording shown beside this check while it runs.
Your nameservers are the servers that hold the authoritative copy of your DNS records. Whoever runs them is the one place a change to your SPF, DKIM or DMARC record actually takes effect. That is frequently not your registrar: plenty of domains are bought in one place and hosted in another.
Why it matters
This is the orientation check. Almost every fix elsewhere in this result ends with "publish this record", and this is the answer to "publish it where?". People lose days changing records at a registrar whose nameservers the domain stopped using years ago, then wondering why nothing changed.
What each verdict means here
- Pass
- We can see which provider is authoritative for the zone.
- Warn
- The answer was incomplete or inconsistent - for example nameservers that disagree with each other. Worth resolving before you publish anything, because a record published to only part of the zone behaves unpredictably.
- Fail
- No authoritative nameserver could be identified for the domain.
What to do
- Note the provider named in the finding - that is where every DNS change below is made.
- If it is not the provider you expected, find out who has the login before you plan any change.
What this check does not do
We report who is authoritative. We do not have, ask for, or want access to that account - the product never changes your DNS without a separate, explicit, per-domain approval, and that capability is not built yet.