DNS

Domain not resolving: how to find the broken DNS layer

“Domain not resolving” can mean the name has no usable DNS answer, the delegation is broken, the authoritative service is unreachable, DNSSEC validation fails, or the requested record simply does not exist. Test from the outside inward.

Confirm the domain registration is active

An expired, suspended, or otherwise inactive registration can prevent normal delegation. Check registrar and registry status before debugging the web server.

Check which nameservers the registry delegates to

Make sure the listed nameservers are the ones you intend to use and that they have valid addresses and answer authoritatively for the zone. A correct record in an undelegated DNS account is invisible to users.

Query the authoritative record directly

Ask the authoritative nameserver for the exact hostname and record type. If the answer is missing there, public resolvers cannot invent it. If authoritative DNS is correct but recursive resolution fails, investigate caching or validation.

Check DNSSEC after nameserver or provider changes

A stale DS record can cause validating resolvers to reject otherwise correct-looking DNS answers. When DNSSEC is enabled, move keys and delegation deliberately rather than treating it as an unrelated setting.

Related DotMoose serviceRead DNS troubleshooting guides

Keep reading

Related guides.

More domains & dns →