How do I figure out what's wrong with my DNS record?

Use online diagnostics tools:

  • https://www.dnsviz.net/ (unavailable for now)
  • https://www.zonemaster.net/

I have just run it for you: https://zonemaster.net/test/f9b464c2a567d89b and results are not good!

In short, your nameservers (ns0.dcdns.net and others) do not reply as being authoritative on your domain name. You will first need to contact the individual or company behind ns0.dcdns.net and ask them to configure their nameservers properly for your domain name. Or change the nameservers you are using for your domain.

Until that is done, do not expect to have anything working correctly in your domain name.

More precisely: ns0and ns3seem not to reply correctly at all for your domain, ns1 and ns2do. Are you sure you need to use all four of them?

Also: ns0 ns1 and ns2 are resolving to the same IP, this is silly. And makes the above results strange. In fact when doing multiple times the same query, a given nameserver does not reply the same way (sometimes NXDOMAIN with useless upward referal, sometimes correct NS records). This is seriously broken! (I suspect there are behind some kind of load balancer and we hit different servers, or their anycast had gone wrong...)

PS: use dig instead of nslookup, it is a better tool.


It would seem that you are using some nameserver internally that works reliably, while the nameservers used by everyone else is in a worse state.

The delegation looks like this:

;; AUTHORITY SECTION:
thedigitalteacher.com.  172800  IN      NS      ns0.dcdns.net.
thedigitalteacher.com.  172800  IN      NS      ns1.dcdns.net.
thedigitalteacher.com.  172800  IN      NS      ns2.dcdns.net.
thedigitalteacher.com.  172800  IN      NS      ns3.dcdns.net.

;; ADDITIONAL SECTION:
ns0.dcdns.net.          172800  IN      A       192.149.119.100
ns1.dcdns.net.          172800  IN      A       192.149.119.100
ns2.dcdns.net.          172800  IN      A       192.149.119.100
ns3.dcdns.net.          172800  IN      A       212.44.18.27

There are four NS records but, as you can see, these effectively boil down to only two addresses, 192.149.119.100 and 212.44.18.27.

212.44.18.27 seems to consistently answer with a referral to the root (indicating it simply doesn't know about thedigitalteacher.com), while 192.149.119.100 produces a mix of actual answers and referrals to the root.

As for what causes the 192.149.119.100 behavior, I can only speculate. Maybe 192.149.119.100 is backed by multiple server instances which are out of sync?

It looks to be a bit of a mess on the authoritative end.