DNS Propagation problem

[arian.vilaplana]

Hi,

i’ve a DNS propagation problem. in some countries my domain is not resolved.

anyone can help me?

my domain is: thetaxiguide.com

i’ve tried this site: thetaxiguide.com | DNSViz

I don’t understand what’s the problem.

[simon]

Your DNSSEC configuration at your Registrar is broken:

# whois.verisign-grs.com

   Domain Name: THETAXIGUIDE.COM
   Registry Domain ID: 2736378568_DOMAIN_COM-VRSN
   Registrar WHOIS Server: whois.ovh.com
   Registrar URL: http://www.ovh.com
   Updated Date: 2022-11-04T21:35:51Z
   Creation Date: 2022-11-03T21:25:00Z
   Registry Expiry Date: 2023-11-03T21:25:00Z
   Registrar: OVH sas
   Registrar IANA ID: 433
   Registrar Abuse Contact Email: [email protected]
   Registrar Abuse Contact Phone: +33.972101007
   Domain Status: clientDeleteProhibited https://icann.org/epp#clientDeleteProhibited
   Domain Status: clientTransferProhibited https://icann.org/epp#clientTransferProhibited
   Name Server: INES.NS.CLOUDFLARE.COM
   Name Server: JAVIER.NS.CLOUDFLARE.COM
   DNSSEC: signedDelegation
   DNSSEC DS Data: 2872 8 2 CD75B62E4255DBEF343A84E2FE19F708E360FFA6E383466A32B3A45FFE4B5E49
   URL of the ICANN Whois Inaccuracy Complaint Form: https://www.icann.org/wicf/
>>> Last update of whois database: 2022-11-29T09:35:46Z <<<

Specifically this part:

   DNSSEC DS Data: 2872 8 2 CD75B62E4255DBEF343A84E2FE19F708E360FFA6E383466A32B3A45FFE4B5E49

That looks like a value from your previous DNS provider, not Cloudflare. This will cause any DNS resolver that validates DNSSEC to fail, since the reponse from Cloudflare is not signed with the same encryption as your previous DNS provider.

To fix, enable DNSSEC on Cloudflare and then visit your Registrar (OVH) and update your DS record to the correct value that Cloudflare provides you with in the dashboard.

The guide to do this is here:

DNSSEC · Cloudflare DNS docs