A DNS result is not only the record value. The status code explains what kind of failure or empty result occurred.

Useful dig commands

dig missing.example.com A
dig example.com AAAA
dig example.com A +dnssec

Troubleshooting checklist

  1. NOERROR with an answer means the record exists.
  2. NOERROR with no answer often means the name exists but not for that record type.
  3. NXDOMAIN means the queried name does not exist.
  4. SERVFAIL means the resolver could not complete the lookup.
  5. REFUSED means the server declined the query.

How to interpret the result

If the answer matches the expected value, DNS is probably not the layer causing the current symptom. Continue with HTTP, TLS, mail server, firewall, or application checks. If the answer is missing, stale, or different between resolvers, keep the investigation in DNS until the public answer is correct.

Support note

When opening a ticket with a DNS provider, include the exact name, record type, resolver tested, returned value, and time of the lookup. That is much more useful than saying “DNS is not working.”