Domain name diagnosis_public authoritative resolution-阿里云帮助中心

To check the registrar, validity period, status, DNS resolution, or ICP filing information for your domain name, you can use the diagnosis tool described in this topic.

Why run domain name diagnosis

Common reasons for DNS resolution configuration failures include:

The domain name was purchased from another provider, so it cannot be found by the public authoritative resolution service of Alibaba Cloud DNS.
The domain name was purchased from Alibaba Cloud, but the configured DNS servers are from another provider, so the configuration does not take effect.
The domain name status is abnormal. For example, it might be locked due to a failed identity verification, expiration, or compliance issues.
The domain name has not completed its ICP filing.

Run a domain name diagnosis to verify your permissions, confirm the domain name status is normal, and ensure it complies with policy requirements. This process helps you prepare for DNS resolution and prevent resolution failures or access issues.

Use the domain name diagnosis tool

Open Network Diagnostic Analysis.
Enter the domain name that you want to check, such as aliyun.com, and click Detect Now.
The page displays information about Domain Check, DNS Check, Network Check, and Local System Info.

The Domain check section shows the domain registrar, validity period, and status. The DNS check section shows the DNS service provider, resolution result from the provider, recursive resolution tracking, and TTL effective period. The Network check section shows the ICP filing check, MIIT blacklist status, ping check, and website status code. The Local System Info section shows local environment details, including your operating system, browser, Flash, Cookie, JavaScript, LocalStorage, and proxy settings.

Details

Domain check

The Domain Check feature verifies that the validity period and status of a domain name.

Field	Field value (example)	Field description
Registrar	Alibaba Cloud Computing (Beijing) Co., Ltd.	The registrar with which the domain name is registered. Alibaba Cloud: Alibaba Cloud Computing Tencent Cloud: DNSPod, Inc. MarkMonitor: MarkMonitor Inc.
Validity period	The domain name is within its validity period	Checks whether the domain name has expired. If your domain name has expired, you must renew it with the domain name registrar in a timely manner. If you purchased the domain name from Alibaba Cloud, see Domain name renewal. After a domain name expires, it takes 24 to 48 hours for the domain name to be restored after a successful renewal. The restoration cannot be accelerated.
Status	The domain name status is normal	Checks whether the domain name can be used. If your domain name registrar is not Alibaba Cloud, you must contact your domain name registrar to handle the issue. If your domain name is registered with Alibaba Cloud, see Remove the Clienthold and Serverhold lock statuses of a domain name.

FAQ

1. I have renewed my domain name. Why does the network diagnostic analysis tool still show that the domain name has expired?

A: The network diagnostic analysis module uses the whois command to perform a query. The whois system does not retrieve the latest information in real time. In this case, you can go to the whois system and click Query Now.

DNS check

The DNS Check feature checks the DNS resolution of a domain name, including public authoritative resolution, public recursive resolution, and the time it takes for the resolution to take effect. We recommend that you first learn about DNS server levels and the DNS resolution procedure.

Field	Field value (example)	Field description
DNS service provider	ns3.aliyun.com,ns4.aliyun.com,ns5.aliyun.com (Alibaba Cloud DNS provides the DNS service)	The vendor that provides authoritative DNS resolution services for your domain name. If the DNS service provider is displayed as Alibaba Cloud DNS is not used, you must contact your DNS service provider to troubleshoot the issue. Alibaba Cloud DNS cannot troubleshoot DNS issues from other vendors.
Resolution result from the DNS service provider	A 192.168.0.1 MX mx2.mail.aliyun.com	The authoritative DNS records for the domain name. If the message No DNS records are configured for the domain name is returned, you have not added any DNS records to the authoritative DNS server. If the message Failed to check the DNS resolution result is returned, an exception occurred when the domain name was queried from the authoritative DNS server. Exceptions can include a detection timeout, no response for recursive resolution, or a SERVFAIL error. If this error is reported, you must contact your DNS service provider to troubleshoot the issue. If the resolution result is different from the configuration in the console, you must contact your DNS service provider to troubleshoot the issue.
Recursive resolution tracking	The recursive resolution of the domain name is normal	Recursive resolution tracking checks whether the resolution path is normal. The main purpose of the check is to determine whether the recursive resolution of the domain name is polluted. The recursive resolution of the domain name is normal The resolution path is normal. The recursive resolution of the domain name is polluted In most cases, if the root DNS server directly returns an A record, the recursive resolution of the domain name is being forcibly blocked by an upstream network device. If this error is reported, the issue is beyond the troubleshooting scope of Alibaba Cloud DNS. We recommend that you change the domain name for your service.
Local DNS check	Click to download the local check tool	Checks for local issues, such as problems with the DNS cache.
Resolution result of 223.5.5.5	A 10.10.10.10 MX mx2.mail.aliyun.com	223.5.5.5 is the IP address of the public DNS service provided by Alibaba Cloud. When you troubleshoot resolution failures, you must check whether the resolution has taken effect on both the authoritative DNS server of the DNS service provider and the local DNS server of the client. The diagnosis tool cannot retrieve the local DNS information of the client. Therefore, the tool cannot simulate the DNS server that is automatically assigned to the client or the DNS server that is assigned by the ISP for testing. Public DNS provides publicly accessible DNS addresses. The diagnosis tool uses 223.5.5.5 to simulate a test of whether the local DNS server has taken effect. If the message No DNS records are configured for the domain name is returned: (a) If the resolution result from the DNS service provider also reports this error, you have not configured any DNS records on the authoritative DNS server. (b) If the DNS service provider has resolution results but the local DNS server reports this error, the resolution has not taken effect on the local DNS server. The resolution result of 223.5.5.5 is different from the resolution result from the DNS service provider: If the resolution result from the DNS service provider is correct, the resolution has not taken effect on the local DNS server. This may be because the local DNS cache has not expired. We recommend that you run the test again after the TTL expires.
TTL effective period	The TTL of the domain name is 300 seconds. Note: If the DNS record for the domain name was recently modified, run the check again after the TTL expires.	Queries the remaining validity period of the TTL cache for your domain name. For more information, see Configure TTL.

FAQ

1. Is the resolution result from 223.5.5.5 representative?

Yes, it is. Many clients in China use 223.5.5.5. However, the test result does not represent all users. If the test that uses 223.5.5.5 is successful but you cannot access the domain name from your computer, this indicates that users who use 223.5.5.5 as their local DNS server can access the domain name as expected. The issue is likely caused by your local environment. We recommend that you use a local DNS testing tool to further test and authenticate your local DNS server.

Website check

The Website Check feature helps you check the ICP filing, check whether the website is on the blacklist of the Ministry of Industry and Information Technology (MIIT), ping the IP address of the website, and check the website status.

Field	Field value (example)	Field description
ICP filing check	ICP filed: The website has an ICP filing (Zhe B2-20080101-4)	Domain name resolution is not directly associated with ICP filing. Even if a website does not have an ICP filing or is undergoing ICP filing, the DNS resolution settings and the effectiveness of the resolution are not affected. However, if a website does not have an ICP filing or is undergoing ICP filing, the access to and use of the website are directly affected. If the message that the website does not have an ICP filing is returned, consult your server provider.
MIIT blacklist website	The website is not on the MIIT blacklist	If your domain name is added to the Ministry of Industry and Information Technology (MIIT) blacklist, the access to and use of the website are directly affected. If the message that the website is added to the MIIT blacklist is returned, go to the MIIT website to query the information. You must contact MIIT to resolve the issue.
Ping check	The ping check is normal	Performs a ping check on the website by executing the ping command. If the ping to the IP address fails, the IP address of the website cannot be pinged. This may be because the security group does not allow inbound requests over the ICMP. You must contact the provider of the IP address for troubleshooting.
Website status check	HTTP website status code: 301	Performs an HTTP status query. If the message Website access timeout is returned, a timeout occurred during the HTTP query. Contact your website server provider. If the return code of the HTTP status query is greater than 400, you must contact your server provider or website space service provider for troubleshooting.

Local system info

Local System Info refers to the basic information about the terminal device from which you initiate the domain name diagnosis.