No A Record — Your Domain Isn’t Resolving

When GuardHound reports “Domain has no A records,” your domain doesn’t resolve to any server — which usually means the site is offline for everyone, not just our scanner.

What an A record does

An A record maps your domain (yourdomain.com) to an IPv4 address (e.g. 203.0.113.42). Without one, browsers literally don’t know where to send the request, so they fail with NXDOMAIN or DNS_PROBE_FINISHED_NXDOMAIN. AAAA records are the IPv6 equivalent — either is enough to resolve.

CDN-backed sites often use a CNAME at the apex instead (Cloudflare, Vercel, Netlify), which silently flattens to A records. If GuardHound reports no A records but your site loads in a browser, you’re probably using a CNAME provider that the scanner sees through.

Add an A record (or equivalent)

  1. Log into your DNS provider (Cloudflare, Route 53, Namecheap, GoDaddy, etc.).
  2. Add a record of type A, name @ (or yourdomain.com), value = your server’s IPv4. For www, repeat with name www.
  3. If you use a CDN, add the CNAME they provide instead (e.g. cname.vercel-dns.com).
  4. Wait 5–10 minutes for propagation, then verify with dig yourdomain.com or dnschecker.org.
  5. Re-scan with GuardHound to confirm the warning clears.

When the record exists but the warning persists

Run a free scan to find issues like this on your domain

GuardHound checks SSL, DNS, breaches, CVEs, lookalikes, hosting reputation, and more in under 30 seconds.

Start Free Scan →

Frequently Asked Questions

Is no A record always critical?
Yes — it means your domain literally can’t be reached. Even if you serve everything via CDN CNAME, the resolver chain has to terminate in an A or AAAA record. If the scanner truly sees none, neither do most visitors.
I use Cloudflare and the site loads fine — why is this flagged?
Cloudflare proxied DNS returns Cloudflare’s edge IPs as A records when proxied (orange cloud). If you have a grey-cloud CNAME at the apex, some resolvers and tools may not see an A record. Switch to proxied or use a real A record.
How fast can I expect the fix to take effect?
Usually 1–10 minutes if the previous TTL was short. Worst case 24 h. Use dnschecker.org to watch propagation in real time.