Skip to content

Troubleshooting

Check that your registrar has only WebShield nameservers configured:

nsbox.webshield.pro
nshub.webshield.pro

The check is strict: it queries the parent zone (registry) directly and requires the NS set to match exactly. If old nameservers are still configured at the registrar, the Delegated status is not granted — the panel and CLI show which WebShield nameservers are missing and which foreign ones must be removed.

Nameserver changes at the registrar can take up to 48 hours to propagate. Re-run the check later.

This is expected. System SOA and NS records cannot be modified through the control panel API.

Proxying is available only for A, AAAA, and CNAME. For mail, TXT, and service records, use regular DNS mode without proxy.

Check that:

  • an active domain is selected;
  • the domain is delegated to WebShield;
  • proxying is enabled for the required DNS record;
  • the website received real requests during the selected period.

The record was changed in another session. Refresh the DNS table, check the current value, and repeat the change.