DNS and nameservers for .gy domains

How to change a .gy domain's nameservers, edit its DNS records and connect it to Cloudflare or cPanel hosting, and which records to protect along the way.

Open My Domains Change nameservers

Protect your email before you switch. Copy the MX, SPF, DKIM and verification records to the new DNS provider before you change the nameservers.

Nameservers or DNS records?

Nameservers choose the DNS provider. That provider holds the records for your website, email and other services.

Nameservers: Tell the internet which provider answers for the domain. Change them when you move DNS to Cloudflare, a cPanel host or another provider.
DNS records: Connect each service. Edit A, AAAA, CNAME, MX and TXT records at the provider your nameservers point to.

When you change nameservers

Use the exact hostnames the provider gives you
Enter both the primary and the secondary nameserver
Remove the old provider's nameservers
Review DNSSEC before you switch provider

Changing nameservers

Set up the new DNS provider first, then replace the nameservers in My Domains. This reduces the risk of interrupting your website or email.

Sign in and open My Domains
Use the Revamped GY account that manages the domain, then select the correct .gy name from the dashboard.
Confirm the new DNS provider
Collect the exact nameservers supplied by Cloudflare, cPanel hosting or another authoritative DNS provider.
Copy the existing DNS records
Before changing delegation, confirm that website, email, verification and security records exist at the new provider.
Replace and save the nameservers
Enter the nameservers exactly as supplied, remove obsolete entries and submit the update from the domain controls.
Verify website, email and DNSSEC
Allow caches to update, then test the website, mail delivery, public DNS records and DNSSEC validation where enabled.

Open My Domains Ask us for DNS help

Managed DNS

New domains start on our DNS, and you edit the records yourself in My Domains. For a domain on other nameservers, set it up from the domain's DNS tab.

An editor for A, AAAA, CNAME, MX and TXT records
Email forwarding to another address, without a full mailbox
Email bought from us can publish its own mail records
The domain, its DNS, renewal and related services in one account

Before you switch, list every record in use

The website server IP or hosting address
www and other CNAME aliases
MX records for incoming mail
SPF, DKIM and domain verification records
Subdomains used by apps, portals or APIs
Any existing DNSSEC set-up

If you change nameservers without recreating these records, the website, email or verification services can stop working.

Record types

Use the values your website, hosting, email or verification provider gives you. A wrong name, value or priority can stop the service working.

DNS record types and what they are used for
Record	What it does	Common use
`A`	Points the domain or a subdomain to an IPv4 server address	Website hosting
`AAAA`	Points the domain or a subdomain to an IPv6 server address	Hosting on IPv6
`CNAME`	Points one hostname to another hostname instead of an IP address	`www`, apps and hosted services
`MX`	Sends incoming email to the mail servers, in order of priority when there are several	Business email
`TXT`	Holds text for provider verification, email authentication and other policies	SPF and ownership checks
SPF	Lists the systems allowed to send email for the domain, published as a TXT record	Reducing sender spoofing
DKIM	Publishes a public key, as TXT or CNAME, so receiving servers can check signed messages	Email authentication

Email forwarding is a service, not a record type. It sends mail for an address at your domain to another mailbox, and its DNS and forwarding settings must be set up together.

Do not guess email records

Use the exact MX priorities, SPF policy, DKIM selector and verification values from your email provider. Two SPF records at the same hostname can also cause authentication failures.

See email plans

Connecting Cloudflare

Cloudflare answers for the domain once its two nameservers replace the current ones in My Domains.

Add the domain to Cloudflare
Add the full .gy domain and choose the account or plan you want to use.
Check the existing records
Confirm the website, email, verification and subdomain records before you change the nameservers.
Replace both nameservers
Copy the two nameservers Cloudflare assigns into My Domains and remove the previous pair.
Reconnect DNSSEC
Remove old DS data where needed, then turn on DNSSEC at Cloudflare and publish the new DS values.

Proxy normal website records where it suits. Keep mail, DKIM and most verification records set to DNS only, unless the service provider says otherwise.

Connecting cPanel hosting

Point the whole domain at the host's nameservers, or keep DNS where it is and point only the records you need at the cPanel server.

Use the host's nameservers: For when the cPanel host should hold all website and email records. Copy the nameservers from the hosting welcome email or account panel, add the domain to the right cPanel account, check that its DNS zone has the records you expect and recreate any outside email or verification records.
Keep DNS elsewhere: For when Cloudflare or managed DNS should stay in charge. Add an A record for the domain with the cPanel server IP, point www with the record the host gives you, keep MX on your email provider and add any verification or SSL records the host asks for.

See cPanel hosting Get connection help

Propagation and caching

Resolvers keep an answer until its TTL runs out. For a while after a change, some networks see the new value and others the old one.

Record changes: Often show sooner, because only one cached record has to expire.
Nameserver changes: Can take longer, because the delegation and the whole zone are changing.
Local caches: Browsers, operating systems, routers and internet providers can each keep old results.
TTL: Lowering the TTL before a planned change can shorten later caching, where the provider allows it.

After a change, test each service

The website at the bare domain and at www
Sending and receiving email
Important subdomains
The public A, AAAA, CNAME, MX and TXT answers
From another network or a mobile connection
That DNSSEC does not return SERVFAIL

DNSSEC

DNSSEC signs DNS data so validating resolvers can spot forged or altered answers. It needs matching information at your DNS provider and at the .gy registry.

What it protects: Resolvers can check that an answer came from the expected signed zone and was not changed on the way.
Provider keys and the DS record: Your DNS provider creates the signing keys. The matching DS record is then published at the registry through your registrar.
Changing DNS provider: Remove or replace the old DS record in the right order. A mismatch can make the domain fail validation.

Important: publish a DS record only once the matching keys are active at your DNS provider. Do not leave the old provider's DS record in place after its signed zone is removed.

Troubleshooting

Check one layer at a time. Correct nameservers do not mean the records, caches and DNSSEC are also correct.

Check in this order

Nameservers
The domain points to the DNS provider you expect.
Website and email records
The records exist at that provider, with the right names and values.
Caches and TTL
The previous TTL has had time to run out.
DNSSEC and DS records
The DS record at the registry matches the keys at the current provider.

Common problems

Website does not load: Confirm the nameservers, the A or AAAA record for the domain, the www record and that the domain is added to the hosting account.
Email stopped working: Check the MX priorities, SPF, DKIM and verification records, and that the new provider has every previous mail setting.
Cloudflare stays pending: Check that both assigned nameservers are entered exactly and that none from the previous provider remain.
Domain returns SERVFAIL: Review the DS record. Old or wrong DNSSEC data can make validating resolvers reject answers that are otherwise correct.
Only some visitors see the change: Recheck the public DNS answer and let the previous TTL expire in browser, router and internet provider caches.
A verification record fails: Confirm the hostname, record type and exact value, then remove stray quotation marks, spaces or duplicate records.

Review domain settings Contact DNS support

Questions about DNS

Something not covered here? Contact us.

How do I change .gy domain nameservers?

Sign in to Revamped GY, open My Domains, select the domain, open the nameserver controls, enter the exact nameservers supplied by the DNS or hosting provider and save the change. Allow time for DNS caches to update.

What is the difference between nameservers and DNS records?

Nameservers decide which DNS provider is authoritative for the domain. DNS records are then created inside that provider to direct the website, email and other services.

Can I connect a .gy domain to Cloudflare?

Yes. Add the domain to Cloudflare, verify the imported DNS records, copy the two Cloudflare nameservers and replace the current nameservers in My Domains. Review DNSSEC carefully during the change.

Can I connect a .gy domain to cPanel hosting?

Yes. Use the nameservers supplied by the cPanel host or keep the current DNS provider and point the required A, CNAME, MX and TXT records to the hosting account.

What does an A record do?

An A record points a hostname such as the root domain or www to an IPv4 address used by a website, server or other service.

What is an AAAA record?

An AAAA record performs the same basic function as an A record but points the hostname to an IPv6 address.

Which DNS records are needed for email?

Email normally requires MX records for mail delivery together with TXT or CNAME records for SPF, DKIM, verification and other provider-specific settings.

How long does DNS propagation take?

Some changes appear quickly, while cached results can remain for several hours. Nameserver changes can take longer than individual record changes, and the exact timing depends on previous TTL values and resolver caches.

What is DNSSEC?

DNSSEC adds cryptographic signatures that allow compatible resolvers to verify DNS responses. The DNS provider keys and the registry DS record must match or the domain can return validation errors.

Why did email stop after changing nameservers?

The new DNS provider may not contain the previous MX, SPF, DKIM and verification records. Recreate every required email record before or immediately after changing nameservers.

Manage your nameservers and DNS

Open My Domains to change nameservers, use the DNS controls and connect your website or email.

Open My Domains Register a .gy domain

DNS guidance reviewed October 2026. Use the exact values from your hosting, DNS or email provider. Their instructions and your live domain settings apply to each set-up.