Website, email and DNS security controls

.gy Domain DNS and Nameserver Management

Learn how to change .gy nameservers, connect a .gy domain to Cloudflare or cPanel hosting and manage the DNS records required for websites, professional email, forwarding and DNSSEC.

Nameserver control Managed DNS Email record guidance Mobile self-service
Manage domain DNS Change nameservers

Start with the correct layer

Understand .gy nameservers and DNS records

Nameservers delegate the domain to a DNS provider. That provider then stores the records used by the website, email, verification services and security systems.

Delegation

.gy domain nameservers

Nameservers tell the global DNS system which provider has authority to answer queries for the domain.

  • Use the exact hostnames supplied by the provider
  • Enter the required primary and secondary nameservers
  • Remove obsolete provider entries
  • Review DNSSEC before switching providers

Service routing

.gy domain DNS records

Records inside the authoritative provider direct the website, email, verification and other services.

  • A and AAAA point to server addresses
  • CNAME creates aliases
  • MX directs incoming email
  • TXT carries SPF, verification and policy data
1.gy domainRegistered through Revamped GY
2NameserversSelect the authoritative provider
3DNS recordsRoute website, email and services

Self-service delegation changes

How to change .gy domain nameservers

Prepare the new DNS provider first, then replace the nameservers from My Domains. This reduces the risk of website or email interruption.

1

Sign in and open My Domains

Use the Revamped GY account that manages the domain, then select the correct .gy name from the dashboard.

2

Confirm the new DNS provider

Collect the exact nameservers supplied by Cloudflare, cPanel hosting or another authoritative DNS provider.

3

Copy the existing DNS records

Before changing delegation, confirm that website, email, verification and security records exist at the new provider.

4

Replace and save the nameservers

Enter the nameservers exactly as supplied, remove obsolete entries and submit the update from the domain controls.

5

Verify website, email and DNSSEC

Allow caches to update, then test the website, mail delivery, public DNS records and DNSSEC validation where enabled.

Open My Domains Get DNS support

Record management from your dashboard

Use Revamped GY Managed DNS

Managed DNS gives you a self-service record editor without moving the domain to an unrelated provider. Turn it on for an eligible domain, then create and update supported DNS records from the dashboard.

One dashboardManage the domain, DNS, renewal and related services together.
Record editorCreate A, AAAA, CNAME, MX and TXT records yourself.
Email forwardingConfigure supported forwarding destinations without a full mailbox.
Email DNS assistanceSupported Revamped GY email services can publish required records automatically.

Records used by websites and email

.gy DNS record types explained

Use the values supplied by the website, hosting, email or verification provider. Incorrect record names, destinations or priorities can prevent the service from working.

A

IPv4 address

Points the root domain or a subdomain to an IPv4 server address.

Common use: website hosting
AAAA

IPv6 address

Points the root domain or a subdomain to an IPv6 server address.

Common use: IPv6-enabled hosting
CNAME

Hostname alias

Points one hostname to another hostname rather than directly to an IP address.

Common use: www, apps and hosted services
MX

Mail delivery

Directs incoming email to the mail servers and uses priority values where several servers exist.

Common use: professional email hosting
TXT

Policies and verification

Stores text used for provider verification, email authentication and other domain policies.

Common use: SPF and ownership checks
SPF

Authorised senders

An SPF policy is normally published as a TXT record that identifies approved outbound mail systems.

Common use: reduce sender spoofing
DKIM

Signed email

DKIM publishes a public key through TXT or CNAME so receiving servers can validate signed messages.

Common use: email authentication
FWD

Email forwarding

Forwarding sends messages addressed to the domain to another mailbox. The DNS and forwarding service must be configured together.

Common use: aliases without full mailboxes

Do not replace email records with guessed values

Use the exact MX priorities, SPF policy, DKIM selector and verification values supplied by the email provider. Multiple SPF records at the same hostname can also cause authentication problems.

View email hosting

External DNS and proxy service

Connect a .gy domain to Cloudflare

Cloudflare becomes the authoritative DNS provider after its assigned nameservers replace the current nameservers at Revamped GY.

01

Add domain to Cloudflare

Add the full .gy domain to Cloudflare and select the account or plan you want to use.

02

Verify existing DNS records

Confirm the website, email, verification and subdomain records before changing delegation.

03

Update both nameservers

Copy the two assigned Cloudflare nameservers into My Domains and remove the previous pair.

04

Reconnect DNSSEC safely

Remove obsolete DS data when required, then enable Cloudflare DNSSEC and publish the new DS values.

Connect the domain to a website account

Connect a .gy domain to cPanel hosting

You can delegate the whole domain to the hosting provider’s nameservers or keep DNS elsewhere and point only the required records to the cPanel server.

Option 1

Use the hosting nameservers

Choose this when the cPanel host should manage all website and email DNS records.

  • Copy the nameservers from the hosting welcome email or account panel
  • Add the domain to the correct cPanel account
  • Confirm the DNS zone contains the expected records
  • Recreate any external email or verification records

Option 2

Keep DNS elsewhere

Choose this when Cloudflare or Managed DNS should remain authoritative.

  • Create an A record for the root domain using the cPanel server IP
  • Point www using the record supplied by the host
  • Keep MX records directed to the intended email provider
  • Add verification or SSL records when requested
View cPanel hosting Get connection help

Why different users can see different results

Understand DNS propagation and caching

DNS resolvers cache previous answers for the record’s TTL. After a change, some networks may use the new value while others temporarily continue using the cached value.

Record changesOften update sooner because only one cached record needs to expire.
Nameserver changesCan take longer because delegation and the complete zone source are changing.
Local cachingBrowsers, operating systems, routers and internet providers can each retain results.
TTL planningLowering TTL before a planned change can reduce later cache duration where the provider permits it.

Cryptographic DNS protection

Protect your .gy domain with DNSSEC

DNSSEC signs DNS data so compatible resolvers can detect forged or altered responses. It requires matching information at both the DNS provider and the .gy registry.

What DNSSEC protects

DNSSEC helps resolvers verify that the DNS answer came from the expected signed zone and was not modified in transit.

Provider keys and registry DS

The authoritative DNS provider creates signing information. The matching DS record must then be published through the registrar.

Changing DNS providers

Remove or replace obsolete DS information in the correct sequence. A mismatch can make the domain fail validation.

Important: Do not publish a DS record until the corresponding DNSSEC keys are active at the authoritative provider. Do not leave the previous provider’s DS record active after its signed zone is removed.

Common DNS connection problems

.gy DNS and nameserver troubleshooting

Diagnose one layer at a time. Correct nameservers do not guarantee that the website, email records, cached answers or DNSSEC settings are also correct.

Check in this order
  1. 1Nameserver delegation
  2. 2Website and email records
  3. 3DNS cache and TTL
  4. 4DNSSEC and DS records
Review domain settings Contact DNS support

Website

Website does not load

Confirm the authoritative nameservers, root A or AAAA record, www record and hosting account domain assignment.

Email

Email stopped working

Verify MX priorities, SPF, DKIM and verification records, then confirm that the new provider contains every previous mail setting.

Cloudflare

Cloudflare remains pending

Check that both assigned nameservers are entered exactly and that no nameservers from the previous provider remain.

DNSSEC

Domain returns SERVFAIL

Review the DS record. Stale or incorrect DNSSEC information can make validating resolvers reject otherwise correct answers.

Propagation

Only some visitors see the update

Recheck the public DNS answer and allow the previous TTL to expire across browser, router and internet-provider caches.

Verification

Verification record fails

Confirm the hostname, record type and exact value, then remove unintended quotation marks, spaces or duplicate records.

DNS questions answered

.gy domain DNS FAQ

These answers cover nameserver changes, managed DNS, Cloudflare, cPanel, email records, propagation and DNSSEC.

Manage domain DNS
How do I change .gy domain nameservers?

Sign in to Revamped GY, open My Domains, select the domain, open the nameserver controls, enter the exact nameservers supplied by the DNS or hosting provider and save the change. Allow time for DNS caches to update.

What is the difference between nameservers and DNS records?

Nameservers decide which DNS provider is authoritative for the domain. DNS records are then created inside that provider to direct the website, email and other services.

Can I connect a .gy domain to Cloudflare?

Yes. Add the domain to Cloudflare, verify the imported DNS records, copy the two Cloudflare nameservers and replace the current nameservers in My Domains. Review DNSSEC carefully during the change.

Can I connect a .gy domain to cPanel hosting?

Yes. Use the nameservers supplied by the cPanel host or keep the current DNS provider and point the required A, CNAME, MX and TXT records to the hosting account.

What does an A record do?

An A record points a hostname such as the root domain or www to an IPv4 address used by a website, server or other service.

What is an AAAA record?

An AAAA record performs the same basic function as an A record but points the hostname to an IPv6 address.

Which DNS records are needed for email?

Email normally requires MX records for mail delivery together with TXT or CNAME records for SPF, DKIM, verification and other provider-specific settings.

How long does DNS propagation take?

Some changes appear quickly, while cached results can remain for several hours. Nameserver changes can take longer than individual record changes, and the exact timing depends on previous TTL values and resolver caches.

What is DNSSEC?

DNSSEC adds cryptographic signatures that allow compatible resolvers to verify DNS responses. The DNS provider keys and the registry DS record must match or the domain can return validation errors.

Why did email stop after changing nameservers?

The new DNS provider may not contain the previous MX, SPF, DKIM and verification records. Recreate every required email record before or immediately after changing nameservers.

Manage your .gy nameservers and DNS

Open My Domains to update nameservers, use supported DNS controls and connect your website or email services.

Open My Domains Register a .gy domain

DNS guidance reviewed: June 2026. Use the exact values supplied by the active hosting, DNS or email provider. Live domain settings and provider instructions take precedence for an individual configuration.

Contact Us

Contact Us
Secret Link