Vintrace DNS_PROBE_FINISHED_NXDOMAIN Errors

Incident Report for Encompass Technologies

Postmortem

Incident report: vintrace domain registration lapse

Summary

On 23 October 2026, all vintrace domains stopped resolving for about 60 minutes after the domain registration lapsed following a change to the renewal process. Users trying to reach vintrace and related sites got a DNS_PROBE_FINISHED_NXDOMAIN error. Renewing the domain restored service. The incident was contained 30 minutes after it began and fully resolved at 60 minutes.

Root cause

The vintrace domain registration lapsed because a change to the renewal and billing process stopped the scheduled renewal from completing. Once the registration expired, the registry stopped publishing the domain's name servers, so every hostname under the domain returned NXDOMAIN.

Contributing factors

  • No expiry monitoring: Nothing alerted us that the domain was about to expire, so the first sign of the problem was user reports.
  • Process change without a handoff: DevOps and IT share the registrar account. When the process changed, nobody was clearly assigned to receive renewal notifications.
  • Initial diagnosis path: The first report suggested a DNS key change, so the team didn't check registrar status first. This delayed identifying the cause.

Resolution

The domain was renewed, and DNS resolution recovered as the name servers propagated again. Full resolution came 30 minutes after containment.

Preventive measures

To prevent this from happening again, DevOps is setting up external monitoring of domain registration expiry. This monitoring runs separately from billing and accounting processes and checks registration status directly with the registrar. That way, we'll get warning of an upcoming expiry even if payment or renewal workflows change again.

Posted Oct 23, 2026 - 15:43 MDT

Resolved

Impact
All vintrace customers lost access to every vintrace web domain for about 60 minutes. Browsers returned DNS_PROBE_FINISHED_NXDOMAIN; clearing cache, clearing cookies and incognito did not help, because the name itself no longer resolved.
• Scope: global; every vintrace and adjacent vintrace domain
• Duration: about 30 minutes to containment, 60 minutes to full resolution.
Posted Oct 23, 2026 - 09:00 MDT