Guides
Watch a domain’s DNS records
Be told when a domain’s records change: a hijacked domain, a wrong edit at the registrar or a mail setting that disappeared.
What it checks
Records
A, AAAA, MX, TXT, NS and CNAME, read over encrypted DNS (Cloudflare DNS over HTTPS), so your local network cache does not hide a change.
Changes
The first answer becomes the reference. Any later difference is reported as “Changed: new (was old)” until you accept the new records.
What each status means
- UpThe records match the reference.
- DownA record changed, or the domain does not exist (NXDOMAIN).
Add one, step by step
- 1
Enter the domain
Just the name, such as example.com or mail.example.com, without https://.
- 2
Pick the records
A, MX and NS are selected by default. Add TXT to watch SPF, DKIM and verification records, AAAA for IPv6, CNAME for an alias.
- 3
Save, then accept expected changes
When you change your DNS on purpose, open the monitor in the Mac app and click “Accept the new records”.
Every setting
The same settings appear in the Mac app and on the website. You can change them later, from either side.
- Domain
- The name to look up.
- Records to watch
- Any of A, AAAA, MX, TXT, NS, CNAME.
- Check
- 15 minutes by default: records rarely change.
Tips
- Watch NS on every domain you own: a changed name server is the first sign of a hijacked domain.
- Watch MX and TXT on the domain you send email from: a lost SPF record sends your mail to spam.
Questions
My records rotate between several IPs.
Some providers answer with changing addresses. Watch NS and MX on that domain instead of A.
Add a DNS monitor
Your Mac starts checking it within minutes. You can change every setting later.
Add it now