A, AAAA, CNAME, MX, NS, TXT, SPF, DKIM, DMARC
Content hashing catches every modification
DNS monitoring included at every tier
Why DNS Monitoring Matters
The Hidden Risk
- ✗DNS hijacking: Attackers redirect your domain to phishing sites
- ✗Email spoofing: Missing SPF/DKIM lets attackers send as your domain
- ✗Accidental changes: One wrong record breaks email or website routing
- ✗Silent failures: DNS issues often go unnoticed for days
With Lemwatch DNS Monitoring
- Instant alerts on any DNS record change
- Email authentication validated automatically
- Before/after comparisons for every change
- DNSSEC status tracked continuously
Complete DNS Visibility
From A records to DMARC policies, monitor your entire DNS infrastructure from one dashboard.
Complete DNS Record Tracking
Monitor A, AAAA, CNAME, MX, NS, and TXT records. Get alerted the moment any record changes unexpectedly.
SPF, DKIM & DMARC Validation
Verify your email authentication records are correctly configured. Detect missing or invalid SPF, DKIM, and DMARC policies.
Change Detection Alerts
Automatic notifications when DNS records change. Catch unauthorized modifications, hijacking attempts, or accidental misconfigurations.
DNSSEC Monitoring
Verify DNSSEC is enabled and properly configured. Protect against DNS spoofing and cache poisoning attacks.
Nameserver Tracking
Monitor which nameservers are authoritative for your domain. Detect unexpected NS record changes that could indicate domain hijacking.
MX Record Validation
Ensure your mail exchange records point to the right servers. Catch email routing issues before they cause delivery failures.
Historical Record Comparison
Compare current DNS records against previous snapshots. Hash-based change detection ensures nothing slips through unnoticed.
Propagation Monitoring
Track DNS changes as they propagate across global resolvers. Know exactly when your changes take effect worldwide.
How DNS Monitoring Works
Automatic discovery and continuous protection
Add Your Domain
Enter any domain and Lemwatch automatically discovers and catalogs all DNS records — A, MX, TXT, CNAME, and more.
Continuous Monitoring
Records are checked regularly and compared against previous snapshots using content hashing for precise change detection.
Instant Change Alerts
When any record changes, you're notified immediately with before/after comparisons so you can verify legitimacy.
DNS Monitoring FAQ
Common questions about DNS monitoring
Protect Your DNS Infrastructure
Detect unauthorized changes, validate email auth, and monitor DNSSEC. Free forever — no credit card required.
Explore More
Domain Expiry Monitoring
Never let a domain expire unexpectedly
SSL Monitoring
Track SSL certificate health and expiry
Security Headers
Analyze and improve security headers
Uptime Monitoring
24/7 site availability monitoring
Malware Detection
Detect malware and blacklist status
For DevOps
How DevOps teams use Lemwatch
Quick answer
How do I get alerted when a DNS record changes?
Resolve the records you care about on a schedule, hash the answer set, and alert when the hash changes — that catches hijacks, bad migrations and silent mail breakage.
- Records watched: A, AAAA, CNAME, MX, NS, TXT
- Detection method: Hash comparison against the previous resolved answer
- Why it matters: An MX or NS change can break mail or traffic with no visible downtime
- Related checks: SPF, DKIM, DMARC and domain expiry
How the alternatives compare
Public pricing, checked 2026-09-14. Choose whichever fits — the facts are the same wherever you read them.
| Tool | Free tier | Entry price | Fastest check | Choose it when |
|---|---|---|---|---|
| Lemwatch | Yes — 10 sites | $19/mo | 60s | You want uptime, SSL, DNS, visual and SEO checks in one place. |
| Oh Dear | Trial only | $22/mo | 1 min | You run Laravel/PHP and want the application-health-check integration Oh Dear pioneered. |
| Site24x7 | Yes | $9/mo | 1 min | You want a single Zoho-family vendor covering server + network + basic web monitoring. |