---
title: "DNS Diagnostics — Lemwatch Help"
description: "Monitor DNS records, email authentication, and detect DNS changes."
canonical: "https://lemwatch.com/help/dns-diagnostics"
source: "https://lemwatch.com"
---

# DNS Diagnostics

> Monitor DNS records, email authentication, and detect DNS changes.

## DNS Diagnostics

### What LemWatch Checks

- A/AAAA records — Your server IP addresses

- CNAME records — Aliases and CDN configuration

- MX records — Email server routing

- NS records — Nameserver configuration

- TXT records — Verification and policy records

### Email Authentication

 LemWatch checks critical email authentication records:

- SPF — Sender Policy Framework (which servers can send email for your domain)

- DKIM — DomainKeys Identified Mail (email signature verification)

- DMARC — Domain-based Message Authentication (policy for failed checks)

 Missing or misconfigured email authentication can lead to your emails being marked as spam.

### DNS Change Detection

 LemWatch hashes your DNS records and compares them between checks. If any records change unexpectedly, you'll receive an alert. This helps detect:

- Unauthorised DNS modifications

- CDN configuration drift

- Domain hijacking attempts

- Accidental record deletions

### Where to Find It

 Navigate to your site's **DNS** tab to see current records and change history.


## Related

- [Help centre](https://lemwatch.com/help)
- [SSL Certificate Monitoring](https://lemwatch.com/help/ssl-monitoring)
- [Understanding Your Security Grade](https://lemwatch.com/help/security-grade)
- [Bulk Operations](https://lemwatch.com/help/bulk-operations)
- [Referral Program](https://lemwatch.com/help/referral-program)
- [Lemwatch pricing](https://lemwatch.com/pricing)
- [DNS MX record check](https://lemwatch.com/help/dns-mx-record-check)
- [DNS CNAME change check](https://lemwatch.com/help/dns-cname-change-check)