DNS failures are catastrophic and immediate
DNS hijacking redirects your customers to phishing sites that steal credentials and payment information. Attackers compromise your registrar account, change your A records, and suddenly example.com points to their malicious server. Your customers think they're on your site - they're not.
Accidental DNS changes during hosting migrations break everything. Change the wrong A record and your site becomes unreachable worldwide. Delete an MX record and all company email stops - no incoming messages, all external emails bounce, support tickets never arrive.
Wrong DNS settings persist for hours or days due to caching. Even after fixing DNS records, old (broken) values remain cached across the internet for the TTL period. The damage compounds: lost sales, customer support overload, email communication blackout, reputation damage.
We check all your DNS records every few hours - A, AAAA, MX, TXT, CNAME, NS - across all your nameservers. When any record changes, you'll know immediately, whether it was authorized or malicious.
Stop manually checking DNS records
Most teams check DNS one of these ways: running dig/nslookup commands occasionally (requires remembering and technical knowledge), using free DNS lookup tools when something breaks, checking registrar dashboards manually, or discovering DNS issues when customers report the site is down.
Manual checking doesn't catch unauthorized changes in real-time. By the time you notice DNS hijacking, attackers have already redirected your traffic for hours. By the time you discover a wrong MX record, you've lost a day's worth of email.
Free DNS tools check DNS at a single moment when you remember to run them. They don't monitor continuously. They don't alert you. They don't show DNS history. You only find out something changed when you think to check - usually after problems start.
We check your DNS automatically every few hours from multiple locations. You'll get alerts within minutes of any DNS change - authorized migrations, accidental changes, or malicious hijacking. Fix issues before they cascade into complete outages.
Check all nameservers and all record types
Most DNS tools query a single nameserver and show you a snapshot. We're different: we check every authoritative nameserver for your domain, comparing results to catch inconsistencies. If one nameserver has different records than the others, you'll know immediately.
We monitor all DNS record types - A, AAAA, MX, TXT, CNAME, NS, SOA - not just your website's A record. This catches MX record changes that break email, TXT record modifications that break email authentication (SPF/DKIM), CNAME changes that break subdomains, and NS record changes that indicate potential hijacking.
DNS history shows exactly what changed and when. Compare current records to past snapshots. Prove when unauthorized changes happened. Roll back to previous configurations. See which records existed before a migration broke things.
Zero configuration required. Add your site to Oh Dear and we auto-detect all DNS records from all nameservers. We'll monitor everything automatically, alerting you the moment any record changes.
| Component | Value |
|---|---|
| Url | https://urlxyz.com |
| Error description | Operation timed out after 5001 milliseconds with 0 bytes received |
Downtime verified from Paris, France and Bangalore, India
Downtime verified from Paris, France and Bangalore, India
urlxyz.com has recovered after 2m. full report: https://ohdear.app/monitors/83/checks/411
urlxyz.com seems down! Error: HTTP/500 Downtown verified from Paris, France and Frankfurt
Pushover has been successfully enabled. We'll notify you when something goes wrong.
urlxyz.com has recovered after 2m. full report: https:/ohdear.app/monitors/83/checks/411
urlxyz.com has recovered after 2m. full report: https:/ohdear.app/monitors/83/checks/411
Text messages for urlxyz.com have been successfully enabled. We'll notify you when something goes wrong.
$_TOKEN="your API token" $ curl -X GET "https://notifyservicexyz.com/api/alert/urlxyzcom" \ -H "Authorization: Bearer $_TOKEN" \ -H "Accept: application/json" \ -H "Content-Type: application/json"
urlxyz.com has recovered after 2m. full report: https://app.opsgenie.com/monitors/83/checks/411
urlxyz.com seems down! Error: HTTP/500 Downtown verified from Paris, France and Frankfurt
Opsgenie has been successfully enabled. We'll notify you when something goes wrong.
urlxyz.com has recovered after 2m. full report: https://pagerduty.com/monitors/83/checks/411
urlxyz.com seems down! Error: HTTP/500 Downtown verified from Paris, France and Frankfurt
PagerDuty has been successfully enabled within Oh Dear. Notifications are enabled.
Choose how we let you know
Receive our notifications on your preferred platform. Via email, SMS, Slack, Discord, Opsgenie, Microsoft Teams, Pushover, webhooks,… we can notify you wherever your team is active.
Take notifications to the next level: only notify who needs notifying by assigning responsibilities to different team members.
What DNS monitoring checks (and what it doesn't)
DNS monitoring excels at tracking DNS record changes across all nameservers. We check every record type (A, AAAA, MX, TXT, CNAME, NS, SOA) and alert you immediately when any record changes - whether authorized or malicious.
What it checks: all DNS record types, all authoritative nameservers, DNS record history over time, nameserver consistency, and DNS resolution failures.
What it doesn't check: domain expiration (we have separate monitoring for that), whether your site is actually up (uptime monitoring handles that), SSL certificate validity (we monitor certificates separately), or DNS propagation speed (we check records as they exist at nameservers, propagation to resolvers varies).
Think of DNS monitoring as your early warning system for DNS changes. It catches unauthorized modifications, migration mistakes, and hijacking attempts. Combine it with uptime monitoring to know if DNS changes actually work.
Who needs DNS monitoring?
Teams migrating hosting or CDN providers where DNS changes are critical and mistakes break everything. Wrong A records make your site unreachable. Wrong CNAME breaks your CDN.
Companies after security incidents needing to prevent DNS hijacking. If your registrar account was ever compromised, attackers can return and modify DNS to redirect your traffic.
Teams with complex DNS setups (multiple subdomains, email servers, CDNs). More DNS records mean more things that can break. MX records for email, TXT records for email security, CNAME for subdomains.
Agencies managing client domains who need to know immediately if a client or their registrar modifies DNS. Your reputation depends on client sites staying accessible.
Anyone using email where MX record changes mean complete email blackouts. No incoming customer emails, all outbound bounces, support tickets never arrive.
High-value domains attractive to hijackers. If your domain is worth stealing, attackers will try. DNS monitoring catches hijacking within hours, not days.
Stop worrying, start monitoring
Start a no-strings-attached 10-day free trial. You're all set in less than a minute. (No credit card needed.)
Not convinced yet? Need help? Get in touch via [email protected].
Monitor only the records that matter
Not all DNS records are equally critical. A and AAAA records point your domain to your server - changes break your site. MX records control email delivery - changes stop all company email. TXT records handle email authentication (SPF, DKIM, DMARC) - changes get you marked as spam or rejected entirely.
Some legitimate services change DNS frequently. DDoS protection services like Cloudflare rotate IP addresses constantly. CDN providers modify CNAME records for traffic management. If you're behind these services, disable A/AAAA or CNAME monitoring to avoid alert fatigue while still catching critical MX or TXT changes.
You can toggle each record type independently per site. Monitor everything for critical domains. Disable noisy record types for sites behind dynamic services. Customize per your infrastructure needs.
Wait, there's even more
Continuous certificate monitoring
SSL certificates are essential in website security. We check all your certificate expiration dates & alert any change we detect.
Performance monitoring
We provide highly detailed performance monitoring and insights. We'll notify you as soon as we detect your website is getting slow.
Fast and insightful notifications
Get notified instantly as soon as we detect an issue or an important change. Enable any channel you use, you're in full control.
Broken page & mixed content
We crawl and index your entire website, just like Google. As soon as we detect a broken link on your site we will let you know.
DNS record monitoring
Receive a notification whenever your DNS records are modified - intentionally or maliciously - so you can act and verify faster.
Application health monitoring
A lot can go wrong inside your app and server. Disk space may fill up, or the database may go down. We'll notify you when something is off.
Beautiful public status pages
In times of crisis, a public status page allows you to communicate to your clients. We'll host your status page so it's always available.
Website uptime monitoring
When your website goes down we'll let you know instantly. Now you can act before your or your client's brand reputation takes a hit.
Domain monitoring
We can check how long your domain is still registered. If your renewal date is close, we'll notify you. This will avoid you losing your domain.
Lighthouse SEO monitoring
We track the speed & performance of your website over time. If we detect your website is suddenly slower, we'll let you know.
Sitemap monitoring
Elevate your SEO strategy and optimize your site. We analyse your sitemap health and check every URL for broken links.
Describe what you want to monitor
AI monitoring
Use AI to verify anything you want on your websites and services with Oh Dear's AI monitoring feature.
Start monitoring instantly
Start a no-strings-attached 10-day free trial. You're all set in less than a minute. (No credit card needed.)
Not convinced yet? Need help? Get in touch via [email protected].