DNS health monitoring + records validation

DNS monitoring is an ongoing (monthly) service: we regularly check your domain DNS health (whether the name servers respond, whether there are resolution errors, whether the response time is normal) and compare the actual values of the key records against a fixed baseline — A/AAAA (where the domain points), MX (mail), TXT (including SPF/DKIM/DMARC), NS (delegation), CNAME and others. If a record changes, disappears, a new one appears or resolution stops working, you immediately get an alert with details. This catches both accidental errors (after panel edits) and alarming situations: A-record spoofing, NS pointed to someone else, the disappearance of SPF/DKIM (which hits email deliverability) — that is, possible signs of DNS hijacking. Honestly about the essence: this is detection and alerting, NOT managing DNS and NOT fixing — we do not edit your zone, do not configure records and do not "fix DNS"; changes are made by you or your DNS provider, our alert only reports that something has drifted. Honestly about the method: DNS by its nature is cached and does not propagate instantly — because of TTL, resolver caches and geo differences the values can temporarily differ across providers; we account for that (we check from several resolvers and wait for confirmation), but instantly capturing every change across the whole internet is not possible. False positives are possible on legitimate changes you made yourself — so we update the baseline by agreement. Coverage is only the configured domains and records; we do not discover new ones automatically — expanding the list is done by a separate agreement with you. Someone must react to an alert: the fix is not part of the service, the DNS remediation itself is your or your provider's area of responsibility. An important boundary: this is outside-in DNS monitoring, not DNS hosting, not zone configuration and not domain management at the registrar. If you have a single domain and records change once in a blue moon, continuous monitoring may be overkill — but for email and important services it pays off with a single prevented incident. Picture this: instead of "email stopped arriving and it turned out a week ago someone removed the DKIM record" you get an alert on the day of the change and restore the record. The base price starts from 7,000 ₽ per month; it depends on the number of domains and records.

• After edits in the DNS panel something breaks and you learn about it late.
• You fear DNS spoofing or hijacking (A record, NS) but cannot track it.
• Email suddenly stops arriving because SPF/DKIM/DMARC disappeared.
• You are not sure the current records match what was intended.

• DNS health check: name-server response, resolution errors, response time
• Record comparison against a baseline: A/AAAA, MX, TXT (SPF/DKIM/DMARC), NS, CNAME
• Alerts on a record changing, disappearing or appearing
• Spoofing/hijacking signs: A spoofing, NS takeover, SPF/DKIM disappearance
• Checking from several resolvers and confirmation (fewer false positives)
• Baseline updates by agreement on legitimate changes
• Monthly continuous operation of the check
• An alert channel of your choice (email, messenger, webhook)

• You quickly learn about a DNS change or failure, not from downed services
• You notice possible DNS spoofing or hijacking earlier
• Lower risk of quietly losing email over disappeared SPF/DKIM
• You know which record drifted to restore it (the edit — by you/the provider)

• We fix the record baseline, agree on domains and the alert channel; collect access to the data
• We set up the DNS health check and record comparison from several resolvers
• We launch continuous monitoring and update the baseline on legitimate changes

• Will you configure and fix my DNS?

  No. This is monitoring: it detects changes and failures and sends an alert. Zone configuration, record edits and remediation are done by your DNS provider or your team; our alert needs to be acted on. We do not touch the records themselves.

• Will you catch any change instantly across the whole internet?

  Not instantly and not everywhere at once. DNS is cached and propagates with a delay (TTL, resolver caches, geo differences), so values can temporarily differ across providers. We check from several resolvers and wait for confirmation, but absolute simultaneity across the whole internet does not exist.

• Will there be false positives if I change a record myself?

  Your legitimate changes will first show a divergence from the baseline — that is expected. So we update the baseline by agreement when you make planned edits; that way real alarms do not drown in noise.