DNS change monitoring to catch hijacked domains

Hijacking a domain only takes a DNS change, and the website is left as it is. Visitors and your client's email go elsewhere, while the original server keeps running.

The site works, but the domain points somewhere else.

With a stolen login to the registrar, nameservers or MX records change in a minute. The original site stays online and every uptime check on the server passes.

Meanwhile visitors see a copy of the site, or someone else reads your client's email.

A snapshot of the DNS, taken again every day.

  1. First reading

    When you add the site we save its nameservers and A, AAAA, MX and TXT records.

  2. Comparison

    Every day we read the records again and compare them with the saved ones.

  3. Alert

    A new nameserver or a different MX triggers an alert with the old value and the new one.

Want to try it on a real site? The 30-day trial needs no credit card.

Start free trial

Frequently asked questions

Do I get an alert for changes I make myself?

Yes. Every change comes with the old and new values, so you spot the planned ones at once. A nameserver change is always critical.

Does DNS monitoring need the plugin?

No, DNS records are public and we read them from outside.

Try it on your clients' sites.

Connect your first sites today and see what SitePing finds on them.

  • Every Complete feature except backups
  • Up to 10 sites
  • No credit card needed to start
  • At the end you choose a plan or move to Free, and nothing is charged
Start the 30-day trial

Already have an account? Log in. Prefer to look at one site first? Free read-only audit.