MERLONIX

DNS monitoring

Understanding DNS Drift Alerts

dnsalertsdriftmonitoring

What is DNS drift?

DNS drift occurs when DNS records for your domain change unexpectedly. Merlonix monitors A, AAAA, CNAME, MX, NS, TXT, CAA, and SRV records.

Change classes that trigger alerts

  • provider_migration (critical): A/AAAA records move to a different host or CDN
  • ns_change (critical): Nameserver changes — highest risk for domain hijack
  • caa_edit (warning): CAA records control which CAs can issue certs for your domain
  • record_add_remove (warning): Records added or removed unexpectedly
  • parking_or_hijack (critical): Records point to known parking or sinkhole IPs

Benign changes (no alert)

  • ttl_only: Only the TTL changed, values identical
  • cdn_reshuffle: A/AAAA rotated within the same CDN
  • verification_record_added: Google/Stripe/Microsoft TXT verification records

More in DNS monitoring

Try it on your own sites

Point Merlonix at your client domains and watch SSL, DNS, uptime, and vendor status from one dashboard. Start the full workspace free, no credit card.

Start free for 14 daysOr start free — $0← All help articles