Did someone change my DNS records?

Short answer: a single DNS change can take down a website or email, and DNS is often edited by more than one person: you, a developer, an agency, or a tool that "just needs one record". If nobody tells you, the first sign is the site or email breaking.

How to check it yourself

1. In the Cloudflare dashboard, open Manage Account, then Audit Log, and filter for DNS record changes.
2. Note what changed, when, and by whom.
3. Compare your current records with a known-good list. Export one now from the DNS page so you have it next time.
4. Ask whoever made an unexpected change what it was for before you undo it.

What Preventionlabs shows

With a read-only Cloudflare token connected, Preventionlabs takes a snapshot of your DNS records every hour and reports any record added, removed or changed since, with the time. For example, from a real report: "changed CNAME dceaustralia.com: dceaustralia.pages.dev -> dce-lab.pages.dev". It also shows other changes made in the Cloudflare account in the last 72 hours, from its change log.

Price

First report free, no card needed. Then A$50 a month, up to 10 domains.

Run your first report free

More questions it answers

• Who changed my Cloudflare settings?
• What changed right before my website broke?
• Which pages on my site return errors to visitors?
• All questions