How to Investigate Unexpected Changes to Website DNS During an Incident

A DNS change can redirect users, disrupt services, or be part of a legitimate migration or a security event.

Checks to make

Preserve provider audit logs, identify the actor and account session, compare changes with approved records, and verify current authoritative answers. Restore trusted values through a controlled process and review registrar and DNS account access.

When to get help

Incident response can investigate DNS history and coordinate controlled restoration. Informatix Systems can assess the symptoms, evidence, and next steps. Contact Informatix Systems to discuss this issue.