Back to blog
hostingmonitoringdns

How to Monitor Website Hosting Changes

Learn how to monitor website hosting changes for competitor intelligence, security, and M&A due diligence. Covers DNS monitoring and API-based tracking.

Piotr Kulpinski
Piotr Kulpinski
23 Apr 20267 min read
How to Monitor Website Hosting Changes

Websites change hosting providers more often than you might expect — whether it's a competitor migrating to a faster CDN, a client silently switching providers, or a portfolio company making infrastructure changes without notifying stakeholders. We've tracked hosting changes across hundreds of domains, and knowing how to monitor website hosting changes gives you actionable intelligence for competitive analysis, security monitoring, and due diligence.

Quick Answer: To monitor website hosting changes, periodically check a domain's A records, nameservers, and IP geolocation using a hosting checker tool. Compare results over time to detect provider switches. For automated monitoring, use the Hosting Checker API to run scheduled lookups and compare historical results — changes in IP address, nameservers, or hosting provider indicate a migration.

Why Track Hosting Changes?

Before diving into the methods, here's why tracking hosting changes matters across different use cases:

Competitive intelligence

When a competitor switches from shared hosting to AWS or migrates to Cloudflare's CDN, that signals an investment in performance and scalability. Tracking these changes reveals technology strategies, growth signals, and infrastructure decisions that inform your own competitive positioning.

Security monitoring

Unauthorized DNS or hosting changes can indicate a compromised domain — an attacker redirecting traffic through their own servers to intercept data or serve malicious content. Monitoring your own domains for unexpected hosting changes is a basic security hygiene practice.

M&A due diligence

When evaluating an acquisition, the target company's hosting infrastructure affects valuation. Monitoring hosting changes during the due diligence period reveals whether the company is stable or actively migrating — and whether the infrastructure matches what's been represented.

Client and portfolio management

Agencies and holding companies managing multiple websites need to know when a domain's hosting changes — whether it's an authorized migration or an accidental lapse. Hosting changes can affect performance SLAs, compliance requirements, and support responsibilities.

What Changes to Monitor

A hosting migration typically changes one or more of these DNS and infrastructure elements:

ElementWhat to WatchIndicates
A/AAAA recordsIP address changesServer or provider migration
NS recordsNameserver changesDNS provider switch (often accompanies full migration)
CNAME recordsAlias target changesCDN or platform migration
MX recordsMail server changesEmail provider switch
IP geolocationLocation/ASN changesData center or region migration
Hosting providerIdentified provider changesFull hosting migration

For background on these record types, see our complete guide to DNS records.

Method 1: Manual Periodic Checks

The simplest approach is to manually check a domain's hosting information at regular intervals and compare the results.

Using Hosting Checker

Enter any domain to see its current hosting provider, IP address, DNS records, and SSL certificate details — all in one lookup.

Try it yourself

Check any website's hosting

Enter a domain or IP to see hosting provider, DNS records, and more.

Record the following for comparison:

  • IP address (A record)
  • Nameservers (NS records)
  • Hosting provider identification
  • SSL certificate issuer

To learn more about identifying hosting providers, see our guide on how to find out who hosts a website.

Using command line tools

Run periodic DNS lookups and save the output for comparison:

# Check A record (IP address)
dig example.com A +short
 
# Check nameservers
dig example.com NS +short
 
# Check IP geolocation
curl -s ipinfo.io/93.184.216.34

For a full walkthrough of DNS lookup commands, see how to find DNS records for any domain.

From our experience, manual checks work for monitoring a handful of domains but become impractical at scale. For ongoing monitoring of multiple domains, automation is essential.

Method 2: Automated DNS Monitoring Scripts

You can build a simple monitoring script that checks DNS records on a schedule and alerts you when something changes.

Basic hosting change detection script

#!/bin/bash
DOMAIN="example.com"
RECORD_FILE="/tmp/${DOMAIN}_dns.txt"
 
# Get current A record
CURRENT_IP=$(dig +short $DOMAIN A | head -1)
 
# Compare with stored value
if [ -f "$RECORD_FILE" ]; then
    PREVIOUS_IP=$(cat "$RECORD_FILE")
    if [ "$CURRENT_IP" != "$PREVIOUS_IP" ]; then
        echo "ALERT: $DOMAIN IP changed from $PREVIOUS_IP to $CURRENT_IP"
        # Add notification logic here (email, Slack webhook, etc.)
    fi
fi
 
# Store current value
echo "$CURRENT_IP" > "$RECORD_FILE"

Run this with cron on a schedule (e.g., every hour):

0 * * * * /path/to/check-hosting.sh

Monitoring multiple domains

Extend the script to loop through a list of domains:

#!/bin/bash
DOMAINS=("competitor1.com" "competitor2.com" "client-site.org")
 
for DOMAIN in "${DOMAINS[@]}"; do
    RECORD_FILE="/tmp/${DOMAIN}_dns.txt"
    CURRENT_IP=$(dig +short $DOMAIN A | head -1)
    CURRENT_NS=$(dig +short $DOMAIN NS | sort | tr '\n' ',')
 
    CURRENT_STATE="${CURRENT_IP}|${CURRENT_NS}"
 
    if [ -f "$RECORD_FILE" ]; then
        PREVIOUS_STATE=$(cat "$RECORD_FILE")
        if [ "$CURRENT_STATE" != "$PREVIOUS_STATE" ]; then
            echo "CHANGE DETECTED: $DOMAIN"
            echo "  Previous: $PREVIOUS_STATE"
            echo "  Current:  $CURRENT_STATE"
        fi
    fi
 
    echo "$CURRENT_STATE" > "$RECORD_FILE"
done

This approach detects IP and nameserver changes but doesn't identify the hosting provider. For that, you need a service that maps IP addresses to providers.

Method 3: Using the Hosting Checker API

For comprehensive website migration monitoring that identifies hosting providers (not just IP changes), the Hosting Checker API provides structured hosting data you can query programmatically.

API lookup example

curl -H "Authorization: Bearer YOUR_API_KEY" \
  "https://hostingchecker.org/api/v1/check?query=example.com"

The API returns structured data including:

  • Resolved IP addresses
  • Hosting provider identification
  • DNS records (A, AAAA, MX, NS, TXT, CNAME)
  • SSL certificate details
  • IP geolocation (city, region, country, ASN)

Building automated monitoring with the API

Combine the API with a scheduled job to monitor hosting changes across your domain list:

#!/bin/bash
API_KEY="YOUR_API_KEY"
DOMAIN="example.com"
HISTORY_DIR="/var/hosting-monitor"
 
mkdir -p "$HISTORY_DIR"
 
# Fetch current hosting data
RESPONSE=$(curl -s -H "Authorization: Bearer $API_KEY" \
  "https://hostingchecker.org/api/v1/check?query=$DOMAIN")
 
# Extract key fields
CURRENT_IP=$(echo "$RESPONSE" | jq -r '.ip')
CURRENT_HOST=$(echo "$RESPONSE" | jq -r '.hosting.provider')
 
# Compare with previous
PREV_FILE="$HISTORY_DIR/${DOMAIN}.json"
if [ -f "$PREV_FILE" ]; then
    PREV_IP=$(jq -r '.ip' "$PREV_FILE")
    PREV_HOST=$(jq -r '.hosting.provider' "$PREV_FILE")
 
    if [ "$CURRENT_IP" != "$PREV_IP" ] || [ "$CURRENT_HOST" != "$PREV_HOST" ]; then
        echo "HOSTING CHANGE: $DOMAIN"
        echo "  Provider: $PREV_HOST -> $CURRENT_HOST"
        echo "  IP: $PREV_IP -> $CURRENT_IP"
    fi
fi
 
# Store current state
echo "$RESPONSE" > "$PREV_FILE"

Lookup history

Hosting Checker also maintains a lookup history for authenticated users, making it easy to review past results and identify when changes occurred — without building your own storage. Access your history from the dashboard or via the API.

To get started with API monitoring, upgrade to a paid plan for API access, higher rate limits, and full lookup history.

Interpreting Hosting Changes

When you detect a change, the type of change reveals what happened:

Change DetectedLikely Cause
IP address changed, same NS recordsServer migration within the same provider, or new server allocation
NS records changedFull DNS provider migration — often accompanies a hosting switch
IP changed + NS changedComplete hosting migration to a new provider
CNAME target changedCDN or platform switch (e.g., moving to Cloudflare, Vercel, or Netlify)
IP geolocation region changedData center relocation (e.g., moving from US East to EU for latency or compliance)
MX records changedEmail provider migration (may or may not accompany hosting changes)

False positives to watch for

Not every IP change means a hosting migration:

  • CDN IP rotation — Services like Cloudflare rotate edge IPs frequently. The hosting provider hasn't changed; the CDN is rebalancing traffic.
  • Elastic/auto-scaling IPs — Cloud providers (AWS, GCP, Azure) may assign new IPs when instances scale or restart.
  • Load balancer changes — New IPs may appear as a provider adjusts their load balancing configuration.

We've found that the most reliable way to distinguish real migrations from routine changes is to track the identified hosting provider (via the Hosting Checker API) rather than relying solely on IP address changes. A provider change is a definitive signal; an IP change alone is ambiguous.

Frequently Asked Questions

How often should I check for hosting changes?

For competitor monitoring, daily checks are sufficient — hosting migrations are planned events that don't happen hourly. For security monitoring of your own domains, check every 1-4 hours. Critical domains (financial services, healthcare) may warrant even more frequent checks. The Hosting Checker API supports the request volume needed for hourly monitoring across multiple domains.

Can I detect hosting changes in real time?

Not with DNS monitoring alone, since DNS propagation introduces delays. However, you can detect changes within minutes by querying authoritative nameservers directly (bypassing cached resolvers) and checking at short intervals. Real-time detection typically requires integration with your DNS provider's change notification system or a dedicated monitoring service.

What's the difference between a CDN change and a hosting change?

A hosting change means the origin server — where your application runs and data is stored — has moved to a different provider. A CDN change means the edge network serving cached content to visitors has changed, but the origin may remain the same. You can distinguish them by checking whether the origin IP (visible in DNS when CDN is bypassed) has changed, not just the edge IP. Tools like IP lookup help identify what's behind the IP.

How do I monitor hosting changes for free?

Use the manual methods: run dig commands on a schedule via cron, save the output to files, and write a simple script to compare current vs. previous results. This covers IP and DNS changes but won't identify hosting providers by name. For provider identification and structured data, use the Hosting Checker free tier (100 lookups per day) or find your website's IP address and look it up manually.

Looking Ahead

Hosting change monitoring is evolving beyond simple periodic checks. Real-time webhook-based monitoring — where DNS providers push change notifications instead of requiring polling — is becoming more accessible. Integration with observability platforms like Grafana and Datadog allows hosting change alerts to sit alongside application performance metrics in a unified dashboard. As infrastructure-as-code adoption grows, drift detection tools that compare live DNS and hosting state against declared configurations will become a standard part of the monitoring toolkit.

Wrapping Up

Monitoring website hosting changes combines DNS lookups, IP tracking, and hosting provider identification into a repeatable process. For a few domains, manual checks with dig and a hosting checker tool work well. At scale, automated scripts and the Hosting Checker API turn one-off lookups into continuous monitoring that catches migrations, detects unauthorized changes, and provides competitive intelligence.

Whether you're watching competitors, managing client infrastructure, or securing your own domains, the key is consistency — check regularly, store historical data, and alert on meaningful changes rather than routine IP rotations.

Piotr Kulpinski

Written by

Piotr Kulpinski

Founder of Hosting Checker and a web developer with over a decade of experience in DNS, hosting infrastructure, and domain management. Piotr builds tools that help developers and site owners understand their web stack.

Free lookup tool

Check any website's hosting

Enter a domain or IP to uncover hosting details, DNS records, and server location.