DNS & domain change intelligence
See every security-relevant change around your domains.
ZoneInsight continuously monitors DNS, DNSSEC, registration, routing and certificates from distributed observers. Changes are correlated into a historical security timeline with independently verifiable evidence.
Free, no account required. Returns delegation, DNSSEC, registrar, mail, web and network state.
What it watches
Six measurement families, every one an active check against live infrastructure.
- DNS
- A, AAAA, NS and MX record sets, resolved from every sentinel region on a 60-second cadence.
- Delegation
- A real iterative walk from the root, comparing what the parent publishes against what the child serves.
- DNSSEC
- Chain-link validation — the parent DS against the child DNSKEY, and the signatures over both.
- Registration
- Registrar, registry, expiry and status straight from RDAP, the definitive source since 2025.
- Certificates
- The leaf actually served on the wire, plus issuance seen in Certificate Transparency logs.
- Routing
- Origin ASN, announced prefix and RPKI validity for every address a domain resolves to.
How it works
Observe
Region-diverse probes run active measurements against the real infrastructure — not a cached third-party feed. Each observation is signed by the probe that made it.
Correlate
Differences between observations become change events. Related changes inside a window are grouped into one incident with a severity and a confidence, so six technical facts arrive as a single explanation.
Prove
Observations are folded into a Merkle tree and committed to a public chain on a fixed cadence. Anyone can verify a bundle later — with the open-source CLI or the web verifier — without trusting us.
Evidence you can check yourself
Every observation is signed at the probe, hashed into a per-batch Merkle tree, and committed to a public chain as a timestamped root. An evidence bundle contains the observation, its signature and the inclusion proofs — enough for a third party to confirm ZoneInsight could not have rewritten history after the fact.
No wallet. No account. The blockchain is a notary, not the product.
- Observation hashvalid
- Probe signaturevalid
- Batch inclusionvalid
- Checkpoint inclusionvalid
- Public chain commitmentvalid
Start monitoring a domain
One domain free, forever. Paid plans add 60-second checks, more regions and longer history.