FAQ
Short answers about DNS checks, registration data, caching, and the API.
What does ZoneInsight check?
ZoneInsight checks public authoritative DNS records, RDAP registration data, email records and common domain warnings for a submitted domain.
Where do DNS answers come from?
DNS checks query the domain’s delegated authoritative nameservers for the final answer. Public recursive resolvers may be used only to find nameserver addresses when delegation does not include them.
What are MX, SPF, and DMARC?
MX records point to the domain’s mail servers. SPF publishes which servers are allowed to send mail for the domain. DMARC publishes the domain’s policy for handling mail that fails SPF or DKIM authentication checks.
Is this a security audit?
No. Reports are informational and use cautious wording such as found, appears to be, and not detected. A report should not be treated as proof of security, email deliverability, or correct configuration.
Why are results cached?
ZoneInsight caches reports for short periods so repeat checks are faster and place less load on public lookup services. Use “Refresh DNS” to recheck DNS records. Use “Refresh DNS + registration” to request fresh registration data when limits and cooldowns allow it.
Are there request limits?
Yes. Rates are subject to change as the service evolves. If you hit a limit, wait briefly and try again.
What does "Refresh DNS" do?
It bypasses the report cache and queries authoritative DNS again. Registration data may still be reused if it was checked recently.
What does "Refresh DNS + registration" do?
It reruns DNS checks and also requests fresh registration data when rate limits and per-domain cooldowns allow it.
Why might a report be partial?
A report can be partial when DNS, registration, or another public lookup service times out or returns an error. Any results that were found are still shown.
Do I need an account?
No. The public check page and JSON API are available without accounts, teams, billing, alerts, or scheduled monitoring.
Does ZoneInsight monitor domains?
No. ZoneInsight runs one-off domain checks when you request them. It does not schedule checks, send alerts, or track uptime.
Is there an API?
Yes. Use GET /api/check?domain=example.com. Optional query parameters include fresh=1 and refresh_rdap=1.