About

Zone Watchdog reads the public DNS records for a domain and explains what they mean, in the order a person actually needs them.

Every lookup runs over DNS-over-HTTPS from a Cloudflare Worker, and each answer is cached for exactly as long as the record's own TTL says it stays true. Nothing about the domains you check is stored.

Checks that need a raw socket — blacklist lookups over UDP, SMTP banner tests on port 25, certificate expiry — are not here yet. Workers cannot open those, so they need infrastructure of their own.