All projects on Base matching “dns”

Geo-located DNS resolution — resolve hostnames from specific countries to see how CDNs, geo-blocking, and DNS-based routing differ by region.

DNS and email-authentication audit for one domain: A/AAAA presence, NS count and whether the nameservers share a /24, MX (including a null MX), SPF (missing, multiple, +all, ~all, ?all), DMARC (missing, p=none, no rua, partial pct), a DKIM selector probe, CAA, and whether the zone is DNSSEC-signed. Read entirely over DNS-over-HTTPS, so nothing is sent to the target host. Every finding carries a st

One DNS Doctor propagation watch: a name is re-checked across six vantage points for a paid window of up to 24 hours, polled by handle.

Send up to 10 domain names and get back every DNS record type (A, AAAA, MX, CNAME, TXT, NS, PTR, SOA, SRV, CAA, NAPTR, DS, TLSA) plus the full WHOIS registration profile (registrar, dates, contacts, status, nameservers) for each one. URLs are accepted and automatically stripped down to the bare domain. Duplicate domains are quietly removed before processing. Results come back as one flat row per d

Reverse-resolve an IPv4 or IPv6 address to its PTR hostname(s). No PTR record returns an empty list. This is reverse DNS (PTR) — not ENS or onchain name resolution.

Liveness/latency pre-flight for a URL: is it up, HTTP status and class, response latency in ms, whether it redirects (and where), content-type and server.

Domain intelligence in one call: RDAP registration (registrar, age, expiry, status), live DNS (A/AAAA/MX/NS/TXT), the mail and DNS providers behind them, the SaaS vendors the domain's TXT verification tokens reveal, SPF/DMARC posture, and risk signals like newly-registered or no-registrar-lock.

Email authentication check (SPF, DKIM, DMARC): Check a domain's email authentication and spoofing risk from public DNS: MX and mail provider, SPF (record, all-qualifier, DNS lookup count vs the 10 limit), DMARC policy/pct/rua, DKIM at 30 common selectors, MTA-STS, TLS-RPT, BIMI. Returns grade, spoof

Parse a pasted SPF record without DNS (RFC 7208): mechanisms with qualifiers and values, modifiers, syntax errors, the all policy and the number of terms that need DNS lookups, with coded findings such as +all, ptr and over ten lookups. Use when an agent must check an SPF record before publishing it. Input: {"record": "v=spf1 mx include:_spf.example.com ~all"}.

Use when an agent has an email address from a form, a scrape or a CRM and must decide whether it is worth sending to. Screens the address: syntax, DNS mail exchanger, disposable domain, role account, free provider and common typos. It does not verify that the mailbox exists. A DNS failure answers 503 and is not charged.

InboxGuards Email Test: Email security fix plan: the exact SPF, DKIM and DMARC records to publish, with steps for your DNS host. Reads the domain's live MX, NS, SPF, DKIM and DMARC records, detects the mailbox provider and DNS host, and returns the exact records to publish in order (create / replace / keep, name, value, why): one merged SPF within the 10-lookup limit, DKIM records or the provider

Resolve ONE DNS record type for a domain -- the cheapest, narrowest domain-check endpoint. For all record types at once, use /domain/intelligence. For a bundled DNS+TLS+headers audit, use /web/audit (raw) or /security/posture (scored). For mail-security plus a scored verdict, use /domain/due-diligence.

Domain trust report for AI agents: is this domain real, how old is it, who registered it, and is its email locked down? DNS (A/AAAA/NS/MX/CAA), DNSSEC, SPF, DMARC, DKIM (common selectors), MTA-STS, TLS-RPT, BIMI, RDAP registration date + registrar + status, parking and disposable detection, risk flags, 0-100 score and verdict. Public DNS + RDAP, no data stored.

Premium low-cost public domain/company enrichment for AI agents. One call combines homepage metadata, JSON-LD organization evidence, public social/about/contact-page links, A/AAAA/MX/SPF/DMARC DNS, security headers, technology hints, redirects, and evidence hashes. Public HTTPS + DNS only.

DNS and email-authentication audit for one domain: A/AAAA presence, NS count and whether the nameservers share a /24, MX (including a null MX), SPF (missing, multiple, +all, ~all, ?all), DMARC (missing, p=none, no rua, partial pct), a DKIM selector probe, CAA, and whether the zone is DNSSEC-signed. Read entirely over DNS-over-HTTPS, so nothing is sent to the target host. Every finding carries a st

Provide a public domain, HTTP(S) URL or email to retrieve Google DNS and RDAP observations. Returns DNS record sets, provider DNSSEC AD flag, registration metadata, capture times and per-query gaps. Failed queries remain unknown rather than absent. AD and descriptive hygiene fields do not certify domain security, ownership or legitimacy.

Detects the technology stack of any public website from one page load plus public DNS: CMS, ecommerce platform, JS framework, web server, CDN/hosting, analytics, ad pixels, chat, payments, consent, plus email provider, email-sending services, DNS host and verified SaaS (MX/NS/TXT). Each hit has categories, version when exposed, confidence 0-100 and evidence. 266 signatures.

Use when an agent must decide who an IP belongs to before blocking or trusting it: one IPv4 or IPv6 address against the two authoritative, keyless public sources - RDAP registry data (holder, country, date, abuse contact) via the ARIN-to-RIR chain, and the origin ASN from Team Cymru's DNS service. No city-level geolocation and no VPN/proxy detection: that needs a licensed database this route delib

Measure real-world page load performance (response time) for any URL from a chosen global location. Returns total load time in seconds, HTTP response status, a phase-by-phase timing breakdown (DNS, TCP connect, TLS handshake, time-to-first-byte, content transfer), and a content preview. Useful for global latency monitoring, CDN validation, and uptime/performance checks from multiple geographic ori

DNS TXT record lookup — a domain's TXT records as a clean JSON list: SPF, DKIM and DMARC policy strings plus site-verification and domain-ownership tokens, for email-authentication and domain-verification checks.

Observe public DNS, TLS and baseline response headers through HTTPS HEAD / on port443; no full-path scan or global trust assessment.

Is this company or domain legit? Business and domain verification (KYB) for vendor screening, supplier checks and scam or fraud review: domain age and registrar from RDAP, DNS (A/MX/NS), email security (SPF/DMARC) and HTTPS. Returns a verdict and a 0-100 trust score with evidence URLs, and flags newly registered or thin-infrastructure domains, a common scam signal. Use it before your agent pays an

Requires an unauthenticated caller-owned baseline; returns real current NS/MX records, added/removed sets and tri-state target-provider transition. Current DNS comes from one bounded native recursive-resolver query; existing Dossier provides context. Resolver caching may apply; no account ownership or global migration-completion claim. Existing provider patterns are reused without new invented att

BitBooth Whois: pay 0.01 USDC, get the parsed whois record for any domain — registrar, creation/updated/expiry dates, name servers, status flags, plus the raw whois text. Two-hop resolution via whois.iana.org then the authoritative registry over TCP port 43. 5s per-connection timeout cap. Rejects IPv4/IPv6 inputs and blocks SSRF at the DNS layer. Built for agents auditing domain ownership, monitor

One call, whole outside view of a domain: DNS records, email authentication grade (SPF, DMARC, MTA-STS), TLS certificate expiry and chain, post-quantum key exchange (X25519MLKEM768), HTTPS security headers, and a to-do list.

Check whether a domain or email address is trustworthy before you contact it, sign it up, or trust it. Returns a trusted/caution/high_risk/unknown verdict with reasons, based on DNS and mail health (MX, SPF, DMARC), domain age and registrar (RDAP), and disposable, free-provider and typo-lookalike flags. Accepts a domain, URL or email address.

Supplier and vendor risk score for any company domain. Returns a 0-100 stability score, risk tier, and named risk flags, with subsignals: domain age/expiry (WHOIS), TLS certificate status, DNS health (A/MX/SPF/DMARC), and 30-day news sentiment. Use for supplier due diligence and third-party domain screening before purchasing from, integrating with, or paying an unfamiliar vendor or counterparty. C

Look up a domain: registration data from RDAP (registrar, created, expires, status, nameservers), live DNS records (A, AAAA, MX, NS, TXT, CNAME), the TLS certificate served at the name (issuer, validity, alternative names, fingerprint), and the HTTP front door (status, server, redirect). One JSON answer, no API key, no rate-limited WHOIS. GET with ?name= or POST. $0.005.

Use when you have a company domain and need to know what the company is before spending more. Returns the company name and site title, domain age, registrar, mail provider, DNS provider, DMARC and HTTPS status, and a count of the third-party vendors detected. One call, no signup, no API key. The cheapest way to qualify a domain before buying a fuller record.

Assess the trustworthiness of a domain: RDAP registration age and registrar, DNS records (A/MX/TXT-SPF), and HTTPS reachability. Returns a 0-100 trust score with signals and an audit receipt.