All projects matching “dns records”

Reverse-resolve an IPv4 or IPv6 address to its PTR hostname(s). No PTR record returns an empty list. This is reverse DNS (PTR) — not ENS or onchain name resolution.

InboxGuards Email Test: Email security fix plan: the exact SPF, DKIM and DMARC records to publish, with steps for your DNS host. Reads the domain's live MX, NS, SPF, DKIM and DMARC records, detects the mailbox provider and DNS host, and returns the exact records to publish in order (create / replace / keep, name, value, why): one merged SPF within the 10-lookup limit, DKIM records or the provider

Observe public DNS, TLS and baseline response headers through HTTPS HEAD / on port443; no full-path scan or global trust assessment.

Provide a public domain, HTTP(S) URL or email to retrieve Google DNS and RDAP observations. Returns DNS record sets, provider DNSSEC AD flag, registration metadata, capture times and per-query gaps. Failed queries remain unknown rather than absent. AD and descriptive hygiene fields do not certify domain security, ownership or legitimacy.

Email authentication check (SPF, DKIM, DMARC): Check a domain's email authentication and spoofing risk from public DNS: MX and mail provider, SPF (record, all-qualifier, DNS lookup count vs the 10 limit), DMARC policy/pct/rua, DKIM at 30 common selectors, MTA-STS, TLS-RPT, BIMI. Returns grade, spoof

DNS TXT record lookup — a domain's TXT records as a clean JSON list: SPF, DKIM and DMARC policy strings plus site-verification and domain-ownership tokens, for email-authentication and domain-verification checks.

Resolve ONE DNS record type for a domain -- the cheapest, narrowest domain-check endpoint. For all record types at once, use /domain/intelligence. For a bundled DNS+TLS+headers audit, use /web/audit (raw) or /security/posture (scored). For mail-security plus a scored verdict, use /domain/due-diligence.

Send up to 10 domain names and get back every DNS record type (A, AAAA, MX, CNAME, TXT, NS, PTR, SOA, SRV, CAA, NAPTR, DS, TLSA) plus the full WHOIS registration profile (registrar, dates, contacts, status, nameservers) for each one. URLs are accepted and automatically stripped down to the bare domain. Duplicate domains are quietly removed before processing. Results come back as one flat row per d

Parse a pasted SPF record without DNS (RFC 7208): mechanisms with qualifiers and values, modifiers, syntax errors, the all policy and the number of terms that need DNS lookups, with coded findings such as +all, ptr and over ten lookups. Use when an agent must check an SPF record before publishing it. Input: {"record": "v=spf1 mx include:_spf.example.com ~all"}.

One call, whole outside view of a domain: DNS records, email authentication grade (SPF, DMARC, MTA-STS), TLS certificate expiry and chain, post-quantum key exchange (X25519MLKEM768), HTTPS security headers, and a to-do list.

Look up a domain: registration data from RDAP (registrar, created, expires, status, nameservers), live DNS records (A, AAAA, MX, NS, TXT, CNAME), the TLS certificate served at the name (issuer, validity, alternative names, fingerprint), and the HTTP front door (status, server, redirect). One JSON answer, no API key, no rate-limited WHOIS. GET with ?name= or POST. $0.005.

Assess the trustworthiness of a domain: RDAP registration age and registrar, DNS records (A/MX/TXT-SPF), and HTTPS reachability. Returns a 0-100 trust score with signals and an audit receipt.

Domain intelligence in one call: RDAP registration (registrar, created, expires, age, status, nameservers), DNS records (A, AAAA, MX, NS, TXT, CNAME, SPF, DMARC), a live HTTPS probe (reachable, status, server, redirect target, HSTS), plus risk flags and a 0-100 risk score for new, parked, unreachable or badly configured domains.

Service: DNS Record & Whois Lookup (https://dns-lookup.x402.paysponge.com/)

Domain intel bundle: DNS records (A/AAAA/MX/NS/TXT/CAA/CNAME), RDAP registration (registrar, created/expires, status, nameservers) and TLS certificate (issuer, days left) in one call.

Domain & DNS intelligence — records, SSL certs, subdomain discovery.

B2A Email Deliverability, MX, SPF & DMARC Verifier (/v1/email-verify) — Validates email syntax, disposable/burner provider status, role accounts, and live DNS MX/SPF/DMARC records. (https://email-verify.agentdiet.dev/v1/email-verify)

Domain liveness check / verify / audit: DNS resolution (A/MX/NS/TXT records), whether mail routing exists, HTTP reachability.

Know Your Merchant (KYM) trust score: pass a merchant domain and get a deterministic 0-100 trust score with a band (high/medium/low/very_low/avoid) and human-readable reasons. Live signals: domain age from the RDAP registry of record, malware/phishing blocklist verdict via Cloudflare Security DNS, TLS certificate health, mail capability, and refund/privacy/contact page presence. The merchant-side

Evaluate an SPF record against an IPv4/IPv6 address using only its literal ip4/ip6/all mechanisms. DNS-dependent mechanisms (include, a, mx, exists, redirect) reached before a match yield an honest `indeterminate` result rather than a guess.

Requires an unauthenticated caller-owned baseline; returns real current NS/MX records, added/removed sets and tri-state target-provider transition. Current DNS comes from one bounded native recursive-resolver query; existing Dossier provides context. Resolver caching may apply; no account ownership or global migration-completion claim. Existing provider patterns are reused without new invented att

DNS lookup API for agents at $0.01 USDC. Call when you need A/AAAA/CNAME/MX/TXT/NS for domain routing, email delivery, or infra checks without running a recursive resolver. Returns structured records via x402—no API key, no subscription.

Use when you have a company domain and need to know what the company is before spending more. Returns the company name and site title, domain age, registrar, mail provider, DNS provider, DMARC and HTTPS status, and a count of the third-party vendors detected. One call, no signup, no API key. The cheapest way to qualify a domain before buying a fuller record.

BitBooth Whois: pay 0.01 USDC, get the parsed whois record for any domain — registrar, creation/updated/expiry dates, name servers, status flags, plus the raw whois text. Two-hop resolution via whois.iana.org then the authoritative registry over TCP port 43. 5s per-connection timeout cap. Rejects IPv4/IPv6 inputs and blocks SSRF at the DNS layer. Built for agents auditing domain ownership, monitor