All projects matching “dnssec”

DNS TXT record lookup — a domain's TXT records as a clean JSON list: SPF, DKIM and DMARC policy strings plus site-verification and domain-ownership tokens, for email-authentication and domain-verification checks.

About the .download top-level domain: registry operator, type (generic, country-code, sponsored), IANA/RDAP details, WHOIS server, creation date, DNSSEC signing status and the registry's nameservers. Registration research and TLD-policy checks for .download. $0.01 per call.

WHOIS registration lookup — registrar, creation/expiry/updated dates, domain age in days, name servers, DNSSEC, registrant country/org, EPP status codes. All TLDs (.com .net .org .io .dev .ai ccTLDs gTLDs). Per-field error resilience for TLD-specific parsing quirks. No WHOIS library setup or TLD-specific parsing needed. Accepts USDC payments on Base and Solana

WHOIS registration data for a domain: registrar, creation/expiry/updated dates, nameservers, status, DNSSEC, and organisation.

Domain and email security check: SPF, DKIM, DMARC, MX, MTA-STS, TLS-RPT, DNSSEC (validated by Cloudflare and Google), CAA, BIMI with its mark certificate, mail IPs on the UCEPROTECT Level 1 blocklist, TLS certificate, registrar and domain age, and Microsoft 365 tenant, each graded with the exact record to fix it, plus a 0-100 score

Assess how trustworthy a domain is using authoritative live signals, not just its spelling. Fuses RDAP registration data (domain age — the single strongest phishing signal — plus registrar, expiry and registry status flags), DNS resolvability (A/AAAA), MX presence and DNSSEC into a 0-100 risk score with a verdict (low/medium/high) and the exact reasons. Pairs with `urltrust` (lexical) for a comple

Look up a domain's RDAP registration data — registrar, status, creation/expiry/update dates, nameservers and DNSSEC. Unregistered domains return found:false.

Domain trust report for AI agents: is this domain real, how old is it, who registered it, and is its email locked down? DNS (A/AAAA/NS/MX/CAA), DNSSEC, SPF, DMARC, DKIM (common selectors), MTA-STS, TLS-RPT, BIMI, RDAP registration date + registrar + status, parking and disposable detection, risk flags, 0-100 score and verdict. Public DNS + RDAP, no data stored.

Provide a public domain, HTTP(S) URL or email to retrieve Google DNS and RDAP observations. Returns DNS record sets, provider DNSSEC AD flag, registration metadata, capture times and per-query gaps. Failed queries remain unknown rather than absent. AD and descriptive hygiene fields do not certify domain security, ownership or legitimacy.

DNS and email-authentication audit for one domain: A/AAAA presence, NS count and whether the nameservers share a /24, MX (including a null MX), SPF (missing, multiple, +all, ~all, ?all), DMARC (missing, p=none, no rua, partial pct), a DKIM selector probe, CAA, and whether the zone is DNSSEC-signed. Read entirely over DNS-over-HTTPS, so nothing is sent to the target host. Every finding carries a st

Full-domain intelligence report in one call: complete DNS sweep (A/AAAA/MX/NS/TXT/SOA/CNAME), RDAP registration data (registrar, dates, statuses), DNSSEC presence, mail posture summary (SPF/DMARC/DKIM selectors), TLS certificate snapshot (issuer, expiry, protocol), Certificate Transparency subdomain census, and HTTP probe (status, redirects, https enforcement, server header) — each section scored,

DNS and email-authentication audit for one domain: A/AAAA presence, NS count and whether the nameservers share a /24, MX (including a null MX), SPF (missing, multiple, +all, ~all, ?all), DMARC (missing, p=none, no rua, partial pct), a DKIM selector probe, CAA, and whether the zone is DNSSEC-signed. Read entirely over DNS-over-HTTPS, so nothing is sent to the target host. Every finding carries a st