What eleven DNS checks found for a domain, or for the zone a hostname sits in

Finds the authoritative servers with a walk from the root, then runs eleven checks against them: NS consistency, open recursion, DNSSEC, TTLs, SPF, DMARC, CAA, wildcard, glue, DS against DNSKEY and UDP truncation. Each row says what it found, with the receipts it rests on; there is no score. resolves says first whether the name resolves in public DNS.

post/api/check

Request

  • Base URL: https://isitdns.net
  • URL: https://isitdns.net/api/check
  • Auth: none declared

Request body

namestring required
from'north-america' | 'europe'

Region of the probe for the recursion, TTL and UDP truncation rows

Response

Each check with what it found

domainstring required

The name that was asked about.

generatedAtstring required
zonestring

The zone that holds domain (the deepest delegation at or above it), present only when it is not domain. Absent for a registrable domain, and absent when that zone was not read, in which case each check about the zone says so. When present, the answer mixes checks about this zone with checks about the name itself, and each check says which it is.

Changes

No recorded changes to this operation across all 1 revision of this API.