---
title: "List verified domains for the current organization"
method: GET
path: "/settings/domains"
tags: ["Verified Domains"]
---

# List verified domains for the current organization

`GET /settings/domains`

## Request

- Base URL: `https://www.virustotal.com/api/v3/dtm`
- URL: `https://www.virustotal.com/api/v3/dtm/settings/domains`
- Auth: none required

## Query parameters

- `sort` 'id' | 'domain' | 'status' | 'created_at' | 'updated_at'
- `order` 'desc' | 'asc'
- `size` integer
- `since` string, date-time
- `until` string
- `page` string

## Headers

- `x-apikey` string, required
- `Accept` string

## Response `200`

OK

- VerifiedDomains: A list of verified domains.
  - `domains` VerifiedDomain[], required: The list of verified domains.
    - `challenge` string: The DNS TXT record challenge code that's used to verified domain ownership.
    - `created_at` string, date-time: The time the verified domain was created.
    - `created_by` string: The user name that created the verified domain.
    - `created_by_user_id` string: The user ID that created the verified domain.
    - `domain` string: The domain name. Must not be a free email provider domain.
    - `id` string: The ID of the verified domain.
    - `primary_domain` string: The primary domain extracted from the domain name. e.g. the parent domain.
    - `status` 'unverified' | 'verified' | 'pending' | 'error': The status of the verified domain with respect to its proven ownership.
    - `updated_at` string, date-time: The time the verified domain was last updated.
    - `updated_by` string: The user name that last updated the verified domain.
    - `updated_by_user_id` string: The user ID that last updated the verified domain.
    - `verification_checked_at` string, date-time: The last time the DNS TXT record was checked for verification.
    - `verification_message` string: A explaination pretaining to the last time the TXT record was checked for the verification code.
    - `verification_type` 'txt_record' | 'manual': The type of verification used for the domain.

## Other responses

- `400`: Bad Request
- `401`: Unauthorized
- `500`: Internal Server Error

---

[API](https://skmtc.dev/virustotal/apis/dtm-digital-threat-monitoring.md) - [All operations](https://skmtc.dev/virustotal/apis/dtm-digital-threat-monitoring/llms.txt) - [OpenAPI document](https://skmtc.dev/virustotal/apis/dtm-digital-threat-monitoring/revisions/ba27db660651?raw)