---
title: "Add a new verified domain"
method: POST
path: "/settings/domains"
tags: ["Verified Domains"]
---

# Add a new verified domain

`POST /settings/domains`

## Request

- Base URL: `https://www.virustotal.com/api/v3/dtm`
- URL: `https://www.virustotal.com/api/v3/dtm/settings/domains`
- Auth: none required

## Headers

- `x-apikey` string, required
- `Content-Type` string, required

## Request body

- VerifiedDomainOp: A verified domain proves ownership of domain and is used for authenticating login credential visibility for Compromised Credential alerts.
  - `domain` string: A verified domain to create.

## Response `200`

OK

- VerifiedDomain: A verified domain proves ownership of domain and is used for authenticating login credential visibility for Compromised Credential alerts.
  - `challenge` string: The DNS TXT record challenge code that's used to verified domain ownership.
  - `created_at` string, date-time: The time the verified domain was created.
  - `created_by` string: The user name that created the verified domain.
  - `created_by_user_id` string: The user ID that created the verified domain.
  - `domain` string: The domain name. Must not be a free email provider domain.
  - `id` string: The ID of the verified domain.
  - `primary_domain` string: The primary domain extracted from the domain name. e.g. the parent domain.
  - `status` 'unverified' | 'verified' | 'pending' | 'error': The status of the verified domain with respect to its proven ownership.
  - `updated_at` string, date-time: The time the verified domain was last updated.
  - `updated_by` string: The user name that last updated the verified domain.
  - `updated_by_user_id` string: The user ID that last updated the verified domain.
  - `verification_checked_at` string, date-time: The last time the DNS TXT record was checked for verification.
  - `verification_message` string: A explaination pretaining to the last time the TXT record was checked for the verification code.
  - `verification_type` 'txt_record' | 'manual': The type of verification used for the domain.

## Other responses

- `400`: Bad Request
- `401`: Unauthorized
- `500`: Internal Server Error

---

[API](https://skmtc.dev/virustotal/apis/dtm-digital-threat-monitoring.md) - [All operations](https://skmtc.dev/virustotal/apis/dtm-digital-threat-monitoring/llms.txt) - [OpenAPI document](https://skmtc.dev/virustotal/apis/dtm-digital-threat-monitoring/revisions/ba27db660651?raw)