Domain Health Checker API - DNS, SSL & Email Checks

Category Domain Intelligence

Endpoints 2

Key Features 8

Frequently Asked Questions 4

Used by people at amazing companies

Trust signals before you integrate

Transparent docs, authenticated requests, and visible reliability details make it easier to evaluate DomScan before you ship.

99.99% Uptime

Production-ready endpoints are designed for 99.99% uptime and documented status handling.

OpenAPI API artifacts

OpenAPI, Swagger, Postman, CLI, SDK, and MCP links are one click away.

API keys Protected access

Authenticated endpoints use API keys with clear credit costs before you call them.

10,000 Free allowance

Start with 10,000 monthly credits and upgrade only when usage grows.

What this API helps you ship

Use this page as a production brief: endpoints, examples, response shape, and the workflow pieces needed to plug DomScan into your own product.

Product workflows

Embed domain checks, DNS intelligence, risk signals, or enrichment into onboarding, search, and internal tools.

Analyst automation

Replace repeated manual lookups with scheduled jobs, alerting, and reproducible investigation steps.

Clean JSON data

Use predictable fields, documented status codes, and credit costs instead of scraping provider pages.

AI and ops tooling

Feed agents, dashboards, SOAR playbooks, and CRMs through OpenAPI, SDK, Postman, or MCP.

Integration workflow

A simple path from first request to repeatable production usage.

Authenticate once

Send your API key with the documented header and keep requests consistent across services.

Query with examples

Start from the curl and HTTP samples, then map the parameters into your application code.

Operate and monitor

Use status codes, credit costs, and response fields to build retries, logs, and alerts.

Developer kit

Jump from this page into machine-readable docs, request collections, SDKs, or agent tooling.

OpenAPI schema

Generate clients or inspect every request and response shape.

Postman collection

Import ready-made requests for manual testing and team handoff.

SDKs and CLI

Use maintained packages and command-line workflows instead of writing boilerplate.

MCP integration

Expose domain intelligence to AI agents and internal assistant workflows.

Parameters and response map

Scan the inputs, output fields, and status codes before wiring the endpoint into your client.

Request parameters

Parameter

domainchecksfresh

Response fields

Example Response

domainhealth_scoregradecheckschecks.dns_configuredchecks.ssl_validchecks.email_deliverablechecks.blacklist_statuschecks.age_yearschecks.registration_stablechecks.dnssec_enabledenriched

Status coverage

HTTP Status Codes

200400402429500502503504

Endpoints

GET /v1/health

Credits: 2Authentication: optional

domainchecksfresh

GET /v1/health/quick

Credits: 1Authentication: optional

domain

Trust signals before you integrate

Transparent docs, authenticated requests, and visible reliability details make it easier to evaluate DomScan before you ship.

Uptime API artifacts

OpenAPI, Swagger, Postman, CLI, SDK, and MCP links are one click away.

API keys Protected access

Authenticated endpoints use API keys with clear credit costs before you call them.

Free allowance Sign Up for Free

Start with 10,000 monthly credits and upgrade only when usage grows.

Active Example Request

Start from the curl and HTTP samples, then map the parameters into your application code.

Key Features

DNS Analysis

Check A, AAAA, MX, NS, TXT, and other DNS records.

SSL Verification

Validate certificates, check expiry, and issuer details.

Email Deliverability

Analyze SPF, DKIM, and DMARC configuration.

Security Headers

Check HSTS, CAA, and other security configurations.

Health Score

Get a 0-100 score with letter grade (A-F).

Actionable Warnings

Clear explanations of issues and how to fix them.

Quick Check Mode

Fast DNS + HTTPS check for rapid monitoring.

Bulk Health Checks

Monitor multiple domains in a single request.

Example Request

GET /v1/health bash

Open

curl -H "X-API-Key: $DOMSCAN_API_KEY" "https://domscan.net/v1/health?domain=cloudflare.com"

Example Response

200 OK json

{
  "domain": "cloudflare.com",
  "health_score": 94,
  "grade": "A",
  "checks": {
    "dns_configured": true,
    "ssl_valid": true,
    "email_deliverable": true,
    "blacklist_status": "clean",
    "age_years": 15,
    "registration_stable": true,
    "dnssec_enabled": true
  },
  "enriched": {
    "tls": {
      "grade": "A+",
      "protocol": "TLSv1.3",
      "cipher": "TLS_AES_256_GCM_SHA384",
      "chain_valid": true,
      "days_to_expiry": 72,
      "hostname_match": true,
      "ocsp_stapling": true,
      "grade_reasons": [
        "TLS 1.3 enabled",
        "Valid certificate chain"
      ]
    },
    "http_versions": {
      "http1_1": true,
      "http2": true,
      "http3": true,
      "alt_svc": "h3=\":443\"; ma=86400",
      "http3_advertised": true,
      "alt_svc_protocols": [
        "h3"
      ],
      "curl_http3_supported": true,
      "h2_alpn_accepted": "h2",
      "h3_alpn_accepted": "h3"
    },
    "hsts": {
      "reachable": true,
      "final_url": "https://cloudflare.com/",
      "status_code": 200,
      "header_present": true,
      "hsts_header": "max-age=31536000; includeSubDomains",
      "max_age": 31536000,
      "include_subdomains": true,
      "preload_directive": false,
      "preload_eligible": true,
      "preload_status": "preloaded",
      "preloaded_domain": "cloudflare.com",
      "preload_bulk": false,
      "issues": [
        "missing preload directive"
      ],
      "errors": []
    }
  },
  "warnings": [],
  "recommendations": [
    "Publish the HSTS preload directive if you want preload-list eligibility."
  ],
  "checked_at": "2026-04-18T21:00:00Z",
  "details": {
    "dns": {
      "has_a_record": true,
      "has_aaaa_record": true,
      "has_nameservers": true,
      "has_mx_record": true,
      "nameservers": [
        "ns3.cloudflare.com",
        "ns5.cloudflare.com"
      ],
      "mx_records": [
        "route1.mx.cloudflare.net"
      ],
      "a_records": [
        "104.16.132.229",
        "104.16.133.229"
      ],
      "aaaa_records": [
        "2606:4700::6810:84e5",
        "2606:4700::6810:85e5"
      ]
    },
    "ssl": {
      "https_works": true,
      "certificate_valid": true,
      "days_until_expiry": 72,
      "issuer": "Google Trust Services"
    },
    "email": {
      "has_mx": true,
      "has_spf": true,
      "has_dmarc": true,
      "has_dkim_selector": true,
      "spf_record": "v=spf1 include:_spf.google.com ~all",
      "dmarc_policy": "reject",
      "mx_hosts": [
        "route1.mx.cloudflare.net"
      ]
    },
    "security": {
      "dnssec_enabled": true,
      "has_caa_record": true,
      "caa_issuers": [
        "digicert.com",
        "letsencrypt.org"
      ],
      "http_to_https_redirect": true,
      "has_security_txt": true,
      "security_txt_fields": [
        "Contact",
        "Expires",
        "Preferred-Languages"
      ],
      "security_headers": {
        "has_hsts": true,
        "hsts_max_age": 31536000,
        "has_csp": true,
        "has_x_frame_options": true,
        "has_x_content_type_options": true,
        "has_referrer_policy": true,
        "has_permissions_policy": true,
        "score": 92
      }
    },
    "age": {
      "registration_date": "2010-07-06T00:00:00Z",
      "expiration_date": "2030-07-06T00:00:00Z",
      "last_updated": "2025-07-06T00:00:00Z",
      "age_days": 5766,
      "age_years": 15,
      "days_until_expiry": 1540,
      "registrar": "Cloudflare Registrar"
    },
    "blacklist": {
      "clean": true,
      "status": "clean",
      "listed_on": [],
      "checked_lists": [
        "spamhaus",
        "surbl"
      ],
      "domain_listed_on": [],
      "ip_listed_on": [],
      "check_type": "mixed"
    }
  },
  "health_checks": [
    {
      "category": "dns",
      "name": "Authoritative DNS records present",
      "passed": true,
      "score": 100,
      "weight": 15
    }
  ],
  "meta": {
    "check_duration_ms": 248,
    "served_by": "pop=MAD country=ES",
    "worker_version": "2.0.0"
  }
}

Frequently Asked Questions

What does the domain health score measure?

The health score (0-100) combines DNS configuration, SSL validity, email deliverability setup (SPF/DKIM/DMARC), and security headers. Higher scores indicate better configuration.

What is the difference between /health and /health/quick?

The /health endpoint performs comprehensive checks including SSL validation, email records, and security headers. The /health/quick endpoint only checks DNS resolution and HTTPS reachability - much faster but less detailed.

How can I improve my domain health score?

Common improvements include: adding SPF/DKIM/DMARC records for email, ensuring valid SSL certificates, configuring HSTS headers, and adding CAA DNS records.

Can I monitor my domains automatically?

Yes! Use our API to build automated monitoring. Check domain health on a schedule and alert when scores drop or issues are detected.

Related Tools & Resources

HTTP Status Codes

We document the HTTP status codes you should handle so you can distinguish successful responses, auth issues, credits, rate limits, missing data, and upstream failures.

OK 200

Request successful

Bad Request 400

Invalid parameters

Payment Required 402

Not enough credits to run this request.

Too Many Requests 429

Rate limit exceeded

Server Error 500

Internal error

Bad Gateway 502

Upstream RDAP error

Service Unavailable 503

Upstream service unavailable or temporarily rate limited.

Gateway Timeout 504

Upstream lookup timed out.

Check Domain Health for Free

View Full API Documentation APIs