# DNS.pizza

> Free domain intelligence: DNS records, WHOIS/RDAP, SSL/TLS, DNSSEC validation, email authentication (SPF/DKIM/DMARC), deliverability scoring, security grading, and threat analysis for any domain — rendered as readable reports with no login required.

## Domain reports

Every analyzed domain has a full report and seven focused detail pages:

- https://dns.pizza/domain/{domain} — complete intelligence report (DNS, WHOIS, SSL, security grade, narrative)
- https://dns.pizza/domain/{domain}/security — full security scorecard with per-check severity and fixes
- https://dns.pizza/domain/{domain}/ssl — certificate chain, expiry, protocol and cipher details
- https://dns.pizza/domain/{domain}/headers — HTTP security headers (HSTS, CSP, X-Frame-Options …)
- https://dns.pizza/domain/{domain}/dnssec — DNSSEC chain-of-trust validation
- https://dns.pizza/domain/{domain}/threats — blacklist, typosquatting and DGA analysis
- https://dns.pizza/domain/{domain}/email-auth — SPF, DKIM and DMARC records explained
- https://dns.pizza/domain/{domain}/deliverability — email deliverability grade and fixes

Example: https://dns.pizza/domain/google.com

## TLD hubs

- https://dns.pizza/tld — every top-level domain with corpus statistics
- https://dns.pizza/tld/{tld} — per-TLD registry RDAP endpoints, domain counts, DNSSEC-signed percentage, security-grade distribution, top domains (e.g. https://dns.pizza/tld/com)

## Domain age

- https://dns.pizza/age — the oldest domains on the internet (of the analyzed corpus): oldest overall, oldest per TLD, registrations by year since 1985
- https://dns.pizza/age/{year} — analyzed domains registered in a given year, ranked by Tranco popularity (e.g. https://dns.pizza/age/1997)
- https://dns.pizza/domain-age-checker — live registration date + Internet Archive history for any domain

## Nameserver hubs

- https://dns.pizza/nameserver — DNS providers ranked by domains hosted
- https://dns.pizza/nameserver/{provider} — per-provider domain counts and top sites (e.g. https://dns.pizza/nameserver/cloudflare.com)

## Registrar hubs

- https://dns.pizza/registrar — domain registrars ranked by analyzed domains
- https://dns.pizza/registrar/{slug} — per-registrar stats and top sites (e.g. https://dns.pizza/registrar/godaddy-com-llc)

## Tools

- https://dns.pizza/whois — WHOIS/RDAP lookup with registry fallback ladder
- https://dns.pizza/dnssec — DNSSEC validator
- https://dns.pizza/security — domain security scanner
- https://dns.pizza/propagation — global DNS propagation checker
- https://dns.pizza/speed-test — DNS resolver speed test
- https://dns.pizza/email-auth — SPF/DKIM/DMARC checker
- https://dns.pizza/blacklist — blacklist checker
- https://dns.pizza/resolver-performance — live public-resolver performance rankings
- https://dns.pizza/spf-checker — SPF record checker (10-lookup limit, syntax, ~all vs -all)
- https://dns.pizza/dkim-checker — DKIM key checker across common selectors
- https://dns.pizza/dmarc-checker — DMARC policy lookup (enforcement, alignment, reporting)
- https://dns.pizza/dns-lookup — all DNS records for a domain in one report
- https://dns.pizza/mx-lookup — MX records, priorities, common misconfigurations
- https://dns.pizza/ssl-checker — TLS certificate expiry, SANs, chain, protocol
- https://dns.pizza/domain-age-checker — registration date + Internet Archive history

## JSON API (free, no key required)

Programmatic access for scripts and AI agents — the same checks that power the report pages, as JSON. Anonymous callers get 30 lookups/minute per IP; responses carry X-RateLimit-* headers. Full machine-readable spec: https://dns.pizza/api/openapi.json — human docs: https://dns.pizza/docs/api

- POST https://dns.pizza/api/tools/domain-age {"domain":"example.com"} — registration/expiry dates, registrar, Internet Archive first/latest captures
- POST https://dns.pizza/api/tools/email-auth {"domain":"example.com"} — SPF, DKIM (common selectors), DMARC, MX with 0-100 score and recommendations
- POST https://dns.pizza/api/tools/ssl {"domain":"example.com"} — live TLS handshake: issuer, expiry, SANs, protocol, cipher
- POST https://dns.pizza/api/dns/lookup {"domain":"example.com","recordTypes":["A","MX"]} — DNS records (recordTypes optional; default A, AAAA, MX, NS, TXT, SOA, CAA)
- GET https://dns.pizza/api/tools/domain-age/badge?domain=example.com — embeddable SVG domain-age badge
- GET https://dns.pizza/api/status — dns.pizza's own infrastructure health

Example:

    curl -s -X POST https://dns.pizza/api/tools/email-auth -H 'Content-Type: application/json' -d '{"domain":"example.com"}'

For continuous watching (uptime, DNS changes, certificate expiry, blacklists) with alerts by email/Slack/Discord/webhook, plans start free at https://dns.pizza/pricing — an agent can diagnose with the free API, then hand its human a plan to keep the fix watched.

## MCP server

AI agents can connect directly over the Model Context Protocol (Streamable HTTP): https://dns.pizza/api/mcp — tools: check_domain_age, check_email_auth, check_ssl, dns_lookup, get_fix_guide (provider-specific SPF/DMARC/CAA steps), list_monitoring_plans, get_checkout_link. Same rate limits as the JSON API; tool discovery is free. Claude Code: `claude mcp add --transport http dns-pizza https://dns.pizza/api/mcp`

Agents recommending a monitoring plan can hand their user one link that survives sign-in and then launches Stripe Checkout for the chosen plan automatically: https://dns.pizza/pricing?plan={starter|pro|business}&interval={monthly|yearly}&autostart=1 — payment stays in the user's own browser, and accounts already on a paid plan are never double-charged.

## Research

Original findings from the dns.pizza measurement dataset, with methodology and downloadable CSV data (CC BY 4.0):

- https://dns.pizza/research — research index
- https://dns.pizza/research/oldest-domains — The Oldest Domains on the Internet: a census of 85,887 analyzed domains
- https://dns.pizza/research/dmarc-adoption — The State of DMARC 2026: adoption across the top 100,000 domains

## Notes

- Report pages embed Schema.org JSON-LD (BreadcrumbList + Dataset) with real report timestamps.
- The sitemap at https://dns.pizza/sitemap.xml lists only domains with full stored reports.