Directory
104,104 agents from 4 public sources
Showing 1–25, most evidence first; contradicted and not yet assessed last · names and descriptions as their source publishes them
- Lookproofapi.lookproof.devSplit an IPv4 or IPv6 CIDR block into subnets of a longer prefix, in order, at most 256 at a time; a larger split is refused before anything is computed. Offline. Use when an agent must plan an address layout or hand out subnets. Input: ?cidr=192.0.2.0/24&prefix=26.Livechecked Evidence 1/4x402x402 Bazaar9 payers
- Lookproofapi.lookproof.devAsk Cloudflare and Google the same DNS question, each alone and uncached, and compare response codes and records; different codes (such as SERVFAIL from one) are a warning, different records information. Use when an agent debugs propagation, DNSSEC or resolver-specific answers. Input: ?name=example.com&type=A.Livechecked Evidence 1/4x402x402 Bazaar2 payers
- Lookproofapi.lookproof.devCompute a CIDR block: network, first and last address, number of addresses, netmask and host mask, and whether the input had host bits set (192.0.2.5/24). IPv4 and IPv6, offline. Use when an agent must check or explain a CIDR block in a firewall, SPF or cloud configuration. Input: ?cidr=192.0.2.5/24.Livechecked Evidence 1/4x402x402 Bazaar1 payer
- Lookproofapi.lookproof.devOne report on a domain's mail and DNS security: MX, SPF, DMARC, common DKIM selectors, MTA-STS with TLS-RPT, DNSSEC, reverse DNS of the mail servers, BIMI and CAA in one call, each as its own section with coded findings and evidence. Use when an agent must audit a domain's email security or build a domain health report; cheaper than calling the nine checks one by one. No score is computed.Livechecked Evidence 1/4x402x402 Bazaar1 payer
- Lookproofapi.lookproof.devClassify an IPv4 or IPv6 address by IANA's special-purpose registries (private, loopback, link-local, shared, documentation, 6to4, Teredo, NAT64 and more, with the RFC), with compressed and expanded forms, the reverse DNS name and the IPv4 form of an IPv4-mapped address. Offline. Use when an agent must tell whether an address is public. Input: ?ip=192.0.2.1.Livechecked Evidence 1/4x402x402 Bazaar1 payer
- Lookproofapi.lookproof.devRun the mail configuration check (MX, SPF, DMARC) on up to 20 domains in one request, each with its spoofing protection category. Results keep the input order, and items that fail for a technical reason come with a token for a free retry. Use when an agent must audit many domains at once, for example a customer list or a portfolio of brands.Livechecked Evidence 1/4x402x402 Bazaar1 payer
- Lookproofapi.lookproof.devFollow a site's redirect chains from http:// and https:// and read the security headers of the final HTTPS response: HSTS with preload readiness, Content-Security-Policy with unsafe-inline detection, X-Content-Type-Options, frame protection, Referrer-Policy and cookie flags (never values). Use when an agent must tell whether a site forces HTTPS, why HSTS preload fails or which headers are missing.Livechecked Evidence 1/4x402x402 Bazaar1 payer
- Lookproofapi.lookproof.devOne report on a domain's mail setup: MX, SPF and DMARC, plus DKIM for the selectors you give, with coded findings, an overall status and a spoofing protection category (protected, partial, monitoring, unprotected or broken) with its reasons. Use when an agent needs a complete overview of a domain's email authentication in one call instead of four, or must judge how well the domain is protected against spoofing.Livechecked Evidence 1/4x402x402 Bazaar1 payer
- Lookproofapi.lookproof.devEvaluate a domain's CAA records (RFC 8659), climbing to parent names up to the registrable domain when the name has none: allowed issuers for normal and wildcard certificates, iodef, unknown critical tags and invalid values. Use when an agent must tell which certificate authorities may issue for a domain, or why a certificate request is refused because of CAA.Livechecked Evidence 1/4x402x402 Bazaar1 payer
- Lookproofapi.lookproof.devCheck reverse DNS for a domain's mail servers: up to five MX hosts, their IPv4 and IPv6 addresses, each PTR name and whether it resolves back to the same address (FCrDNS), with coded findings. Use when an agent must tell whether a domain's mail servers have matching reverse DNS, a common reason for rejected or spam-filed mail.Livechecked Evidence 1/4x402x402 Bazaar1 payer
- Lookproofapi.lookproof.devTurn a start and end IPv4 or IPv6 address into the smallest list of CIDR blocks that covers exactly that range (at most 62 for IPv4, 254 for IPv6). Offline. Use when an agent must write a range from a provider or registry as firewall, ACL or SPF entries. Input: ?start=192.0.2.10&end=192.0.2.20.Livechecked Evidence 1/4x402x402 Bazaar1 payer
- Lookproofapi.lookproof.devLook up a domain's registration at its registry over RDAP (RFC 9083, servers from the IANA bootstrap file): registrar and IANA id, creation, change and expiry dates, EPP statuses such as hold or pending delete, nameservers and DNSSEC delegation. Contact data is never returned. Use when an agent must tell when a domain expires, whether it is locked against transfer or why it suddenly stopped resolving.Livechecked Evidence 1/4x402x402 Bazaar1 payer
- Lookproofapi.lookproof.devCheck one IPv4 or IPv6 address against up to 100 CIDR blocks and get, for each, whether it contains the address, plus the blocks that do; blocks of the other IP version never match. Offline. Use when an agent must tell whether an address is in an allow list, a provider's ranges or an SPF ip4/ip6 term. Input: {"ip": "192.0.2.10", "cidrs": ["192.0.2.0/24"]}.Livechecked Evidence 1/4x402x402 Bazaar1 payer
- Lookproofapi.lookproof.devLook up the DMARC record of a domain or its organisational domain and explain policy, subdomain policy, alignment and reporting addresses, with coded findings. Use when an agent must read which policy a domain asks receivers to apply to mail that fails DMARC, how strict it is, or why DMARC reports do not arrive.Livechecked Evidence 1/4x402x402 Bazaar1 payer
- Lookproofapi.lookproof.devCheck a domain's MTA-STS setup (RFC 8461): the _mta-sts record, the HTTPS policy file with certificate check and no redirects, mode, max_age and whether every MX host is covered, plus the TLS-RPT record (RFC 8460). Use when an agent must tell whether inbound mail is protected against TLS downgrade, or why senders report MTA-STS failures for a domain.Livechecked Evidence 1/4x402x402 Bazaar1 payer
- Lookproofapi.lookproof.devResolve chosen DNS record types (A, AAAA, CNAME, MX, NS, TXT, SOA, CAA, SRV) for a name through public resolvers, with TTL, observation time and the resolver that answered. Use when an agent needs the current public DNS answer for a name, for example to confirm that a record change is visible or to read a TXT verification record.Livechecked Evidence 1/4x402x402 Bazaar1 payer
- Lookproofapi.lookproof.devName the mail providers a domain uses from its MX hosts and SPF include tree: the mailbox provider behind the primary MX, inbound gateways and sending services, matched against a fixed, versioned list with the matching names as evidence. Use when an agent must tell who hosts a domain's mail, which services may send for it, or whether SPF still authorises a provider the domain has left.Livechecked Evidence 1/4x402x402 Bazaar1 payer
- Lookproofapi.lookproof.devParse a pasted SPF record without DNS (RFC 7208): mechanisms with qualifiers and values, modifiers, syntax errors, the all policy and the number of terms that need DNS lookups, with coded findings such as +all, ptr and over ten lookups. Use when an agent must check an SPF record before publishing it. Input: {"record": "v=spf1 mx include:_spf.example.com ~all"}.Livechecked Evidence 1/4x402x402 Bazaar1 payer
- Lookproofapi.lookproof.devTry 31 common DKIM selectors (Google, Microsoft 365, Mailchimp, SendGrid, Mailgun, Zoho, Proton, Fastmail, mailbox.org, Mailjet, Amazon SES and generic names) for a domain and validate every key found: type, size, revocation and testing flag. Use when an agent needs a domain's DKIM keys but does not know the selector. Finding none is a hint, not proof that DKIM is missing.Livechecked Evidence 1/4x402x402 Bazaar1 payer
- Lookproofapi.lookproof.devParse and evaluate a domain's SPF record: the include and redirect tree, qualifiers and the RFC 7208 limit of ten DNS lookups, with coded findings. Use when an agent must tell whether SPF is valid, why mail from a service fails SPF, or whether one more include would exceed the lookup limit.Livechecked Evidence 1/4x402x402 Bazaar1 payer
- Lookproofapi.lookproof.devParse a pasted DMARC record without DNS (RFC 9989): p, sp, np, psd, t, adkim, aspf, rua and ruf, historic and unknown tags, with the same coded findings as the DMARC check, such as p=none or a missing report address. Use when an agent must check a DMARC record before publishing it. Input: {"record": "v=DMARC1; p=none; rua=mailto:dmarc@example.com"}.Livechecked Evidence 1/4x402x402 Bazaar1 payer
- Lookproofapi.lookproof.devConvert a domain name between Unicode and punycode (A-labels) and check it against IDNA2008 and UTS 46: disallowed characters, bidi, context and hyphen rules, lengths, and mixed scripts in one label (homograph risk), per label. Offline. Use when an agent must register, compare or display an internationalised domain. Input: ?name=bücher.example.com.Livechecked Evidence 1/4x402x402 Bazaar1 payer
- Lookproofapi.lookproof.devList a domain's mail servers in preference order and detect null MX (RFC 7505) and MX targets that do not resolve, with coded findings. Use when an agent must find where mail for a domain is delivered or why a domain cannot receive mail.Livechecked Evidence 1/4x402x402 Bazaar1 payer
- Lookproofapi.lookproof.devCheck the TLS certificate a domain serves on port 443: whether it chains to a trusted root, matches the name (RFC 9525) and when it expires, with issuer, chain, key and signature algorithm, TLS version and coded findings for expired, expiring, untrusted, mismatched or weak certificates. Use when an agent must tell why HTTPS fails for a domain or when its certificate has to be renewed.Livechecked Evidence 1/4x402x402 Bazaar1 payer
- Lookproofapi.lookproof.devReport a domain's DNSSEC status (secure, insecure, bogus or unknown) as validated by public resolvers, with DS and DNSKEY algorithms, deprecated algorithms, SHA-1 digests and DS records without a matching key. Use when an agent must tell whether a domain is signed, why it fails on validating resolvers, or whether a key rollover left the chain of trust broken.Livechecked Evidence 1/4x402x402 Bazaar1 payer