Read API coverage and query rulesSee endpoint parameters, limits, examples, and response structures for all DNS.NF features.
APIDNSRDNSREVERSEDNSSECTOKENSLIMITS
DNS.NF Documentation
Live reference for implemented V1 APIs on api.dns.nf: DNS lookup, rDNS CIDR scan, reverse datasets, and subdomain discovery.
DNS Lookup: 30 req/min per IP rDNS: 30s cooldown per client V1: Public (30 req/min) | V2: Internal (Token required) Passive DNS permanently stored in PostgreSQL
Feature Matrix
| Feature | Page | API | Description |
|---|---|---|---|
| DNS Lookup | /dns-lookup | /v1/dns/lookup | A/AAAA/CNAME/MX/NS/SOA/SRV/TXT/CAA records for domain targets |
| rDNS Scanner | /rdns | /v1/dns/rdns | IPv4/CIDR concurrent scan, PTR+CNAME match modes, scoring and hint labels |
| Reverse IP | /reverse-ip | /v1/ip/reverse | Find public domains pointing to one IPv4, with source labels + JSON/CSV export |
| Reverse NS | /reverse-ns | /v1/ns/reverse | Find domains sharing authoritative NS servers |
| Reverse MX | /reverse-mx | /v1/mx/reverse | Find domains sharing MX mail servers |
| Subdomain Discovery | /subdomains | /v1/domain/subdomains | Public host/subdomain discovery with source labels + JSON/CSV export |
| DNSSEC | /dnssec | /v1/dnssec/check | DS / DNSKEY / RRSIG / NSEC checks with 0–100 security score and strong/partial/weak status |
| DNS History | /dns-history | /v1/dns/history | Passive DNS records from CIRCL, Robtex, and local query history — permanently stored |
API Endpoints
| Method | Path | Query | Purpose | Limit / Rule |
|---|---|---|---|---|
| GET | /v1/dns/lookup | domain, type? | Standard DNS lookup for domain targets | 30 req/min per client IP |
| GET | /v1/dns/rdns | target (ipv4|cidr) | Concurrent reverse DNS scan with PTR/CNAME scoring | 30s cooldown per client |
| GET | /v1/ip/reverse | ip | Find public domains pointing to an IPv4 | Public source dependent |
| GET | /v1/ns/reverse | domain, limit? | Find domains sharing authoritative NS servers | Server-side capped and cached |
| GET | /v1/mx/reverse | domain, limit? | Find domains sharing MX mail servers | Server-side capped and cached |
| GET | /v1/domain/subdomains | domain | Find public host records under target domain | Server-side capped and cached |
| GET | /v1/dnssec/check | domain | DS/DNSKEY/RRSIG/NSEC checks with 0–100 security score | 30 req/min per client IP |
| GET | /v1/dns/history | domain, limit? | Passive DNS history from CIRCL, Robtex, and local records | 30 req/min per client IP |
| GET | /health | (none) | Health check endpoint | No auth; monitoring use |
V1 API: Public access, rate limited (30 req/min). V2 API: Internal use only, requires Bearer token, no rate limit.
Record Types And Meaning
| Type | Target | What It Means |
|---|---|---|
A | Domain | IPv4 address mapping |
AAAA | Domain | IPv6 address mapping |
CNAME | Domain | Alias target chain |
MX | Domain | Mail server routing and priority |
NS | Domain | Authoritative name servers |
PTR | IP/Domain(A/AAAA) | Reverse lookup hostname |
SOA | Domain | Zone authority metadata |
SRV | Domain | Service endpoint target/port/priority |
TXT | Domain | Text policies and verification strings |
CAA | Domain | Allowed certificate authorities |
SPF / DMARC / DKIM | TXT class | Auto-grouped under TXT in this system |
Interactive Terminal Demo
cURL Example
DNS.NF queries only publicly available DNS data and public datasets. Some results may be incomplete or delayed.