Domain security check

Domain security check: SSL certificate, DMARC/SPF, DNSSEC, security headers and blocklist status with a score

Paid test badge: not yet. The checks above are free: we call the tool without paying and read the payment request it sends back. The Verified badge needs paid calls whose answers match the promised output, and nobody can buy a badge.

Endpoint

POST https://api.17711.xyz/registry/domain-security-service/v1/domain-security/get_report

Our checks, last 30 days

Example input (from the provider)

{
  "body": {
    "domain": "string",
    "max_age_seconds": 0
  },
  "bodyType": "json",
  "method": "POST",
  "type": "http"
}

Promised output schema (from the provider)

{
  "$defs": {
    "BlocklistHit": {
      "properties": {
        "cidr": {
          "type": "string"
        },
        "ip": {
          "type": "string"
        },
        "source": {
          "type": "string"
        }
      },
      "required": [
        "ip",
        "source",
        "cidr"
      ],
      "type": "object"
    },
    "DnsSecurity": {
      "properties": {
        "caa": {
          "description": "CAA records: the certificate authorities allowed to issue for the domain.",
          "items": {
            "type": "string"
          },
          "type": "array"
        },
        "dnssec": {
          "description": "Whether the answer for the domain is validated by DNSSEC.",
          "type": "boolean"
        },
        "name_servers": {
          "description": "Authoritative name servers (at most 8).",
          "items": {
            "type": "string"
          },
          "type": "array"
        }
      },
      "required": [
        "dnssec",
        "name_servers",
        "caa"
      ],
      "type": "object"
    },
    "Finding": {
      "properties": {
        "code": {
          "description": "Stable machine-readable code, e.g. `tls.expired`, `mail.dmarc_absent`, `http.hsts_missing`.",
          "type": "string"
        },
        "message": {
          "description": "What was observed and why it matters, in one sentence.",
          "type": "string"
        },
        "severity": {
          "description": "`critical`, `high`, `medium`, `low` or `info`.",
          "type": "string"
        }
      },
      "required": [
        "severity",
        "code",
        "message"
      ],
      "type": "object"
    },
    "HttpSecurity": {
      "properties": {
        "discloses_version": {
          "description": "Whether the `Server` / `X-Powered-By` headers disclose a software version.",
          "type": "boolean"
        },
        "headers_missing": {
          "description": "The ones that are missing.",
          "items": {
            "type": "string"
          },
          "type": "array"
        },
        "headers_present": {
          "description": "Security headers found on the HTTPS response (`strict-transport-security`,\n`content-security-policy`, `x-content-type-options`, `x-frame-options`, `referrer-policy`,\n`permissions-policy`).",
          "items": {
            "type": "string"
          },
          "type": "array"
        },
        "http_redirects_to_https": {
          "description": "`true` when plain HTTP on port 80 redirects to HTTPS, `false` when it serves content or\nredirects elsewhere, absent when port 80 does not answer.",
          "type": [
            "boolean",
            "null"
          ]
        },
        "https_status": {
          "description": "Status of `GET https://<domain>/`.",
          "format": "uint16",
          "maximum": 65535,
          "minimum": 0,
          "type": [
            "integer",
            "null"
          ]
        }
      },
      "required": [
        "headers_present",
        "headers_missing",
        "discloses_version"
      ],
      "type": "object"
    },
    "MailSecurity": {
      "properties": {
        "dmarc": {
          "description": "DMARC policy: `reject`, `quarantine`, `none` or `absent`.",
          "type": [
            "string",
            "null"
          ]
        },
        "mta_sts": {
          "description": "Whether an MTA-STS policy is published (`_mta-sts` TXT record).",
          "type": "boolean"
        },
        "mx": {
          "description": "Mail servers (MX) of the website's domain, highest priority first (at most 5).",
          "items": {
            "type": "string"
          },
          "type": "array"
        },
        "provider": {
          "description": "Mail platform deduced from the MX records (`google-workspace`, `microsoft-365`, ...).",
          "type": [
            "string",
            "null"
          ]
        },
        "spf": {
          "description": "SPF policy: `strict` (-all), `soft` (~all), `neutral` (?all), `open` (+all) or `none`.",
          "type": [
            "string",
            "null"
          ]
        }
      },
      "required": [
        "mx",
        "mta_sts"
      ],
      "type": "object"
    },
    "TlsSecurity": {
      "properties": {
        "days_remaining": {
          "description": "Days left before expiry (negative once expired).",
          "format": "int64",
          "type": [
            "integer",
            "null"
          ]
        },
        "error": {
          "description": "Why the handshake or validation failed, when it did.",
          "type": [
            "string",
            "null"
          ]
        },
        "expires_at": {
          "description": "Certificate end of validity (UTC).",
          "type": [
            "string",
            "null"
          ]
        },
        "issuer": {
          "type": [
            "string",
            "null"
          ]
        },
        "protocol": {
          "description": "`TLS1.3` or `TLS1.2`.",
          "type": [
            "string",
            "null"
          ]
        },
        "reachable": {
          "description": "Whether HTTPS answered on port 443.",
          "type": "boolean"
        },
        "san_count": {
          "description": "Number of host names the certificate covers.",
          "format": "uint32",
          "minimum": 0,
          "type": "integer"
        },
        "valid": {
          "description": "Whether the certificate chain validates for this host name.",
          "type": "boolean"
        }
      },
      "required": [
        "reachable",
        "valid",
        "san_count"
      ],
      "type": "object"
    }
  },
  "$schema": "https://json-schema.org/draft/2020-12/schema",
  "properties": {
    "input": {
      "properties": {
        "body": {
          "properties": {
            "domain": {
              "description": "The domain to assess: `stripe.com`, `www.stripe

This page as JSON