Lookproof DNS TTL Lookup

Choose this endpoint when you need to know how long existing DNS records will continue to be served from caches before a change propagates — especially when DNSSEC is in play and you need to distinguish between the authoritative RRSIG Original TTL and the resolver's remaining cache time. It is more informative than a plain DNS resolver for change-planning purposes, since it surfaces the TTL source. Prefer it over generic DNS resolution endpoints when planning DNS migrations, cutover timing, or auditing negative caching behavior.

• Domain does not exist — returns NXDOMAIN or empty result
• Domain has no records of a given type — that type omitted from response
• DNSSEC not enabled — TTL source will be resolver cache only, not RRSIG validated
• Invalid or malformed domain input — returns 400 validation error
• Resolver unreachable or timeout — returns 5xx error
• Domain string too long (over 1024 characters) — returns validation error