# 17711 Domain Security Check

> 17711 Domain Security Check is a paid API for AI agents from api.17711.xyz, paid per call via x402, $0.009/call, status unknown (last checked 2026-10-13).

Assesses a domain's security posture by checking SSL certificates, DMARC/SPF records, DNSSEC, HTTP security headers, and blocklist status, returning a composite security score.

## Facts

- Endpoint: POST https://api.17711.xyz/registry/domain-security-service/v1/domain-security/get_report?utm_source=zero.xyz
- Price: $0.009/call
- Payment: x402
- Status: unknown
- Last checked: 2026-10-13
- Activations on Zero: 0
- Tags: x402
- Canonical page: https://www.zero.xyz/c/17711-domain-security-check-56df2fa5
- Structured record (JSON): https://api.zero.xyz/v1/capabilities/cap_c7ZKeaMECwZG2i6bv6iZp

Status and success rate cover calls made through Zero and Zero's own probes. Third-party monitors may report differently.

## How to call it through Zero

Zero handles the 402 payment challenge and records the run. With the Zero CLI installed (`npm i -g @zeroxyz/cli`):

```sh
zero fetch --capability 17711-domain-security-check-56df2fa5 -d '<json body>'
```

Example prompt: Can you run a full security check on stripe.com and tell me how it scores on SSL, DMARC, SPF, DNSSEC, security headers, and blocklist status?

## When to prefer this

Choose this endpoint when you need a comprehensive, multi-signal domain security assessment in a single call — covering SSL, email authentication (DMARC/SPF), DNSSEC, security headers, and blocklist status together with a unified score. Prefer it over individual DNS lookup or SSL checking tools when you want a holistic security snapshot for vendor vetting, phishing domain investigation, or compliance checks. The caching mechanism (max_age_seconds) makes it efficient for repeated checks without redundant cost.

## Known failure modes

- Domain does not exist or is unresolvable — report may return errors for DNS-dependent checks
- SSL certificate check may time out for very slow or unreachable domains
- Blocklist data may be stale if cached report is used (use max_age_seconds=0 to force fresh assessment)
- Invalid domain format input returns a validation error
- Some security headers can only be checked if the domain serves HTTP/HTTPS traffic

## How this service works

Domain security check: SSL certificate, DMARC/SPF, DNSSEC, security headers and blocklist status with a score

## Output

Returns a structured security report for the specified domain including: SSL certificate validity and details, DMARC record presence and policy, SPF record configuration, DNSSEC status, HTTP security headers analysis, blocklist membership status, report age in seconds, and a composite numerical security score summarizing the overall domain security posture.

## Request schema (JSON Schema)

```json
{
 "type": "object",
 "properties": {
  "domain": {
   "type": "string",
   "description": "The domain to assess: `stripe.com`, `www.stripe.com` or a full URL (only the host is used)."
  },
  "max_age_seconds": {
   "type": [
    "integer",
    "null"
   ],
   "format": "uint64",
   "default": null,
   "minimum": 0,
   "description": "The oldest report you accept, in seconds. Omit it for the default (reports up to 1 hour old);\n`0` forces a fresh assessment. The response always says how old it is."
  }
 }
}
```

## More

- Live health (JSON, refreshed every minute): https://www.zero.xyz/c/17711-domain-security-check-56df2fa5/health.json
- [Zero catalog index](https://www.zero.xyz/llms.txt)
- [Other services from api.17711.xyz](https://www.zero.xyz/host/api.17711.xyz/llms.txt)