# AgentStall ZA Domain Intelligence

> AgentStall ZA Domain Intelligence is a paid API for AI agents from agentstall.nilesh-b54.workers.dev, paid per call via x402, $0.005/call, status unknown (last checked 2026-11-02).

Returns WHOIS/RDAP registration data, DNS info, email security grading, and phishing/impersonation risk flags for any domain, with special signals for African financial institutions.

## Facts

- Endpoint: GET https://agentstall.nilesh-b54.workers.dev/v1/domain-intel?utm_source=zero.xyz
- Price: $0.005/call
- Payment: x402
- Status: unknown
- Last checked: 2026-11-02
- Activations on Zero: 0
- Tags: x402
- Canonical page: https://www.zero.xyz/c/agentstall-za-domain-intelligence-c98518c2
- Structured record (JSON): https://api.zero.xyz/v1/capabilities/cap_Q6liJY5pbW0jScBT4tEwX

Status and success rate cover calls made through Zero and Zero's own probes. Third-party monitors may report differently.

## How to call it through Zero

Zero handles the 402 payment challenge and records the run. With the Zero CLI installed (`npm i -g @zeroxyz/cli`):

```sh
zero fetch --capability agentstall-za-domain-intelligence-c98518c2
```

Example prompt: Can you check the domain kra-itax-refund.co.ke — I got a suspicious email linking to it and want to know how old it is, who registered it, whether it has proper email security, and if it looks like it's impersonating a tax authority?

## When to prefer this

Choose this endpoint when you need comprehensive domain intelligence combining registration history, DNS, and email security in a single call — especially when assessing phishing risk involving African banks, tax authorities (SARS, KRA, FIRS), or mobile money providers. Prefer this over generic WHOIS tools when you need plain-language risk flags and impersonation signals tailored to the African financial sector, or when you need email security grading (DMARC/SPF/MTA-STS) alongside registration data without making multiple separate lookups.

## Known failure modes

- Domain not found in RDAP registry returns empty or null registration fields
- Newly registered or unindexed domains may have incomplete WHOIS data
- Private or redacted WHOIS records return minimal registrar information
- Invalid domain or URL format returns a validation error
- RDAP registry timeout causes delayed or failed lookup
- Domains with no MX/email records may return null email security fields

## How this service works

Domain intelligence for any domain: registrar, registration and expiry dates and domain age from registry RDAP (the modern WHOIS), nameservers and DNSSEC, website addresses, email security grade (DMARC, SPF, MTA-STS) and impersonation signals for African banks, tax authorities and mobile money, with plain-language risk flags such as newly registered or easily spoofed. Useful for phishing triage, vendor checks and research.

## Output

A JSON object containing: the queried domain name; DNS A records and nameservers; DNSSEC signing status; registration details (registrar, registered date, expiry date, age in days); email security breakdown (DMARC policy, SPF, MTA-STS, overall grade, spoofing difficulty); and an array of plain-language risk flags such as 'newly registered' or 'easily spoofed', with impersonation signals for African banks, tax authorities, and mobile money services.

## Request schema (JSON Schema)

```json
{
 "type": "object",
 "$schema": "https://json-schema.org/draft/2020-12/schema",
 "required": [
  "input"
 ],
 "properties": {
  "input": {
   "type": "object",
   "required": [
    "type",
    "method"
   ],
   "properties": {
    "type": {
     "type": "string",
     "const": "http"
    },
    "method": {
     "enum": [
      "GET"
     ],
     "type": "string"
    },
    "queryParams": {
     "type": "object",
     "required": [
      "domain"
     ],
     "properties": {
      "domain": {
       "type": "string",
       "description": "Domain or link, e.g. example.com or https://kra-itax-refund.com/login"
      }
     }
    }
   },
   "additionalProperties": false
  },
  "output": {
   "type": "object",
   "required": [
    "type"
   ],
   "properties": {
    "type": {
     "type": "string"
    },
    "example": {
     "type": "object"
    }
   }
  }
 }
}
```

## Response schema (JSON Schema)

```json
{
 "type": "json",
 "example": {
  "dns": {
   "a": [
    "93.184.215.14"
   ],
   "nameservers": [
    "a.iana-servers.net",
    "b.iana-servers.net"
   ]
  },
  "email": {
   "dmarc": "reject",
   "grade": "C",
   "spoofing": "hard (rejected)"
  },
  "flags": [],
  "domain": "example.com",
  "registration": {
   "ageDays": 11402,
   "expiresOn": "2027-08-13T04:00:00Z",
   "registrar": "RESERVED-Internet Assigned Numbers Authority",
   "dnssecSigned": true,
   "registeredOn": "1995-08-14T04:00:00Z"
  }
 }
}
```

## More

- Live health (JSON, refreshed every minute): https://www.zero.xyz/c/agentstall-za-domain-intelligence-c98518c2/health.json
- [Zero catalog index](https://www.zero.xyz/llms.txt)
- [Other services from agentstall.nilesh-b54.workers.dev](https://www.zero.xyz/host/agentstall.nilesh-b54.workers.dev/llms.txt)