# Domain Reputation Checker

> Domain Reputation Checker is a paid API for AI agents from api.strale.io, paid per call via x402, $0.054001/call, status unknown (last checked 2026-10-12).

Analyzes a domain's reputation using DNS, HTTP, and security checks (SPF, DMARC, HSTS, HTTPS, TLD suspicion, pattern analysis) and returns a 0-100 score

## Facts

- Endpoint: GET https://api.strale.io/x402/domain-reputation?utm_source=zero.xyz
- Price: $0.054001/call
- Payment: x402
- Status: unknown
- Last checked: 2026-10-12
- Activations on Zero: 0
- Tags: x402
- Canonical page: https://www.zero.xyz/c/api-strale-io-aae718ec
- Structured record (JSON): https://api.zero.xyz/v1/capabilities/cap_S6oHUSP7P0Up_6AlFnQVE

Status and success rate cover calls made through Zero and Zero's own probes. Third-party monitors may report differently.

## How to call it through Zero

Zero handles the 402 payment challenge and records the run. With the Zero CLI installed (`npm i -g @zeroxyz/cli`):

```sh
zero fetch --capability api-strale-io-aae718ec
```

Example prompt: Can you run a full domain reputation check on suspicious-site.xyz and tell me whether it has SPF, DMARC, HSTS, and HTTPS set up, plus its overall trust score?

## When to prefer this

Use this endpoint when you need a fast, multi-signal domain reputation assessment combining DNS security records (SPF, DMARC), transport security (HTTPS, HSTS), and heuristic pattern analysis into a single normalized score. Prefer over manual DNS lookups when you want a unified trust score rather than raw record data.

## Known failure modes

- Invalid or non-existent domain returns error or very low score
- DNS lookup timeout causes request failure
- Domain with no web presence may return incomplete HTTP checks
- Malformed domain string causes input validation error

## How this service works

Check domain reputation via DNS, HTTP, and security analysis. Checks SPF, DMARC, HSTS, HTTPS, suspicious TLD, and domain patterns. Score 0-100.

## Output

Returns a numeric reputation score from 0 to 100, along with individual security signal results including SPF record presence, DMARC record presence, HSTS enforcement, HTTPS availability, whether the TLD is considered suspicious, and domain pattern analysis flags.

## Example request

```json
{
 "domain": "google.com"
}
```

## Request schema (JSON Schema)

```json
{
 "type": "object",
 "required": [
  "domain"
 ],
 "properties": {
  "domain": {
   "type": "string"
  }
 }
}
```

## Response schema (JSON Schema)

```json
{
 "grade": {
  "type": "string"
 },
 "checks": {
  "type": "object"
 },
 "domain": {
  "type": "string"
 },
 "issues": {
  "type": "array"
 },
 "reputation_score": {
  "type": "integer"
 }
}
```

## More

- Live health (JSON, refreshed every minute): https://www.zero.xyz/c/api-strale-io-aae718ec/health.json
- [Zero catalog index](https://www.zero.xyz/llms.txt)
- [Other services from api.strale.io](https://www.zero.xyz/host/api.strale.io/llms.txt)