# CyberPulse OSINT Domain & IP Lookup

> CyberPulse OSINT Domain & IP Lookup is a paid API for AI agents from cyberpulse.theaslangroupllc.com, paid per call via x402, $0.15/call, status unknown (last checked 2026-09-14).

Performs a comprehensive OSINT lookup on a domain or IP address, returning open ports, known CVEs, DNS/email posture (SPF/DMARC/DKIM), SSL grade, threat-feed status, and geolocation.

## Facts

- Endpoint: GET https://cyberpulse.theaslangroupllc.com/api/cyber/osint
- Price: $0.15/call
- Payment: x402
- Status: unknown
- Last checked: 2026-09-14
- Activations on Zero: 0
- Tags: x402
- Canonical page: https://www.zero.xyz/c/cyberpulse-osint-domain-ip-lookup-88dd9fcd
- Structured record (JSON): https://api.zero.xyz/v1/capabilities/cap_JEAKc9QwpzVMD_kGKlt9g

Status and success rate cover calls made through Zero and Zero's own probes. Third-party monitors may report differently.

## How to call it through Zero

Zero handles the 402 payment challenge and records the run. With the Zero CLI installed (`npm i -g @zeroxyz/cli`):

```sh
zero fetch --capability cyberpulse-osint-domain-ip-lookup-88dd9fcd
```

Example prompt: Run a full OSINT check on shopmallstore.com — I want to see its open ports, any known CVEs from Shodan, whether it has valid SPF/DMARC/DKIM records, its SSL grade, whether it's on any threat feeds, and where it's geolocated.

## When to prefer this

Use this endpoint when you need a broad, multi-signal passive OSINT snapshot of a domain or IP in one call — covering ports, CVEs, email posture, SSL, threat feeds, and geolocation simultaneously. Prefer it over narrower CVE-only or DNS-only tools when you need defensive triage or rapid reconnaissance of an external host without active scanning.

## Known failure modes

- Invalid or unresolvable domain/IP returns a 400 or empty result
- Private/RFC-1918 IP addresses may return no Shodan data
- Domain with no DNS records may have missing SPF/DMARC fields
- Rate limiting or payment failure returns 402
- Shodan InternetDB may have stale data for recently reconfigured hosts
- SSL grade unavailable if domain has no HTTPS endpoint

## How this service works

OSINT lookup for any domain or IP — open ports and known CVEs (Shodan InternetDB), DNS and email posture (SPF/DMARC/DKIM), SSL grade, threat-feed status, and geolocation, for security and defensive agents. Authorized defensive use only.

## Output

Returns a structured security report for the queried domain or IP, including: list of open ports, associated CVEs with severity, DNS records, SPF/DMARC/DKIM email posture flags, SSL certificate grade, threat-feed hit status, and geolocation (country, city, ASN).

## Request schema (JSON Schema)

```json
{
 "type": "object",
 "$schema": "https://json-schema.org/draft/2020-12/schema",
 "required": [
  "input"
 ],
 "properties": {
  "input": {
   "type": "object",
   "required": [
    "type",
    "method"
   ],
   "properties": {
    "type": {
     "type": "string",
     "const": "http"
    },
    "method": {
     "enum": [
      "GET",
      "HEAD",
      "DELETE"
     ],
     "type": "string"
    },
    "queryParams": {
     "type": "object",
     "properties": {
      "lang": {
       "type": "string",
       "description": "en | es | fr | de | ja | zh | ko | pt | ar | hi (default: en)"
      },
      "target": {
       "type": "string",
       "description": "Domain or IP address — e.g. \"example.com\" | \"8.8.8.8\" | \"shopify.com\" | \"192.168.1.1\" (public IPs only)"
      }
     }
    }
   },
   "additionalProperties": false
  },
  "output": {
   "type": "object",
   "required": [
    "type"
   ],
   "properties": {
    "type": {
     "type": "string"
    },
    "errors": {
     "type": "object",
     "description": "Documented error responses, keyed by HTTP status code",
     "additionalProperties": {
      "type": "object",
      "required": [
       "description"
      ],
      "properties": {
       "example": {
        "type": "object"
       },
       "description": {
        "type": "string"
       }
      }
     }
    },
    "example": {
     "type": "object"
    }
   }
  }
 }
}
```

## Response schema (JSON Schema)

```json
{
 "type": "json",
 "example": {
  "target": "example.com",
  "target_type": "domain",
  "risk_summary": "Domain has minimal exposure. Good email security posture. No known vulnerabilities.",
  "network_exposure": {
   "open_ports": [
    80,
    443
   ],
   "cdn_detected": true,
   "cdn_provider": "Cloudflare",
   "high_risk_ports": [],
   "services_detected": [
    "nginx/1.18"
   ]
  },
  "domain_intelligence": {
   "ssl_grade": "A+",
   "spf_configured": true,
   "dmarc_configured": true,
   "email_security_grade": "A"
  },
  "vulnerability_exposure": {
   "cve_count": 0,
   "known_cves": [],
   "risk_level": "CLEAN"
  }
 }
}
```

## More

- Live health (JSON, refreshed every minute): https://www.zero.xyz/c/cyberpulse-osint-domain-ip-lookup-88dd9fcd/health.json
- [Zero catalog index](https://www.zero.xyz/llms.txt)
- [Other services from cyberpulse.theaslangroupllc.com](https://www.zero.xyz/host/cyberpulse.theaslangroupllc.com/llms.txt)