# DNS CNAME Lookup via NextDNS (DoH)

> DNS CNAME Lookup via NextDNS (DoH) is a paid API for AI agents from dns.intel.rallylive.ca, paid per call via x402, $0.01/call, status unknown (last checked 2026-10-21).

Resolves CNAME records for a domain using NextDNS as a DNS-over-HTTPS resolver, returning records, TTL, response code, DNSSEC validation status, and answer time.

## Facts

- Endpoint: GET https://dns.intel.rallylive.ca/dns/cname/via/nextdns?utm_source=zero.xyz
- Price: $0.01/call
- Payment: x402
- Status: unknown
- Last checked: 2026-10-21
- Activations on Zero: 0
- Tags: x402
- Canonical page: https://www.zero.xyz/c/dns-cname-lookup-via-nextdns-doh-94abbe0e
- Structured record (JSON): https://api.zero.xyz/v1/capabilities/cap_ETB9Fj3-gyS_qz8nPaXxs

Status and success rate cover calls made through Zero and Zero's own probes. Third-party monitors may report differently.

## How to call it through Zero

Zero handles the 402 payment challenge and records the run. With the Zero CLI installed (`npm i -g @zeroxyz/cli`):

```sh
zero fetch --capability dns-cname-lookup-via-nextdns-doh-94abbe0e
```

Example prompt: What CNAME records does NextDNS return for example.com, and did the resolver validate DNSSEC?

## When to prefer this

Choose this endpoint when you specifically need to see how NextDNS resolves CNAME records — particularly for comparing resolver behavior, detecting filtering or split-horizon DNS, checking DNS propagation as seen by NextDNS, or verifying DNSSEC validation. Use over generic DNS tools when NextDNS-specific behavior (privacy filtering, security policies) is the variable under investigation.

## Known failure modes

- Domain does not exist — response code NXDOMAIN returned
- NextDNS filters the domain — may return NXDOMAIN or blocked response instead of actual record
- No CNAME record exists for domain — empty records with NOERROR
- Resolver error — SERVFAIL response code
- Invalid or malformed domain name input — request rejected
- Network timeout reaching NextDNS DoH endpoint

## How this service works

CNAME records for a domain as answered by NextDNS (DNS over HTTPS): the records, TTL, response code (NOERROR/NXDOMAIN/SERVFAIL), whether the resolver validated DNSSEC, and the resolver's answer time. Compare resolvers to spot propagation lag, filtering or split-horizon answers. $0.01 per lookup.

## Output

Returns the CNAME records for the queried domain as answered by NextDNS, including the canonical name(s), TTL, DNS response code (NOERROR, NXDOMAIN, or SERVFAIL), whether DNSSEC was validated, and the resolver's answer time in milliseconds.

## Request schema (JSON Schema)

```json
{
 "type": "object",
 "$schema": "https://json-schema.org/draft/2020-12/schema",
 "required": [
  "input"
 ],
 "properties": {
  "input": {
   "type": "object",
   "required": [
    "type",
    "method"
   ],
   "properties": {
    "type": {
     "type": "string",
     "const": "http"
    },
    "method": {
     "enum": [
      "GET"
     ],
     "type": "string"
    },
    "queryParams": {
     "type": "object",
     "properties": {}
    }
   },
   "additionalProperties": false
  },
  "output": {
   "type": "object",
   "required": [
    "type"
   ],
   "properties": {
    "type": {
     "type": "string"
    },
    "example": {
     "type": "object"
    }
   }
  }
 }
}
```

## More

- Live health (JSON, refreshed every minute): https://www.zero.xyz/c/dns-cname-lookup-via-nextdns-doh-94abbe0e/health.json
- [Zero catalog index](https://www.zero.xyz/llms.txt)
- [Other services from dns.intel.rallylive.ca](https://www.zero.xyz/host/dns.intel.rallylive.ca/llms.txt)