# DNS DS Record Lookup via Google 8.8.8.8

> DNS DS Record Lookup via Google 8.8.8.8 is a paid API for AI agents from dns.intel.rallylive.ca, paid per call via x402, $0.01/call, status unknown (last checked 2026-10-21).

Returns DS (Delegation Signer) records for a domain as answered by Google's public DNS resolver (8.8.8.8) via DNS over HTTPS, including TTL, response code, DNSSEC validation status, and answer time.

## Facts

- Endpoint: GET https://dns.intel.rallylive.ca/dns/ds/via/google?utm_source=zero.xyz
- Price: $0.01/call
- Payment: x402
- Status: unknown
- Last checked: 2026-10-21
- Activations on Zero: 0
- Tags: x402
- Canonical page: https://www.zero.xyz/c/dns-ds-record-lookup-via-google-8-8-8-8-96748d4c
- Structured record (JSON): https://api.zero.xyz/v1/capabilities/cap_rcrE1GVkFMy1DFE2Px8GV

Status and success rate cover calls made through Zero and Zero's own probes. Third-party monitors may report differently.

## How to call it through Zero

Zero handles the 402 payment challenge and records the run. With the Zero CLI installed (`npm i -g @zeroxyz/cli`):

```sh
zero fetch --capability dns-ds-record-lookup-via-google-8-8-8-8-96748d4c
```

Example prompt: Can you look up the DS records for example.com using Google's 8.8.8.8 DNS resolver and tell me the TTL, response code, and whether DNSSEC was validated?

## When to prefer this

Choose this endpoint when you specifically need DS records as seen by Google's 8.8.8.8 resolver, particularly to verify DNSSEC delegation, check propagation from Google's perspective, compare resolver behavior, or audit whether Google validates DNSSEC for a domain. Use sibling endpoints on this service to compare against other resolvers like CleanBrowsing, AdGuard, or NextDNS.

## Known failure modes

- Domain has no DS records — returns NOERROR with empty record set
- Non-existent domain — returns NXDOMAIN response code
- Resolver error — returns SERVFAIL response code
- Invalid domain name format — request rejected
- Network timeout reaching Google's DoH endpoint — service may return error

## How this service works

DS records for a domain as answered by Google 8.8.8.8 (DNS over HTTPS): the records, TTL, response code (NOERROR/NXDOMAIN/SERVFAIL), whether the resolver validated DNSSEC, and the resolver's answer time. Compare resolvers to spot propagation lag, filtering or split-horizon answers. $0.01 per lookup.

## Output

Returns the DS resource records for the queried domain (key tag, algorithm, digest type, digest), the TTL in seconds, the DNS response code (NOERROR, NXDOMAIN, or SERVFAIL), a boolean indicating whether Google's resolver validated DNSSEC, and the resolver's answer time in milliseconds.

## Request schema (JSON Schema)

```json
{
 "type": "object",
 "$schema": "https://json-schema.org/draft/2020-12/schema",
 "required": [
  "input"
 ],
 "properties": {
  "input": {
   "type": "object",
   "required": [
    "type",
    "method"
   ],
   "properties": {
    "type": {
     "type": "string",
     "const": "http"
    },
    "method": {
     "enum": [
      "GET"
     ],
     "type": "string"
    },
    "queryParams": {
     "type": "object",
     "properties": {}
    }
   },
   "additionalProperties": false
  },
  "output": {
   "type": "object",
   "required": [
    "type"
   ],
   "properties": {
    "type": {
     "type": "string"
    },
    "example": {
     "type": "object"
    }
   }
  }
 }
}
```

## More

- Live health (JSON, refreshed every minute): https://www.zero.xyz/c/dns-ds-record-lookup-via-google-8-8-8-8-96748d4c/health.json
- [Zero catalog index](https://www.zero.xyz/llms.txt)
- [Other services from dns.intel.rallylive.ca](https://www.zero.xyz/host/dns.intel.rallylive.ca/llms.txt)