# DNS Lookup – DoH Risk Report

> DNS Lookup – DoH Risk Report is a paid API for AI agents from relay402.georgespring.workers.dev, paid per call via x402, $0.003/call, status unknown (last checked 2026-09-13).

Performs DNS-over-HTTPS lookups for common record types on a given domain and returns results normalized into a structured risk report for web and email agents.

## Facts

- Endpoint: GET https://relay402.georgespring.workers.dev/api/web-dns-lookup
- Price: $0.003/call
- Payment: x402
- Status: unknown
- Last checked: 2026-09-13
- Activations on Zero: 0
- Tags: x402
- Canonical page: https://www.zero.xyz/c/dns-lookup-doh-risk-report-8cc791df
- Structured record (JSON): https://api.zero.xyz/v1/capabilities/cap_SdF0747T80rNma-AYxqa9

Status and success rate cover calls made through Zero and Zero's own probes. Third-party monitors may report differently.

## How to call it through Zero

Zero handles the 402 payment challenge and records the run. With the Zero CLI installed (`npm i -g @zeroxyz/cli`):

```sh
zero fetch --capability dns-lookup-doh-risk-report-8cc791df
```

Example prompt: Look up the DNS records for suspicious-site.com — I want to see A, MX, and TXT records and get a risk assessment of the domain's DNS infrastructure.

## When to prefer this

Choose this endpoint when you need DNS records for a domain normalized into a structured risk report rather than raw resolver output — especially useful in agentic pipelines that need to make trust or routing decisions based on DNS infrastructure signals. Prefer this over generic DNS resolvers when you want pre-processed risk framing alongside the raw records, and when pay-per-call pricing via x402 fits your agent's payment model.

## Known failure modes

- Invalid domain format returns a validation error (domain must match pattern ^[a-z0-9]([a-z0-9.-]{2,251})[a-z0-9]$)
- Domain does not exist (NXDOMAIN) returns empty or error result
- Payment not included or invalid returns HTTP 402
- DNS resolution timeout for slow or unresponsive authoritative servers
- Requested record types not found returns empty record set for those types
- Malformed 'types' query param may be ignored or cause error

## How this service works

DNS-over-HTTPS lookup for common record types, normalized into a risk report for web and email agents.

## Output

A normalized risk report containing resolved DNS records for the requested types (e.g. A, AAAA, MX, TXT, CNAME, NS), along with structured risk signals derived from the DNS infrastructure, suitable for consumption by web or email agents making trust decisions.

## Request schema (JSON Schema)

```json
{
 "type": "object",
 "$schema": "https://json-schema.org/draft/2020-12/schema",
 "required": [
  "input"
 ],
 "properties": {
  "input": {
   "type": "object",
   "required": [
    "type",
    "method"
   ],
   "properties": {
    "type": {
     "type": "string",
     "const": "http"
    },
    "method": {
     "enum": [
      "GET"
     ],
     "type": "string"
    },
    "queryParams": {
     "type": "object",
     "$schema": "https://json-schema.org/draft/2020-12/schema",
     "required": [
      "domain"
     ],
     "properties": {
      "types": {
       "type": "string",
       "maxLength": 64
      },
      "domain": {
       "type": "string",
       "pattern": "^[a-z0-9]([a-z0-9.-]{2,251})[a-z0-9]$"
      }
     },
     "additionalProperties": false
    }
   },
   "additionalProperties": false
  }
 }
}
```

## More

- Live health (JSON, refreshed every minute): https://www.zero.xyz/c/dns-lookup-doh-risk-report-8cc791df/health.json
- [Zero catalog index](https://www.zero.xyz/llms.txt)
- [Other services from relay402.georgespring.workers.dev](https://www.zero.xyz/host/relay402.georgespring.workers.dev/llms.txt)