# Domain Intelligence Lookup (RDAP, DNS, SPF, DMARC, TLS Certs)

> Domain Intelligence Lookup (RDAP, DNS, SPF, DMARC, TLS Certs) is a paid API for AI agents from x402-gateway.blackwoodstate8.workers.dev, paid per call via x402, $0.02/call, status unknown (last checked 2026-10-23).

Returns comprehensive domain intelligence including RDAP registration data, DNS records, email security (SPF/DMARC), and certificate transparency logs for a given domain.

## Facts

- Endpoint: POST https://x402-gateway.blackwoodstate8.workers.dev/v1/domain-intel?utm_source=zero.xyz
- Price: $0.02/call
- Payment: x402
- Status: unknown
- Last checked: 2026-10-23
- Activations on Zero: 0
- Tags: x402
- Canonical page: https://www.zero.xyz/c/domain-intelligence-lookup-rdap-dns-spf-dmarc-tls-certs-fcea3686
- Structured record (JSON): https://api.zero.xyz/v1/capabilities/cap_soinaqYe75eMW8D-22-uD

Status and success rate cover calls made through Zero and Zero's own probes. Third-party monitors may report differently.

## How to call it through Zero

Zero handles the 402 payment challenge and records the run. With the Zero CLI installed (`npm i -g @zeroxyz/cli`):

```sh
zero fetch --capability domain-intelligence-lookup-rdap-dns-spf-dmarc-tls-certs-fcea3686 -d '<json body>'
```

Example prompt: Can you pull the full domain intel on stripe.com — I need the RDAP registration details, all DNS records, SPF and DMARC config, and any TLS certificates that have been issued for it?

## When to prefer this

Use this endpoint when you need a single API call that aggregates RDAP registration, DNS records, email security (SPF/DMARC), and certificate transparency data for a domain — particularly for OSINT, security research, or vendor due diligence. Prefer this over manual DNS tools or separate WHOIS/RDAP queries when you need all domain signals in one structured JSON response. Not suitable for historical WHOIS, registrant PII (redacted by registries), or port/vulnerability scanning.

## Known failure modes

- Invalid domain format returns validation error
- Domain not found in RDAP returns empty registration object
- DNS resolution failure for non-existent domain returns empty record arrays
- Certificate Transparency lookup timeout may return partial certificate data
- Rate limiting or upstream RDAP registry unavailability may cause partial responses

## How this service works

Use when you need a whois or domain lookup, dns records, email security checks or certificate transparency data for osint or due diligence. Do not use for historical whois, registrant personal data (redacted by registries) or port and vulnerability scans. Returns JSON with a domain's registration (RDAP: registrar, dates, status, DNSSEC), DNS records, SPF and DMARC, and recent TLS certificates for 0.02 USDC per call. Typical response time 4000 ms (p95). Category: Data.

## Output

A JSON object containing: domain registration data from RDAP (registrar, creation/expiry dates, domain status flags, DNSSEC status), full DNS record sets (A, AAAA, MX, NS, TXT, CAA), parsed SPF and DMARC email security records, and a list of recent TLS certificates from Certificate Transparency logs (crt.sh). Optionally includes a 'next' hint for chaining further lookups.

## Request schema (JSON Schema)

```json
{
 "type": "object",
 "$schema": "https://json-schema.org/draft/2020-12/schema",
 "required": [
  "input"
 ],
 "properties": {
  "input": {
   "type": "object",
   "required": [
    "type",
    "method",
    "bodyType",
    "body"
   ],
   "properties": {
    "body": {
     "type": "object",
     "required": [
      "domain"
     ],
     "properties": {
      "domain": {
       "type": "string",
       "pattern": "^(?:[A-Za-z0-9](?:[A-Za-z0-9-]{0,61}[A-Za-z0-9])?\\.)+[A-Za-z]{2,63}\\.?$",
       "maxLength": 254,
       "description": "Domain name in ASCII (punycode for internationalized names), e.g. example.com"
      },
      "certificates": {
       "type": "boolean",
       "description": "Include issued TLS certificates from Certificate Transparency (crt.sh); true when omitted"
      }
     }
    },
    "type": {
     "type": "string",
     "const": "http"
    },
    "method": {
     "enum": [
      "POST"
     ],
     "type": "string"
    },
    "bodyType": {
     "enum": [
      "json",
      "form-data",
      "text"
     ],
     "type": "string"
    }
   },
   "additionalProperties": false
  },
  "output": {
   "type": "object",
   "required": [
    "type"
   ],
   "properties": {
    "type": {
     "type": "string"
    },
    "example": {
     "type": "object",
     "required": [
      "domain",
      "registered",
      "registration",
      "dns",
      "email",
      "certificates",
      "partial"
     ],
     "properties": {
      "dns": {
       "type": "object",
       "required": [
        "a",
        "aaaa",
        "mx",
        "ns",
        "txt",
        "caa"
       ],
       "properties": {
        "a": {
         "type": "array",
         "items": {
          "type": "string"
         }
        },
        "mx": {
         "type": "array",
         "items": {
          "type": "object",
          "required": [
           "priority",
           "host"
          ],
          "properties": {
           "host": {
            "type": "string"
           },
           "priority": {
            "type": "integer",
            "maximum": 9007199254740991,
            "minimum": -9007199254740991
           }
          },
          "additionalProperties": false
         }
        },
        "ns": {
         "type": "array",
         "items": {
          "type": "string"
         }
        },
        "caa": {
         "type": "array",
         "items": {
          "type": "string"
         }
        },
        "txt": {
         "type": "arra
… (truncated)
```

## Response schema (JSON Schema)

```json
{
 "type": "json",
 "example": {
  "dns": {
   "a": [
    "104.20.23.154",
    "172.66.147.243"
   ],
   "mx": [],
   "ns": [
    "elliott.ns.cloudflare.com",
    "hera.ns.cloudflare.com"
   ],
   "caa": [],
   "txt": [
    "v=spf1 -all",
    "_k2n1y4vw3qtb4skdx9e7dxt97qrmmq9"
   ],
   "aaaa": [
    "2606:4700:10::6814:179a",
    "2606:4700:10::ac42:93f3"
   ]
  },
  "email": {
   "spf": "v=spf1 -all",
   "dmarc": "v=DMARC1;p=reject;sp=reject;adkim=s;aspf=s",
   "dmarcPolicy": "reject"
  },
  "domain": "example.com",
  "partial": [],
  "registered": true,
  "certificates": null,
  "registration": {
   "dnssec": true,
   "status": [
    "client delete prohibited",
    "client transfer prohibited",
    "client update prohibited"
   ],
   "created": "1995-08-14T04:00:00Z",
   "expires": "2027-08-13T04:00:00Z",
   "updated": "2026-08-14T08:01:43Z",
   "registrar": "RESERVED-Internet Assigned Numbers Authority",
   "rdapServer": "rdap.verisign.com",
   "nameservers": [
    "elliott.ns.cloudflare.com",
    "hera.ns.cloudflare.com"
   ]
  }
 }
}
```

## More

- Live health (JSON, refreshed every minute): https://www.zero.xyz/c/domain-intelligence-lookup-rdap-dns-spf-dmarc-tls-certs-fcea3686/health.json
- [Zero catalog index](https://www.zero.xyz/llms.txt)
- [Other services from x402-gateway.blackwoodstate8.workers.dev](https://www.zero.xyz/host/x402-gateway.blackwoodstate8.workers.dev/llms.txt)