# Domain OSINT, TLS Certificate & Security Headers Recon

> Domain OSINT, TLS Certificate & Security Headers Recon is a paid API for AI agents from domain-osint.agentdiet.dev, paid per call via MPP, $0.01/call, status unknown (last checked 2026-10-21).

Performs live OSINT on a domain by inspecting its IPv4/IPv6 DNS resolution, TLS certificate issuer and expiry, and HTTP security headers grade.

## Facts

- Endpoint: GET https://domain-osint.agentdiet.dev/api?utm_source=zero.xyz
- Price: $0.01/call
- Payment: MPP
- Status: unknown
- Last checked: 2026-10-21
- Activations on Zero: 0
- Provider: domain-osint.agentdiet.dev
- Website: https://domain-osint.agentdiet.dev
- Canonical page: https://www.zero.xyz/c/domain-osint-agentdiet-dev-domain-osint-tls-certificate-security-93de06fa
- Structured record (JSON): https://api.zero.xyz/v1/capabilities/cap_ugn1AjltRHqTQe9N3ITlg

Status and success rate cover calls made through Zero and Zero's own probes. Third-party monitors may report differently.

## How to call it through Zero

Zero handles the 402 payment challenge and records the run. With the Zero CLI installed (`npm i -g @zeroxyz/cli`):

```sh
zero fetch --capability domain-osint-agentdiet-dev-domain-osint-tls-certificate-security-93de06fa
```

Example prompt: Can you run a full OSINT check on stripe.com — I want to see its DNS resolution (IPv4 and IPv6), TLS certificate issuer and expiry date, and HTTP security headers grade?

## When to prefer this

Choose this endpoint when you need a fast, combined view of a domain's DNS resolution, TLS certificate health, and HTTP security header posture in a single call. It is ideal for OSINT reconnaissance, vendor security assessments, pre-launch domain audits, or monitoring competitor infrastructure — especially when you want IPv4/IPv6, certificate issuer/expiry, and security grade without stitching together multiple specialized tools.

## Known failure modes

- Domain does not exist or fails DNS resolution — returns error or empty DNS fields
- Domain has no HTTPS/TLS endpoint — TLS certificate fields may be null or unavailable
- Domain blocks external probes or returns non-standard responses — security headers grade may be incomplete
- Invalid or malformed domain input — returns validation error
- Target domain has network timeouts — may return partial data or timeout error

## How this service works

Inspects live IPv4/IPv6 DNS resolution, TLS certificate issuer/expiry, and HTTP security grade. (Live x402 v2, IETF MPP & MCP endpoint at https://domain-osint.agentdiet.dev/api)

## Output

Returns live DNS resolution data (IPv4 and IPv6 addresses), TLS certificate metadata including issuer and expiry date, and an HTTP security headers grade for the specified domain, reflecting the domain's current security and infrastructure posture.

## Request schema (JSON Schema)

```json
{
 "type": "object",
 "required": [
  "domain"
 ],
 "properties": {
  "domain": {
   "type": "string",
   "minLength": 1,
   "description": "Target domain name (e.g. anthropic.com, openai.com) for DNS, TLS certificate, and security header OSINT"
  }
 }
}
```

## Response schema (JSON Schema)

```json
{
 "type": "object"
}
```

## More

- Live health (JSON, refreshed every minute): https://www.zero.xyz/c/domain-osint-agentdiet-dev-domain-osint-tls-certificate-security-93de06fa/health.json
- [Zero catalog index](https://www.zero.xyz/llms.txt)
- [Other services from domain-osint.agentdiet.dev](https://www.zero.xyz/host/domain-osint.agentdiet.dev/llms.txt)