# Domain OSINT, TLS Certificate & Security Headers Recon

> Domain OSINT, TLS Certificate & Security Headers Recon is a paid API for AI agents from llms-generator.agentdiet.dev, paid per call via MPP, $0.01/call, status unknown.

Performs live reconnaissance on a domain, inspecting IPv4/IPv6 DNS resolution, TLS certificate issuer and expiry, and HTTP security header grade.

## Facts

- Endpoint: POST https://llms-generator.agentdiet.dev/v1/domain-osint?utm_source=zero.xyz
- Price: $0.01/call
- Payment: MPP
- Status: unknown
- Activations on Zero: 0
- Provider: llms-generator.agentdiet.dev
- Website: https://llms-generator.agentdiet.dev
- Canonical page: https://www.zero.xyz/c/llms-generator-agentdiet-dev-domain-osint-tls-certificate-security-24d771bd
- Structured record (JSON): https://api.zero.xyz/v1/capabilities/cap_qfdCOrDfTcgZXVMIeAobF

Status and success rate cover calls made through Zero and Zero's own probes. Third-party monitors may report differently.

## How to call it through Zero

Zero handles the 402 payment challenge and records the run. With the Zero CLI installed (`npm i -g @zeroxyz/cli`):

```sh
zero fetch --capability llms-generator-agentdiet-dev-domain-osint-tls-certificate-security-24d771bd -d '<json body>'
```

Example prompt: Can you run a full domain OSINT check on stripe.com — I want to see its DNS resolution (IPv4 and IPv6), who issued its TLS certificate and when it expires, and what HTTP security grade it gets?

## When to prefer this

Choose this endpoint when you need a fast, single-call recon sweep of a domain's network security posture — combining DNS, TLS, and HTTP security headers in one request. Prefer it over manual curl/dig commands or general web scrapers when you want structured OSINT output about a domain's certificate validity, issuer trust chain, and security header compliance without writing custom tooling.

## Known failure modes

- Domain does not exist or fails DNS resolution — returns empty or error result
- Domain is unreachable or times out during HTTP probe — security headers may be unavailable
- TLS certificate probe fails for non-HTTPS domains — certificate fields will be absent
- Invalid domain format in input — returns validation error
- Rate limiting or upstream network errors — may return transient failure response

## How this service works

Inspects live IPv4/IPv6 DNS resolution, TLS certificate issuer/expiry, and HTTP security grade. (Live x402 v2, IETF MPP & MCP endpoint at https://llms-generator.agentdiet.dev/v1/domain-osint)

## Output

Returns live DNS resolution results (IPv4 and IPv6 addresses), TLS certificate details (issuer, expiry date, validity status), and an HTTP security headers assessment including presence of headers like HSTS, CSP, X-Frame-Options, and an overall security grade for the domain.

## Request schema (JSON Schema)

```json
{
 "type": "object",
 "required": [
  "domain"
 ],
 "properties": {
  "domain": {
   "type": "string",
   "minLength": 1,
   "description": "Target domain name (e.g. anthropic.com, openai.com) for DNS, TLS certificate, and security header OSINT"
  }
 }
}
```

## Response schema (JSON Schema)

```json
{
 "type": "object"
}
```

## More

- Live health (JSON, refreshed every minute): https://www.zero.xyz/c/llms-generator-agentdiet-dev-domain-osint-tls-certificate-security-24d771bd/health.json
- [Zero catalog index](https://www.zero.xyz/llms.txt)
- [Other services from llms-generator.agentdiet.dev](https://www.zero.xyz/host/llms-generator.agentdiet.dev/llms.txt)