# Domain OSINT, TLS Certificate & Security Headers Recon

> Domain OSINT, TLS Certificate & Security Headers Recon is a paid API for AI agents from llms-generator.agentdiet.dev, paid per call via MPP, $0.01/call, status unknown (last checked 2026-10-21).

Performs live reconnaissance on a domain, returning IPv4/IPv6 DNS resolution, TLS certificate issuer/expiry details, and HTTP security header grade.

## Facts

- Endpoint: GET https://llms-generator.agentdiet.dev/v1/osint?utm_source=zero.xyz
- Price: $0.01/call
- Payment: MPP
- Status: unknown
- Last checked: 2026-10-21
- Activations on Zero: 0
- Provider: llms-generator.agentdiet.dev
- Website: https://llms-generator.agentdiet.dev
- Canonical page: https://www.zero.xyz/c/llms-generator-agentdiet-dev-domain-osint-tls-certificate-security-f8e7e725
- Structured record (JSON): https://api.zero.xyz/v1/capabilities/cap_krrLmqaYGkONbjFdv43fg

Status and success rate cover calls made through Zero and Zero's own probes. Third-party monitors may report differently.

## How to call it through Zero

Zero handles the 402 payment challenge and records the run. With the Zero CLI installed (`npm i -g @zeroxyz/cli`):

```sh
zero fetch --capability llms-generator-agentdiet-dev-domain-osint-tls-certificate-security-f8e7e725
```

Example prompt: Can you run a full OSINT check on anthropic.com — I need the live DNS resolution (IPv4 and IPv6), TLS certificate issuer and expiry date, and the HTTP security headers grade?

## When to prefer this

Choose this endpoint when you need a quick, live, all-in-one security snapshot of a domain including DNS, TLS, and HTTP security headers — particularly useful for vendor due diligence, pre-deployment audits, certificate expiry checks, and competitive infrastructure reconnaissance. Prefer this over dedicated DNS-only or SSL-only tools when you want consolidated OSINT in a single call.

## Known failure modes

- Domain does not exist or fails DNS resolution — returns error or empty DNS fields
- Domain is unreachable over HTTPS — TLS certificate data unavailable
- Domain has no HTTPS endpoint — security headers grade cannot be computed
- Invalid or malformed domain input — API returns validation error
- Timeout during live probing of the domain — partial results or timeout error

## How this service works

Inspects live IPv4/IPv6 DNS resolution, TLS certificate issuer/expiry, and HTTP security grade. (Live x402 v2, IETF MPP & MCP endpoint at https://llms-generator.agentdiet.dev/v1/osint)

## Output

Returns a structured object containing live DNS resolution results (IPv4 and IPv6 addresses), TLS certificate details (issuer, expiry date, validity), and an HTTP security headers grade reflecting the presence or absence of headers like HSTS, CSP, X-Frame-Options, and similar security directives.

## Request schema (JSON Schema)

```json
{
 "type": "object",
 "required": [
  "domain"
 ],
 "properties": {
  "domain": {
   "type": "string",
   "minLength": 1,
   "description": "Target domain name (e.g. anthropic.com, openai.com) for DNS, TLS certificate, and security header OSINT"
  }
 }
}
```

## Response schema (JSON Schema)

```json
{
 "type": "object"
}
```

## More

- Live health (JSON, refreshed every minute): https://www.zero.xyz/c/llms-generator-agentdiet-dev-domain-osint-tls-certificate-security-f8e7e725/health.json
- [Zero catalog index](https://www.zero.xyz/llms.txt)
- [Other services from llms-generator.agentdiet.dev](https://www.zero.xyz/host/llms-generator.agentdiet.dev/llms.txt)