# Lumen Domain Intelligence Lookup

> Lumen Domain Intelligence Lookup is a paid API for AI agents from lumenworks-x402-decoder.onrender.com, paid per call via x402, $0.002/call, status unknown (last checked 2026-10-11).

Performs comprehensive domain intelligence: DNS records (A/AAAA/CNAME/MX/NS/TXT/CAA), SPF/DMARC email security posture, RDAP registration data, domain age, and resolution status — useful for phishing detection, fraud checks, and lead qualification.

## Facts

- Endpoint: POST https://lumenworks-x402-decoder.onrender.com/v1/domain/lookup?utm_source=zero.xyz
- Price: $0.002/call
- Payment: x402
- Status: unknown
- Last checked: 2026-10-11
- Activations on Zero: 0
- Tags: x402
- Canonical page: https://www.zero.xyz/c/lumen-domain-intelligence-lookup-5cc3a882
- Structured record (JSON): https://api.zero.xyz/v1/capabilities/cap__ZMvmzkrM2za1FmU3tsW8

Status and success rate cover calls made through Zero and Zero's own probes. Third-party monitors may report differently.

## How to call it through Zero

Zero handles the 402 payment challenge and records the run. With the Zero CLI installed (`npm i -g @zeroxyz/cli`):

```sh
zero fetch --capability lumen-domain-intelligence-lookup-5cc3a882 -d '<json body>'
```

Example prompt: Can you do a full domain intelligence check on suspiciousdomain.xyz — I need its DNS records (A, MX, NS, TXT), SPF and DMARC email policies, who the registrar is, when it was registered, when it expires, and how old the domain is so I can assess whether it's a phishing risk?

## When to prefer this

Choose this endpoint when you need a single call that combines DNS resolution, email security policy analysis (SPF/DMARC), and RDAP registration intelligence for a domain — particularly for phishing/fraud risk assessment or lead qualification workflows. Prefer this over manual DNS tools when you need domain age, registrar, and expiry data alongside DNS records in one structured response.

## Known failure modes

- Domain does not exist or cannot be resolved — resolves field returns false with empty DNS records
- Invalid domain format in request body causes 4xx validation error
- RDAP data unavailable for some TLDs or private registrations — rdap fields may be null or partial
- DNS-over-HTTPS upstream timeout causes delayed or failed response
- Rate limiting or payment failure on x402 endpoint returns 402 or 429

## How this service works

Domain intelligence: DNS A/AAAA/CNAME/MX/NS/TXT/CAA (DNS-over-HTTPS), SPF + DMARC, RDAP registration/expiry/registrar/status, domain age in days. Useful for phishing/fraud checks and lead qualificati…

## Output

Returns a JSON object containing: timestamp of lookup, full DNS records (A, AAAA, CNAME, MX with priority, NS, TXT, CAA), RDAP data (registrar, registration date, expiry date, last changed, nameservers, DNSSEC flag, status flags, handle), email security posture (SPF string, DMARC string, hasMx boolean), domain age in days, and a resolves boolean.

## Response schema (JSON Schema)

```json
{
 "type": "json",
 "example": {
  "at": "2026-10-10T12:48:30.425Z",
  "dns": {
   "A": [
    "172.66.147.243",
    "104.20.23.154"
   ],
   "MX": [
    {
     "exchange": "",
     "priority": 0
    }
   ],
   "NS": [
    "hera.ns.cloudflare.com",
    "elliott.ns.cloudflare.com"
   ],
   "CAA": [],
   "TXT": [
    "v=spf1 -all",
    "_k2n1y4vw3qtb4skdx9e7dxt97qrmmq9"
   ],
   "AAAA": [
    "2606:4700:10::6814:179a",
    "2606:4700:10::ac42:93f3"
   ],
   "CNAME": []
  },
  "rdap": {
   "dnssec": true,
   "handle": "2336799_DOMAIN_COM-VRSN",
   "status": [
    "client delete prohibited",
    "client transfer prohibited",
    "client update prohibited"
   ],
   "expires": "2027-08-13T04:00:00Z",
   "registrar": "RESERVED-Internet Assigned Numbers Authority",
   "registered": "1995-08-14T04:00:00Z",
   "lastChanged": "2026-08-14T08:01:43Z",
   "nameservers": [
    "elliott.ns.cloudflare.com",
    "hera.ns.cloudflare.com"
   ]
  },
  "email": {
   "spf": "v=spf1 -all",
   "dmarc": "v=DMARC1;p=reject;sp=reject;adkim=s;aspf=s",
   "hasMx": true
  },
  "domain": "example.com",
  "ageDays": 11380,
  "resolves": true
 }
}
```

## More

- Live health (JSON, refreshed every minute): https://www.zero.xyz/c/lumen-domain-intelligence-lookup-5cc3a882/health.json
- [Zero catalog index](https://www.zero.xyz/llms.txt)
- [Other services from lumenworks-x402-decoder.onrender.com](https://www.zero.xyz/host/lumenworks-x402-decoder.onrender.com/llms.txt)