# Domain OSINT, TLS Certificate & Security Headers Recon

> Domain OSINT, TLS Certificate & Security Headers Recon is a paid API for AI agents from whale-momentum.agentdiet.dev, paid per call via MPP, $0.01/call, status unknown (last checked 2026-10-21).

Performs live reconnaissance on a domain, returning IPv4/IPv6 DNS resolution, TLS certificate issuer/expiry details, and HTTP security header grading.

## Facts

- Endpoint: GET https://whale-momentum.agentdiet.dev/v1/osint?utm_source=zero.xyz
- Price: $0.01/call
- Payment: MPP
- Status: unknown
- Last checked: 2026-10-21
- Activations on Zero: 0
- Provider: whale-momentum.agentdiet.dev
- Website: https://whale-momentum.agentdiet.dev
- Canonical page: https://www.zero.xyz/c/whale-momentum-agentdiet-dev-domain-osint-tls-certificate-security-7b1ad26a
- Structured record (JSON): https://api.zero.xyz/v1/capabilities/cap_JzfF5GTfni9Ao0aiww6wY

Status and success rate cover calls made through Zero and Zero's own probes. Third-party monitors may report differently.

## How to call it through Zero

Zero handles the 402 payment challenge and records the run. With the Zero CLI installed (`npm i -g @zeroxyz/cli`):

```sh
zero fetch --capability whale-momentum-agentdiet-dev-domain-osint-tls-certificate-security-7b1ad26a
```

Example prompt: Can you run a full domain OSINT check on stripe.com — I need the live DNS resolution (IPv4 and IPv6), TLS certificate issuer and expiry, and an HTTP security headers grade?

## When to prefer this

Use this endpoint when you need a combined, live OSINT snapshot of a domain's DNS resolution, TLS certificate status, and HTTP security posture in a single call. Prefer it over manual DNS lookup tools or separate certificate checkers when you need all three data points together, especially for security audits, vendor due diligence, or monitoring certificate expiry.

## Known failure modes

- Domain does not resolve — DNS lookup fails, no IP addresses returned
- Domain unreachable — TLS handshake cannot be completed, certificate details unavailable
- Invalid domain input — malformed or empty domain name returns a validation error
- Domain has no HTTPS — security headers and TLS data cannot be retrieved
- Rate limit exceeded — too many calls in a short window
- Payment failure — x402 payment not processed, endpoint returns 402

## How this service works

Inspects live IPv4/IPv6 DNS resolution, TLS certificate issuer/expiry, and HTTP security grade. (Live x402 v2, IETF MPP & MCP endpoint at https://whale-momentum.agentdiet.dev/v1/osint)

## Output

Returns live DNS resolution results including IPv4 and IPv6 addresses, TLS certificate information (issuer, validity dates, expiry), and an HTTP security headers analysis with a security grade for the queried domain.

## Request schema (JSON Schema)

```json
{
 "type": "object",
 "required": [
  "domain"
 ],
 "properties": {
  "domain": {
   "type": "string",
   "minLength": 1,
   "description": "Target domain name (e.g. anthropic.com, openai.com) for DNS, TLS certificate, and security header OSINT"
  }
 }
}
```

## Response schema (JSON Schema)

```json
{
 "type": "object"
}
```

## More

- Live health (JSON, refreshed every minute): https://www.zero.xyz/c/whale-momentum-agentdiet-dev-domain-osint-tls-certificate-security-7b1ad26a/health.json
- [Zero catalog index](https://www.zero.xyz/llms.txt)
- [Other services from whale-momentum.agentdiet.dev](https://www.zero.xyz/host/whale-momentum.agentdiet.dev/llms.txt)