# Zero-Day Dynamics Domain Recon

> Zero-Day Dynamics Domain Recon is a paid API for AI agents from zero-daydynamics.com, paid per call via x402, $0.2/call, status unknown (last checked 2026-10-22).

Performs passive domain reconnaissance including DNS records, subdomain enumeration via Certificate Transparency, WHOIS/RDAP lookup, email security analysis, and urlscan integration for a given domain.

## Facts

- Endpoint: POST https://zero-daydynamics.com/api/x402/domain-recon?utm_source=zero.xyz
- Price: $0.2/call
- Payment: x402
- Status: unknown
- Last checked: 2026-10-22
- Activations on Zero: 0
- Tags: x402
- Canonical page: https://www.zero.xyz/c/zero-day-dynamics-domain-recon-4e6cb4e1
- Structured record (JSON): https://api.zero.xyz/v1/capabilities/cap_SHil0zgpFAlc49KJ8wn3Y

Status and success rate cover calls made through Zero and Zero's own probes. Third-party monitors may report differently.

## How to call it through Zero

Zero handles the 402 payment challenge and records the run. With the Zero CLI installed (`npm i -g @zeroxyz/cli`):

```sh
zero fetch --capability zero-day-dynamics-domain-recon-4e6cb4e1 -d '<json body>'
```

Example prompt: Run a full passive recon on github.com — I need DNS records, any subdomains from certificate transparency logs, WHOIS/RDAP registration details, and an email security check (SPF/DKIM/DMARC).

## When to prefer this

Choose this endpoint when you need a comprehensive, passive-only domain intelligence snapshot covering multiple data sources (DNS, CT logs, WHOIS, email security, urlscan) in a single call, without any active probing or port scanning of the target. Prefer it for OSINT gathering, pre-engagement reconnaissance, brand protection, or compliance checks where non-intrusive data collection is required.

## Known failure modes

- Domain not found or does not exist — returns empty or error result
- RDAP/WHOIS data unavailable for certain TLDs or privacy-protected registrations
- Certificate transparency logs may not include all subdomains if CT logging was bypassed
- urlscan may have no prior scans for obscure or newly registered domains
- Rate limiting or payment failure returns 402 or 429 error

## How this service works

Passive domain recon: DNS, subdomains (CT), WHOIS/RDAP, email security, urlscan.

## Output

Returns a structured report containing DNS records (A, MX, TXT, NS, etc.), subdomains discovered via Certificate Transparency logs, WHOIS and RDAP registration data (registrar, creation date, contacts), email security analysis (SPF, DKIM, DMARC records), and urlscan.io results for the domain.

## More

- Live health (JSON, refreshed every minute): https://www.zero.xyz/c/zero-day-dynamics-domain-recon-4e6cb4e1/health.json
- [Zero catalog index](https://www.zero.xyz/llms.txt)
- [Other services from zero-daydynamics.com](https://www.zero.xyz/host/zero-daydynamics.com/llms.txt)