{"uid":"cap_JEAKc9QwpzVMD_kGKlt9g","slug":"cyberpulse-osint-domain-ip-lookup-88dd9fcd","name":"CyberPulse OSINT Domain & IP Lookup","description":"OSINT lookup for any domain or IP — open ports and known CVEs (Shodan InternetDB), DNS and email posture (SPF/DMARC/DKIM), SSL grade, threat-feed status, and geolocation, for security and defensive agents. Authorized defensive use only.","url":"https://cyberpulse.theaslangroupllc.com/api/cyber/osint","method":"GET","headers":{},"bodySchema":{"type":"object","$schema":"https://json-schema.org/draft/2020-12/schema","required":["input"],"properties":{"input":{"type":"object","required":["type","method"],"properties":{"type":{"type":"string","const":"http"},"method":{"enum":["GET","HEAD","DELETE"],"type":"string"},"queryParams":{"type":"object","properties":{"lang":{"type":"string","description":"en | es | fr | de | ja | zh | ko | pt | ar | hi (default: en)"},"target":{"type":"string","description":"Domain or IP address — e.g. \"example.com\" | \"8.8.8.8\" | \"shopify.com\" | \"192.168.1.1\" (public IPs only)"}}}},"additionalProperties":false},"output":{"type":"object","required":["type"],"properties":{"type":{"type":"string"},"errors":{"type":"object","description":"Documented error responses, keyed by HTTP status code","additionalProperties":{"type":"object","required":["description"],"properties":{"example":{"type":"object"},"description":{"type":"string"}}}},"example":{"type":"object"}}}}},"responseSchema":{"type":"json","example":{"target":"example.com","target_type":"domain","risk_summary":"Domain has minimal exposure. Good email security posture. No known vulnerabilities.","network_exposure":{"open_ports":[80,443],"cdn_detected":true,"cdn_provider":"Cloudflare","high_risk_ports":[],"services_detected":["nginx/1.18"]},"domain_intelligence":{"ssl_grade":"A+","spf_configured":true,"dmarc_configured":true,"email_security_grade":"A"},"vulnerability_exposure":{"cve_count":0,"known_cves":[],"risk_level":"CLEAN"}}},"example":null,"exampleRequest":null,"tags":["x402"],"displayCostAmount":"0.15","displayCostAsset":"USDC","priceDynamic":false,"priceHint":null,"priceStatus":"priced","priceSource":"probe","requiresHandshake":false,"reviewCount":0,"rating":{"score":"0.00","successRate":"0.00","reviews":0,"stars":null,"state":"unrated"},"availabilityStatus":"unknown","priceObserved":null,"sessionDeposit":null,"pricing":{"kind":"static","summary":"$0.15/call","primary":{"kind":"static","protocol":"x402","network":"base","amountUsd":"0.15","per":"call","confidence":"exact"},"accepted":[{"kind":"static","protocol":"x402","network":"base","amountUsd":"0.15","per":"call","confidence":"exact"}]},"paymentMethods":[{"uid":"pm_zFFq9zZ8JZeZdjpYQfOqz","protocol":"x402","methodType":"crypto","chain":"base","mode":"charge","costAmount":"0.15","costPer":"request","priority":0,"asset":"0x833589fCD6eDb6E08f4c7C32D4f71b54bdA02913","unit":"request","depositMicros":null,"planRef":null}],"brandName":null,"brandSlug":null,"brandBaseUrl":null,"brandDocsUrl":null,"whatItDoes":"Performs a comprehensive OSINT lookup on a domain or IP address, returning open ports, known CVEs, DNS/email posture (SPF/DMARC/DKIM), SSL grade, threat-feed status, and geolocation.","exampleAgentPrompt":"Run a full OSINT check on shopmallstore.com — I want to see its open ports, any known CVEs from Shodan, whether it has valid SPF/DMARC/DKIM records, its SSL grade, whether it's on any threat feeds, and where it's geolocated.","exampleUseCases":[{"title":"Assess third-party vendor security risk","prompt":"Can you run a full security check on our new payment processor's domain? I need to know what ports are open, if there are any known CVEs tied to their IP, their SSL certificate grade, whether they have proper SPF/DMARC/DKIM set up, and if they show up on any threat intelligence feeds."},{"title":"Investigate suspicious phishing email sender","prompt":"We received a phishing email from an unfamiliar domain. Can you pull a complete OSINT report on that domain and the sending IP — I want to see open ports, known vulnerabilities, their email security records, threat feed status, and geolocation to understand if this is a known malicious actor."},{"title":"Audit internal infrastructure exposure","prompt":"I need a quick security snapshot of our external-facing API server's IP. Run an OSINT lookup to show me any open ports that shouldn't be exposed, known CVEs we should patch, our DNS and email authentication posture, SSL grade, whether we're flagged on any threat feeds, and confirm our geolocation data is accurate."}],"resultDescription":"Returns a structured security report for the queried domain or IP, including: list of open ports, associated CVEs with severity, DNS records, SPF/DMARC/DKIM email posture flags, SSL certificate grade, threat-feed hit status, and geolocation (country, city, ASN).","failureModes":["Invalid or unresolvable domain/IP returns a 400 or empty result","Private/RFC-1918 IP addresses may return no Shodan data","Domain with no DNS records may have missing SPF/DMARC fields","Rate limiting or payment failure returns 402","Shodan InternetDB may have stale data for recently reconfigured hosts","SSL grade unavailable if domain has no HTTPS endpoint"],"whenToPreferThis":"Use this endpoint when you need a broad, multi-signal passive OSINT snapshot of a domain or IP in one call — covering ports, CVEs, email posture, SSL, threat feeds, and geolocation simultaneously. Prefer it over narrower CVE-only or DNS-only tools when you need defensive triage or rapid reconnaissance of an external host without active scanning.","instructions":null,"reviewSummary":null,"reviewSummaryHighlights":null,"reviewSummaryConcerns":null,"reviewSummaryGeneratedAt":null,"activationCount":0,"lastUsedAt":null,"lastSuccessfullyRanAt":null,"lastHealthCheckAt":"2026-09-14T06:32:35.423Z","isFirstParty":false}