{"uid":"cap_QN5uPkTuJ1UXkqBjVoGMX","slug":"cve-intel-agentdiet-dev-domain-osint-tls-certificate-security-headers-05ee52b2","name":"Domain OSINT, TLS Certificate & Security Headers Recon","description":"Inspects live IPv4/IPv6 DNS resolution, TLS certificate issuer/expiry, and HTTP security grade. (Live x402 v2, IETF MPP & MCP endpoint at https://cve-intel.agentdiet.dev/v1/subdomain-scan)","url":"https://cve-intel.agentdiet.dev/v1/subdomain-scan?utm_source=zero.xyz","method":"GET","headers":{},"bodySchema":{"type":"object","required":["domain"],"properties":{"domain":{"type":"string","minLength":1,"description":"Target domain name (e.g. anthropic.com, openai.com) for DNS, TLS certificate, and security header OSINT"}}},"responseSchema":{"type":"object"},"example":null,"exampleRequest":null,"tags":[],"displayCostAmount":"0.01","displayCostAsset":"USD","priceDynamic":false,"priceHint":null,"priceStatus":"priced","priceSource":"probe","requiresHandshake":false,"reviewCount":0,"rating":{"score":"0.00","successRate":"0.00","reviews":0,"stars":null,"state":"unrated"},"availabilityStatus":"unknown","priceObserved":null,"sessionDeposit":null,"pricing":{"kind":"static","summary":"$0.01/call","primary":{"kind":"static","protocol":"mpp","network":"tempo","amountUsd":"0.01","per":"call","confidence":"exact"},"accepted":[{"kind":"static","protocol":"mpp","network":"tempo","amountUsd":"0.01","per":"call","confidence":"exact"}]},"paymentMethods":[{"uid":"pm_fv4JhzgZSECHcExqwh2Az","protocol":"mpp","methodType":"crypto","chain":"tempo","mode":"charge","costAmount":"0.01","costPer":"request","priority":0,"asset":"0x833589fcd6edb6e08f4c7c32d4f71b54bda02913","unit":"request","depositMicros":null,"planRef":null}],"brandName":"cve-intel.agentdiet.dev","brandSlug":"cve-intel-agentdiet-dev-mpp","brandBaseUrl":"https://cve-intel.agentdiet.dev","brandDocsUrl":null,"whatItDoes":"Performs live DNS resolution (IPv4/IPv6), TLS certificate inspection (issuer, expiry), and HTTP security header grading for a given domain.","exampleAgentPrompt":"Can you run a full OSINT recon on openai.com — check its DNS resolution (IPv4 and IPv6), inspect the TLS certificate issuer and expiry date, and give me an HTTP security headers grade?","exampleUseCases":[{"title":"Pre-launch security audit","prompt":"Before we go live, can you check anthropic.com's TLS certificate — who issued it, when it expires — and tell me if the HTTP security headers are properly configured?"},{"title":"Vendor security due diligence","prompt":"I need to vet a new vendor at stripe.com — can you pull their DNS resolution, check if their SSL cert is valid and not expiring soon, and grade their security headers?"},{"title":"Incident OSINT investigation","prompt":"We're investigating a suspicious domain called suspicious-phishing-site.com — can you resolve its IPs, check who issued the TLS cert and when it expires, and flag any missing security headers?"}],"resultDescription":"Returns live DNS resolution results (IPv4/IPv6 addresses), TLS certificate metadata (issuer, expiry date, validity status), and an HTTP security headers assessment/grade for the queried domain.","failureModes":["Domain does not exist or fails DNS resolution — returns empty or error for DNS fields","Domain has no HTTPS/TLS — TLS certificate fields will be absent or null","Network timeout reaching the target domain — may return partial results","Invalid domain format input — returns validation error","Domain blocks automated probes — may return incomplete security header data"],"whenToPreferThis":"Choose this endpoint when you need a combined, single-call OSINT snapshot of a domain's DNS posture, TLS certificate health, and HTTP security header configuration — especially useful for security audits, vendor due diligence, threat intelligence, or pre-deployment checks. Prefer this over separate DNS/WHOIS tools when you need TLS and security header data in the same response.","instructions":null,"reviewSummary":null,"reviewSummaryHighlights":null,"reviewSummaryConcerns":null,"reviewSummaryGeneratedAt":null,"activationCount":0,"lastUsedAt":null,"lastSuccessfullyRanAt":null,"lastHealthCheckAt":"2026-10-21T12:42:44.129Z","isFirstParty":false,"canonicalSlug":"cve-intel-agentdiet-dev-domain-osint-tls-certificate-security-headers-623f671e"}