{"uid":"cap_SHil0zgpFAlc49KJ8wn3Y","slug":"zero-day-dynamics-domain-recon-4e6cb4e1","name":"Zero-Day Dynamics Domain Recon","description":"Passive domain recon: DNS, subdomains (CT), WHOIS/RDAP, email security, urlscan.","url":"https://zero-daydynamics.com/api/x402/domain-recon?utm_source=zero.xyz","method":"POST","headers":{},"bodySchema":null,"responseSchema":null,"example":null,"exampleRequest":null,"tags":["x402"],"displayCostAmount":"0.2","displayCostAsset":"USDC","priceDynamic":false,"priceHint":null,"priceStatus":"priced","priceSource":"probe","requiresHandshake":false,"reviewCount":0,"rating":{"score":"0.00","successRate":"0.00","reviews":0,"stars":null,"state":"unrated"},"availabilityStatus":"unknown","priceObserved":null,"sessionDeposit":null,"pricing":{"kind":"static","summary":"$0.2/call","primary":{"kind":"static","protocol":"x402","network":"base","amountUsd":"0.2","per":"call","confidence":"exact"},"accepted":[{"kind":"static","protocol":"x402","network":"base","amountUsd":"0.2","per":"call","confidence":"exact"}]},"paymentMethods":[{"uid":"pm_3Ap5tXngOM9O92xiFfyb7","protocol":"x402","methodType":"crypto","chain":"base","mode":"charge","costAmount":"0.2","costPer":"request","priority":0,"asset":"0x833589fCD6eDb6E08f4c7C32D4f71b54bdA02913","unit":"request","depositMicros":null,"planRef":null}],"brandName":null,"brandSlug":null,"brandBaseUrl":null,"brandDocsUrl":null,"whatItDoes":"Performs passive domain reconnaissance including DNS records, subdomain enumeration via Certificate Transparency, WHOIS/RDAP lookup, email security analysis, and urlscan integration for a given domain.","exampleAgentPrompt":"Run a full passive recon on github.com — I need DNS records, any subdomains from certificate transparency logs, WHOIS/RDAP registration details, and an email security check (SPF/DKIM/DMARC).","exampleUseCases":[{"title":"Pre-assessment domain footprinting","prompt":"I need to map the attack surface of acme-corp.com before a security review — can you pull all DNS records, enumerate subdomains from certificate transparency logs, and grab the WHOIS registration details?"},{"title":"Email security posture check","prompt":"Can you check whether stripe.com has proper email security set up? I want to know if they have valid SPF, DKIM, and DMARC records configured."},{"title":"Brand protection monitoring","prompt":"Someone may be spoofing our brand using a lookalike domain. Can you do a full passive recon on acme-corp-login.com — DNS, subdomains, WHOIS owner details, and any urlscan hits?"}],"resultDescription":"Returns a structured report containing DNS records (A, MX, TXT, NS, etc.), subdomains discovered via Certificate Transparency logs, WHOIS and RDAP registration data (registrar, creation date, contacts), email security analysis (SPF, DKIM, DMARC records), and urlscan.io results for the domain.","failureModes":["Domain not found or does not exist — returns empty or error result","RDAP/WHOIS data unavailable for certain TLDs or privacy-protected registrations","Certificate transparency logs may not include all subdomains if CT logging was bypassed","urlscan may have no prior scans for obscure or newly registered domains","Rate limiting or payment failure returns 402 or 429 error"],"whenToPreferThis":"Choose this endpoint when you need a comprehensive, passive-only domain intelligence snapshot covering multiple data sources (DNS, CT logs, WHOIS, email security, urlscan) in a single call, without any active probing or port scanning of the target. Prefer it for OSINT gathering, pre-engagement reconnaissance, brand protection, or compliance checks where non-intrusive data collection is required.","instructions":null,"reviewSummary":null,"reviewSummaryHighlights":null,"reviewSummaryConcerns":null,"reviewSummaryGeneratedAt":null,"activationCount":0,"lastUsedAt":null,"lastSuccessfullyRanAt":null,"lastHealthCheckAt":"2026-10-22T18:31:09.386Z","isFirstParty":false,"canonicalSlug":"zero-day-dynamics-domain-recon-4e6cb4e1"}