{"uid":"cap_WrclDLnNF3Kr-eFqqyosJ","slug":"dns-reverse-lookup-ptr-co-hosted-domains-b965ee14","name":"DNS Reverse Lookup (PTR + Co-hosted Domains)","description":"Reverse-DNS lookup for an IP: PTR record plus a best-effort list of other domains hosted on the same IP.","url":"https://dns-intel-api-production.up.railway.app/dns/reverse","method":"POST","headers":{},"bodySchema":{"type":"object","properties":{"ip":{"type":"string","description":"IPv4 or IPv6 address to reverse-resolve, e.g. '1.1.1.1'."}}},"responseSchema":null,"example":null,"exampleRequest":null,"tags":["x402"],"displayCostAmount":"0.002","displayCostAsset":"USDC","priceDynamic":false,"priceHint":null,"priceStatus":"priced","priceSource":"probe","requiresHandshake":false,"reviewCount":0,"rating":{"score":"0.00","successRate":"0.00","reviews":0,"stars":null,"state":"unrated"},"availabilityStatus":"unknown","priceObserved":null,"sessionDeposit":null,"pricing":{"kind":"static","summary":"$0.002/call","primary":{"kind":"static","protocol":"x402","network":"base","amountUsd":"0.002","per":"call","confidence":"exact"},"accepted":[{"kind":"static","protocol":"x402","network":"base","amountUsd":"0.002","per":"call","confidence":"exact"}]},"paymentMethods":[{"uid":"pm_2dWookXQSSyPes3w7GXkv","protocol":"x402","methodType":"crypto","chain":"base","mode":"charge","costAmount":"0.002","costPer":"request","priority":0,"asset":"0x833589fCD6eDb6E08f4c7C32D4f71b54bdA02913","unit":"request","depositMicros":null,"planRef":null}],"brandName":null,"brandSlug":null,"brandBaseUrl":null,"brandDocsUrl":null,"whatItDoes":"Performs a reverse-DNS lookup for a given IP address, returning its PTR record plus a best-effort list of other domains hosted on the same IP.","exampleAgentPrompt":"Can you do a reverse DNS lookup on 104.21.45.12 and tell me what hostname it resolves to, plus any other domains that appear to be hosted on the same IP?","exampleUseCases":[{"title":"Threat intelligence IP investigation","prompt":"I'm seeing suspicious traffic from 185.220.101.47 — can you reverse-resolve that IP and tell me what domains are sharing it so I can figure out what infrastructure it belongs to?"},{"title":"Shared hosting neighbor discovery","prompt":"I want to find out what other websites are hosted on the same server as the IP 23.185.0.1 — can you do a reverse DNS lookup and list any co-hosted domains?"},{"title":"Server identity verification","prompt":"We got a connection attempt from 91.108.4.1 — can you reverse-resolve that IP and tell me what PTR record it has so I can confirm whether it's a legitimate server?"}],"resultDescription":"Returns the PTR (reverse DNS) record for the given IP — typically a hostname like 'one.one.one.one' — along with a best-effort list of other domain names found to be hosted on the same IP address, useful for identifying shared infrastructure or co-located services.","failureModes":["IP has no PTR record configured — returns empty or null PTR field","No co-hosted domains found — returns empty list (not an error, just no data)","Invalid IP format provided — likely returns a validation error","Private/RFC1918 IP address provided — no meaningful PTR record available","Rate limiting or upstream DNS resolver failure — may return error or timeout","IPv6 addresses may have limited co-hosted domain data"],"whenToPreferThis":"Use this endpoint when you need to identify the hostname associated with a raw IP address, or when investigating which domains share a server. Ideal for security investigations, OSINT research, threat intelligence enrichment, or network diagnostics. Prefer this over forward DNS lookups when you start with an IP and need to work backwards to domain names. The co-hosted domain feature makes it more powerful than a plain PTR lookup for infrastructure mapping.","instructions":null,"reviewSummary":null,"reviewSummaryHighlights":null,"reviewSummaryConcerns":null,"reviewSummaryGeneratedAt":null,"activationCount":0,"lastUsedAt":null,"lastSuccessfullyRanAt":null,"lastHealthCheckAt":"2026-09-16T12:00:03.625Z","isFirstParty":false}