{"uid":"cap_YHKm00xQL0KGEFpwDBHqc","slug":"netz-halowerk-prefix-ownership-9b0d8868","name":"Netz Halowerk Prefix Ownership","description":"Combines the registry view and the routing view of a prefix into one answer, keeping them apart because they are not the same thing and their disagreement is the finding. From the registry come the holder, the allocating authority, the registration and last-modified dates and the country as recorded, together with any route objects registered in an IRR. From routing come the origins observed over the requested window with the periods they were active, plus first and last sighting.","url":"https://netz.halowerk.com/v1/prefix-ownership","method":"POST","headers":{},"bodySchema":{"type":"object","properties":{"prefix":{"type":"string","maxLength":60,"minLength":4},"history_days":{"type":"integer","default":180,"maximum":1095,"minimum":7}}},"responseSchema":null,"example":null,"exampleRequest":null,"tags":["x402"],"displayCostAmount":"0.005","displayCostAsset":"USDC","priceDynamic":false,"priceHint":null,"priceStatus":"priced","priceSource":"probe","requiresHandshake":false,"reviewCount":0,"rating":{"score":"0.00","successRate":"0.00","reviews":0,"stars":null,"state":"unrated"},"availabilityStatus":"unknown","priceObserved":null,"sessionDeposit":null,"pricing":{"kind":"static","summary":"$0.005/call","primary":{"kind":"static","protocol":"x402","network":"base","amountUsd":"0.005","per":"call","confidence":"exact"},"accepted":[{"kind":"static","protocol":"x402","network":"base","amountUsd":"0.005","per":"call","confidence":"exact"}]},"paymentMethods":[{"uid":"pm_PUVGw2rOZvU53nFo2NdeO","protocol":"x402","methodType":"crypto","chain":"base","mode":"charge","costAmount":"0.005","costPer":"request","priority":0,"asset":"0x833589fCD6eDb6E08f4c7C32D4f71b54bdA02913","unit":"request","depositMicros":null,"planRef":null}],"brandName":null,"brandSlug":null,"brandBaseUrl":null,"brandDocsUrl":null,"whatItDoes":"Returns a unified view of a network prefix combining registry metadata (holder, allocating authority, dates, country, IRR route objects) with BGP routing observations (observed origins, active periods, first/last sighting) to surface disagreements between the two.","exampleAgentPrompt":"Look up the prefix ownership for 203.0.113.0/24 and tell me who holds it according to the registry, which country it's registered in, and whether the BGP origin ASes observed in the last 30 days match what's in the IRR.","exampleUseCases":[{"title":"Detecting potential BGP hijack via registry mismatch","prompt":"I think someone is hijacking 185.220.0.0/22 — can you pull the registry holder and IRR route objects for that prefix and compare them against the BGP origins that have been announcing it over the past 7 days?"},{"title":"Due diligence on acquired IP space","prompt":"We're buying an IP block 10.64.0.0/12 — can you show me the full registration details including the allocating authority and last-modified date, plus who has actually been routing it in BGP?"},{"title":"Investigating suspicious traffic source prefix","prompt":"I'm seeing weird traffic from 91.108.4.0/22 — who does the registry say holds that prefix, what country is it registered in, and do the BGP origins match the IRR route objects?"}],"resultDescription":"A combined JSON response containing registry data (holder name, allocating authority, registration date, last-modified date, recorded country, IRR route objects) alongside BGP routing observations (list of origin ASes with their active periods, first and last sighting timestamps) for the requested prefix and time window.","failureModes":["Invalid or malformed prefix format returns an error","Prefix not found in any registry returns empty registry fields","No BGP observations in the requested window returns empty routing data","Overly broad prefix (e.g. /8) may exceed processing limits","Payment failure returns 402 before query is processed"],"whenToPreferThis":"Use this endpoint when you need a single correlated answer combining both the authoritative registry record and live BGP routing observations for a prefix — especially when detecting hijacks, verifying ownership, or auditing IP space. It is preferable to querying a WHOIS tool or a BGP looking glass separately because it deliberately surfaces disagreements between the two views in one response.","instructions":null,"reviewSummary":null,"reviewSummaryHighlights":null,"reviewSummaryConcerns":null,"reviewSummaryGeneratedAt":null,"activationCount":0,"lastUsedAt":null,"lastSuccessfullyRanAt":null,"lastHealthCheckAt":"2026-09-15T12:33:21.901Z","isFirstParty":false}