{"uid":"cap_afJCjDfH91R_Pc6IhT97Z","slug":"virustotal-dns-resolution-lookup-via-locus-x402-275ffd2a","name":"VirusTotal DNS Resolution Lookup via Locus x402","description":"Threat intelligence platform — scan files by hash, URLs, domains, and IPs against 70+ antivirus engines and security tools.","url":"https://virustotal.x402.paywithlocus.com/virustotal/dns-resolution","method":"POST","headers":{},"bodySchema":{"type":"object","properties":{"id":{"type":"string"}}},"responseSchema":{"type":"json","example":{"data":{},"payment":{"scheme":"exact","settledUsdc":"0.001000","authorizedMaxUsdc":"0.001000"},"request":{"id":"00000000-0000-4000-8000-000000000000","statusUrl":"/requests/00000000-0000-4000-8000-000000000000"},"success":true}},"example":null,"exampleRequest":null,"tags":["x402"],"displayCostAmount":"0.055","displayCostAsset":"USDC","priceDynamic":false,"priceHint":null,"priceStatus":"priced","priceSource":"probe","requiresHandshake":false,"reviewCount":0,"rating":{"score":"0.00","successRate":"0.00","reviews":0,"stars":null,"state":"unrated"},"availabilityStatus":"unknown","priceObserved":null,"sessionDeposit":null,"pricing":{"kind":"static","summary":"$0.055/call","primary":{"kind":"static","protocol":"x402","network":"base","amountUsd":"0.055","per":"call","confidence":"exact"},"accepted":[{"kind":"static","protocol":"x402","network":"base","amountUsd":"0.055","per":"call","confidence":"exact"}]},"paymentMethods":[{"uid":"pm_ztTakWnmK6wHY9B3RVG_c","protocol":"x402","methodType":"crypto","chain":"base","mode":"charge","costAmount":"0.055","costPer":"request","priority":0,"asset":"0x833589fCD6eDb6E08f4c7C32D4f71b54bdA02913","unit":"request","depositMicros":null,"planRef":null}],"brandName":null,"brandSlug":null,"brandBaseUrl":null,"brandDocsUrl":null,"whatItDoes":"Retrieves DNS resolution data for a specific IP-domain pair using VirusTotal's threat intelligence platform.","exampleAgentPrompt":"Can you look up the VirusTotal DNS resolution record for the pair 8.8.8.8 and google.com — I want to see what threat intelligence data comes back for that IP-domain resolution?","exampleUseCases":[{"title":"Investigate suspicious IP-domain pairing","prompt":"I've seen traffic from 185.220.101.45 going to malware-c2.ru — can you pull the VirusTotal DNS resolution record for that IP and domain pair so I can see what the threat intelligence says?"},{"title":"Validate DNS mapping for known safe hosts","prompt":"Can you check the VirusTotal DNS resolution data for 1.1.1.1 and cloudflare.com to confirm the mapping looks clean and isn't flagged by any security engines?"},{"title":"SOC analyst enriching incident report","prompt":"I'm writing up an incident report and need to enrich the DNS resolution details for 104.21.45.67 and phishing-site.net using VirusTotal — can you fetch the resolution record for me?"}],"resultDescription":"Returns a JSON object containing DNS resolution data from VirusTotal for the specified IP-domain pair, along with payment settlement details (settled and authorized USDC amounts) and a request tracking object with a status URL for async polling if needed.","failureModes":["Invalid resolution ID format (not IP+domain concatenated) returns an error or empty data object","Unknown or unrecorded resolution ID returns empty data","Payment failure results in request not being processed","Rate limiting or quota exceeded on the VirusTotal backend","Network timeout from the x402 gateway"],"whenToPreferThis":"Use this endpoint when you need to look up a specific DNS resolution record (IP-domain pair) from VirusTotal's threat intelligence database, particularly when you already know the IP address and domain name you want to correlate. Prefer this over URL or file scanning endpoints when your investigation is specifically about DNS-layer relationships. The x402 micropayment model makes it cost-effective for per-query lookups without a VirusTotal API key subscription.","instructions":null,"reviewSummary":null,"reviewSummaryHighlights":null,"reviewSummaryConcerns":null,"reviewSummaryGeneratedAt":null,"activationCount":0,"lastUsedAt":null,"lastSuccessfullyRanAt":null,"lastHealthCheckAt":"2026-09-15T00:40:04.725Z","isFirstParty":false}