{"uid":"cap_bfIitCzMdy8BUS5DBui-X","slug":"2s-domain-intelligence-lookup-4021d141","name":"2s Domain Intelligence Lookup","description":"Domain intelligence in one call — composes DNS, WHOIS/RDAP registration, and the live TLS certificate for a domain. Pass domain (e.g. example.com). Returns a summary (does it resolve, has MX, registrar, domain expiry, whether HTTPS is currently valid, days until cert expiry) plus three independent sections: dns (A/AAAA/MX/NS/TXT records), whois (registrar, registered/expires/updated dates, status codes, nameservers, DNSSEC), and tls (certificate issuer, subject, validity window, SANs, fingerprint). Each section reports found/error independently, so a domain with no HTTPS still returns DNS + WHOIS. For domain due diligence, security recon, expiry monitoring, and vendor onboarding. Individual sources: /api/dns/lookup, /api/domain/whois, /api/net/tls-cert.","url":"https://2s.io/api/domain/intel","method":"GET","headers":{},"bodySchema":{"type":"object","$schema":"https://json-schema.org/draft/2020-12/schema","required":["input"],"properties":{"input":{"type":"object","required":["type","method","queryParams"],"properties":{"type":{"const":"http"},"method":{"const":"GET"},"queryParams":{"required":["domain"],"properties":{"domain":{"type":"string","description":"Domain name (e.g. example.com)."}}}}}}},"responseSchema":null,"example":{"request":{"input":{"type":"http","method":"GET","queryParams":{"domain":"example.com"}}},"response":{"data":{"ok":true,"items":[{"dns":{"data":{"query":"example.com","answers":[{"type":"A","records":[{"ttl":146,"address":"104.20.23.154"},{"ttl":146,"address":"172.66.147.243"}]},{"type":"AAAA","records":[{"ttl":215,"address":"2606:4700:10::6814:179a"},{"ttl":215,"address":"2606:4700:10::ac42:93f3"}]},{"type":"MX","records":[{"type":"MX","exchange":"","priority":0}]},{"type":"NS","records":["hera.ns.cloudflare.com","elliott.ns.cloudflare.com"]},{"type":"TXT","records":["_k2n1y4vw3qtb4skdx9e7dxt97qrmmq9","v=spf1 -all"]}],"resolver":null,"durationMs":7},"error":null,"found":true},"tls":{"data":{"host":"example.com","port":443,"cipher":{"name":"TLS_AES_256_GCM_SHA384","version":"TLSv1.3"},"protocol":"TLSv1.3","authorized":true,"resolvedIp":"104.20.23.154","certificate":{"isCa":false,"issuer":{"raw":{"C":"US","O":"SSL Corporation","CN":"Cloudflare TLS Issuing ECC CA 3"},"country":"US","commonName":"Cloudflare TLS Issuing ECC CA 3","organization":"SSL Corporation"},"expired":false,"subject":{"raw":{"CN":"example.com"},"country":null,"commonName":"example.com","organization":null},"validTo":"2026-08-29T21:41:26.000Z","validFrom":"2026-05-31T21:39:12.000Z","serialNumber":"1AA73FEA257BE3334B9A29552E6F878E","daysUntilExpiry":73,"subjectAltNames":["example.com","*.example.com"],"fingerprintSha256":"BE:AB:14:CF:39:67:8F:DA:0E:F1:60:6E:ED:B8:18:C2:29:8B:A2:CC:7A:00:88:6E:7D:C2:D2:41:0F:24:CD:35"},"chainLength":4,"authorizationError":null},"error":null,"found":true},"note":"Composed from independent live sources (DNS, RDAP, TLS handshake). Each section is fetched independently; a failure in one does not fail the others.","query":{"domain":"example.com"},"whois":{"data":{"domain":"example.com","handle":"2336799_DOMAIN_COM-VRSN","ldhName":"example.com","rdapUrl":"https://rdap.verisign.com/com/v1/domain/example.com","statuses":["clientDeleteProhibited","clientTransferProhibited","clientUpdateProhibited"],"expiresAt":"2026-08-13T04:00:00Z","registrar":{"url":null,"name":"RESERVED-Internet Assigned Numbers Authority","ianaId":"376","abuseEmail":null,"abusePhone":null},"updatedAt":"2026-01-16T18:26:50Z","nameservers":["elliott.ns.cloudflare.com","hera.ns.cloudflare.com"],"dnssecSigned":true,"registeredAt":"1995-08-14T04:00:00Z"},"error":null,"found":true},"sources":[{"url":"https://developers.google.com/speed/public-dns/docs/doh","license":"Live DNS queries; no upstream license.","provider":"Public DNS-over-HTTPS resolvers"},{"url":"https://www.icann.org/rdap","license":"Live RDAP queries; registry data, terms vary by registry.","provider":"RDAP (Registration Data Access Protocol)"},{"url":"https://2s.io","license":"Observed from the target server at request time.","provider":"Live TLS handshake (node:tls)"}],"summary":{"hasMx":true,"resolves":true,"expiresAt":"2026-08-13T04:00:00Z","registrar":"RESERVED-Internet Assigned Numbers Authority","httpsValid":true,"certExpiresInDays":73}}],"total":1,"source":{"url":"https://2s.io/domain/intel","license":"See per-section sources[].","provider":"2s.io domain intel (composite)"}},"meta":{"cost":{"usd":0.0048,"tier":0},"caller":"x402","version":null,"endpoint":"domain.intel","settlement":{"txHash":"0x9f5f2bf5c742946fdadccdddabdc4720f229aa29a0a223b343f7b2176862e140","network":"eip155:8453","success":true}}}},"exampleRequest":{"domain":"example.com"},"tags":["x402"],"displayCostAmount":"0.0048","displayCostAsset":"USDC","priceDynamic":false,"priceHint":null,"priceStatus":"priced","priceSource":"settled","requiresHandshake":false,"reviewCount":0,"rating":{"score":"0.00","successRate":"0.00","reviews":0,"stars":null,"state":"unrated"},"availabilityStatus":"unknown","priceObserved":null,"sessionDeposit":null,"pricing":{"kind":"static","summary":"$0.0048/call","primary":{"kind":"static","protocol":"x402","network":"base","amountUsd":"0.012","per":"call","confidence":"exact"},"accepted":[{"kind":"static","protocol":"x402","network":"base","amountUsd":"0.012","per":"call","confidence":"exact"}]},"paymentMethods":[{"uid":"pm_jvc3WDkjbWfyV5bwWgJ_L","protocol":"x402","methodType":"crypto","chain":"base","mode":"charge","costAmount":"0.012","costPer":"request","priority":0,"asset":"0x833589fCD6eDb6E08f4c7C32D4f71b54bdA02913","unit":"request","depositMicros":null,"planRef":null}],"brandName":null,"brandSlug":null,"brandBaseUrl":null,"brandDocsUrl":null,"whatItDoes":"Returns DNS records, TLS certificate info, WHOIS registration data, and a health summary for a given domain name","exampleAgentPrompt":"Can you pull up the full domain intel for stripe.com — I want to see its DNS records, TLS certificate details, WHOIS registrar, expiry date, and whether HTTPS is valid?","exampleUseCases":null,"resultDescription":"Returns a JSON object with DNS answer records (type and IP/value), TLS certificate issuer and days until expiry, WHOIS registrar name and domain expiry date, and a summary object indicating whether the domain resolves, has MX records, has valid HTTPS, and when it expires.","failureModes":["Domain not found in WHOIS (found: false with error)","DNS resolution failure (found: false with error)","TLS handshake failure or certificate not retrievable (found: false with error)","Invalid domain format in query parameter returns error","Payment failure via x402 prevents request execution"],"whenToPreferThis":"Use this endpoint when you need a consolidated, one-call view of a domain's DNS, TLS, and WHOIS status without juggling separate DNS, WHOIS, or SSL checker APIs. Ideal for security investigations, pre-purchase domain research, or monitoring domain health. No API key or signup required — pay per call in USDC.","instructions":null,"reviewSummary":null,"reviewSummaryHighlights":null,"reviewSummaryConcerns":null,"reviewSummaryGeneratedAt":null,"activationCount":0,"lastUsedAt":null,"lastSuccessfullyRanAt":null,"lastHealthCheckAt":"2026-09-15T13:04:01.427Z","isFirstParty":false}