{"uid":"cap_omkFJj5eZ6OwB6XQgUDVs","slug":"domain-dossier-composite-domain-intelligence-report-e04ec6b3","name":"Domain Dossier — Composite Domain Intelligence Report","description":"Builds a full domain report in one call: WHOIS, DNS, TLS, age, risk, and DMARC. Composite: one call runs whois + dns-lookup + ssl-cert-info + domain-age-check + domain-risk-check + dmarc-check in parallel and merges them into {registration, dns, tls, age, risk, email_auth}. One request replaces six separate lookups for security, fraud, and due-diligence agents. Use it as a domain intelligence API, phishing triage bundle, or brand-protection domain workup.","url":"https://x402.agentutility.ai/domain-dossier?utm_source=zero.xyz","method":"POST","headers":{},"bodySchema":{"type":"object","$schema":"https://json-schema.org/draft/2020-12/schema","required":["input"],"properties":{"input":{"type":"object","required":["type","method","bodyType","body"],"properties":{"body":{"required":["domain"],"properties":{"domain":{"type":"string","description":"Domain to profile, e.g. 'example.com'. Max 253 chars."}}},"type":{"type":"string","const":"http"},"method":{"enum":["POST"],"type":"string"},"bodyType":{"enum":["json","form-data","text"],"type":"string"}},"additionalProperties":false},"output":{"type":"object","required":["type"],"properties":{"type":{"type":"string"},"example":{"type":"object","properties":{"age":{"type":"object","properties":{"age_days":{"type":"integer"},"registered_date":{"type":"string"},"days_until_expiry":{"type":"integer"}}},"dns":{"type":"object","properties":{"flat":{"type":"object","properties":{"a":{"type":"array","items":{"type":"string"}},"mx":{"type":"array","items":{"type":"string"}}}},"total_records":{"type":"integer"}}},"tls":{"type":"object","properties":{"days_until_expiry":{"type":"integer"},"issuer_common_name":{"type":"string"}}},"risk":{"type":"object","properties":{"flags":{"type":"array"},"statuses":{"type":"array","items":{"type":"string"}},"dnssec_signed":{"type":"boolean"}}},"domain":{"type":"string"},"degraded":{"type":"boolean"},"components":{"type":"array","items":{"type":"object","properties":{"ms":{"type":"integer"},"ok":{"type":"boolean"},"name":{"type":"string"}}}},"email_auth":{"type":"object","properties":{"spf":{"type":"object","properties":{"all_qualifier":{"type":"string"}}},"grade":{"type":"string"},"score":{"type":"integer"}}},"composed_of":{"type":"array","items":{"type":"string"}},"registration":{"type":"object","properties":{"registrar":{"type":"object","properties":{"name":{"type":"string"}}},"nameservers":{"type":"array","items":{"type":"string"}},"registered_date":{"type":"string"}}}}}}}}},"responseSchema":{"type":"json","example":{"age":{"age_days":11223,"registered_date":"1995-08-14T04:00:00Z","days_until_expiry":98},"dns":{"flat":{"a":["93.184.216.34"],"mx":["0 ."]},"total_records":5},"tls":{"days_until_expiry":60,"issuer_common_name":"DigiCert TLS RSA CA"},"risk":{"flags":[],"statuses":["client delete prohibited"],"dnssec_signed":true},"domain":"example.com","degraded":false,"components":[{"ms":812,"ok":true,"name":"whois"},{"ms":143,"ok":true,"name":"dns-lookup"}],"email_auth":{"spf":{"all_qualifier":"~all"},"grade":"A","score":85},"composed_of":["whois","dns-lookup","ssl-cert-info","domain-age-check","domain-risk-check","dmarc-check"],"registration":{"registrar":{"name":"IANA"},"nameservers":["A.IANA-SERVERS.NET"],"registered_date":"1995-08-14T04:00:00Z"}}},"example":null,"exampleRequest":null,"tags":["x402"],"displayCostAmount":"0.04","displayCostAsset":"USDC","priceDynamic":false,"priceHint":null,"priceStatus":"priced","priceSource":"registry","requiresHandshake":false,"reviewCount":0,"rating":{"score":"0.00","successRate":"0.00","reviews":0,"stars":null,"state":"unrated"},"availabilityStatus":"unknown","priceObserved":null,"sessionDeposit":null,"pricing":{"kind":"static","summary":"$0.04/call","primary":{"kind":"static","protocol":"x402","network":"base","amountUsd":"0.04","per":"call","confidence":"exact"},"accepted":[{"kind":"static","protocol":"x402","network":"base","amountUsd":"0.04","per":"call","confidence":"exact"}]},"paymentMethods":[{"uid":"pm_TcMhM1hJnqTOZRHDNEoek","protocol":"x402","methodType":"crypto","chain":"base","mode":"charge","costAmount":"0.04","costPer":"request","priority":0,"asset":null,"unit":"request","depositMicros":null,"planRef":null}],"brandName":null,"brandSlug":null,"brandBaseUrl":null,"brandDocsUrl":null,"whatItDoes":"Runs WHOIS, DNS, TLS, domain age, risk, and DMARC checks in parallel and merges them into a single structured domain intelligence report","exampleAgentPrompt":"Can you pull a full domain dossier on 'suspicioussite.xyz' — I want to see WHOIS registration, DNS records, TLS cert status, how old the domain is, any risk flags, and what its email authentication grade looks like?","exampleUseCases":[{"title":"Phishing link triage for SOC analyst","prompt":"We just got a report of a phishing link pointing to 'paypa1-secure-login.com' — can you run a full domain profile on it and tell me how old it is, who registered it, what the DNS looks like, and whether it has any risk flags?"},{"title":"Vendor due diligence before onboarding","prompt":"Before we start sending payments to 'acme-invoicing-portal.net', can you pull a complete domain dossier on it — WHOIS, DNS, TLS cert, domain age, risk indicators, and email auth grade — so I can decide if it's legit?"},{"title":"Brand protection sweep on lookalike domain","prompt":"Someone registered 'my-brand-support.com' and I think it might be impersonating us — can you do a full domain workup on it including registration info, DNS records, TLS details, age, and any risk or fraud flags?"}],"resultDescription":"A merged JSON object with six sections: registration (registrar, nameservers, registered date), dns (flattened record types, total count), tls (days until expiry, issuer name), age (age in days, registered date, days until expiry), risk (flags array, EPP statuses, DNSSEC signed boolean), and email_auth (SPF qualifier, overall grade, numeric score). Also includes a degraded boolean indicating if any sub-checks failed and a components array with per-check timing and status.","failureModes":["Domain does not exist — WHOIS or DNS lookups return no data, partial results returned with degraded=true","TLS component fails if domain has no HTTPS endpoint — tls section may be null or absent","DMARC/SPF not configured — email_auth section returns low grade or empty records","Timeout on one or more sub-checks — degraded=true with failed component flagged in components array","Invalid domain format input — request rejected with validation error","Rate limiting or upstream resolver failures causing partial degradation"],"whenToPreferThis":"Use this endpoint when you need a comprehensive domain intelligence snapshot in a single call and want to avoid orchestrating six separate API calls yourself. It is ideal for security triage, fraud detection, phishing investigation, vendor due diligence, and brand protection workflows where speed and completeness matter. Prefer it over individual WHOIS, DNS, or TLS endpoints when you need the full picture at once and are comfortable with a composite result that may be partially degraded if one sub-check fails.","instructions":null,"reviewSummary":null,"reviewSummaryHighlights":null,"reviewSummaryConcerns":null,"reviewSummaryGeneratedAt":null,"activationCount":0,"lastUsedAt":null,"lastSuccessfullyRanAt":null,"lastHealthCheckAt":"2026-11-03T00:51:32.123Z","isFirstParty":false,"canonicalSlug":"domain-dossier-composite-domain-intelligence-report-e04ec6b3"}