Investigate a domain using parallel DNS, TLS certificate, RDAP (the standards-based successor to WHOIS), DNSSEC, SPF, and DMARC signals with factual findings and source provenance.
Response shape
View free static sample JSON
{
"request_id": "018f1f54-7f38-7ba2-8dc3-5f90272d9f1a",
"service": "web.domain-intelligence",
"version": "1",
"data": {
"requestedUrl": "https://apiacre.com/",
"domain": "apiacre.com",
"dns": {
"A": [
"104.21.32.1",
"172.67.128.1"
],
"AAAA": [
"2606:4700:3030::6815:2001",
"2606:4700:3030::ac43:8001"
],
"MX": [
"10 mail.protonmail.ch",
"20 mailsec.protonmail.ch"
],
"NS": [
"autumn.ns.cloudflare.com",
"bjorn.ns.cloudflare.com"
],
"TXT": [
"v=spf1 include:_spf.protonmail.ch ~all"
],
"CAA": [],
"SOA": [
"autumn.ns.cloudflare.com. dns.cloudflare.com. 2050154843 10000 2400 604800 1800"
]
},
"tls": {
"version": "TLSv1.3",
"cipher": "TLS_AES_256_GCM_SHA384",
"cipherBits": 256,
"expires": "Nov 6 19:34:12 2026 GMT",
"validFrom": "2026-08-08T18:34:13+00:00",
"expiresAt": "2026-11-06T19:34:12+00:00",
"daysUntilExpiry": 87.7,
"expired": false,
"subject": {
"commonName": "apiacre.com"
},
"issuer": {
"country": "US",
"organization": "Google Trust Services",
"commonName": "WE1"
},
"subjectAltNames": [
"apiacre.com",
"*.apiacre.com"
]
},
"rdap": {
"handle": "3130220082_DOMAIN_COM-VRSN",
"status": [
"client transfer prohibited"
],
"events": [
{
"action": "registration",
"date": "2026-08-08T19:24:21Z"
},
{
"action": "expiration",
"date": "2027-08-08T19:24:21Z"
}
],
"nameservers": [
"autumn.ns.cloudflare.com",
"bjorn.ns.cloudflare.com"
],
"secureDns": {
"delegationSigned": false,
"zoneSigned": null,
"dsDataCount": 0
}
},
"emailAuthentication": {
"mxConfigured": true,
"nullMx": false,
"spf": {
"configured": true,
"records": [
"v=spf1 include:_spf.protonmail.ch ~all"
]
},
"dmarc": {
"configured": true,
"policy": "quarantine",
"subdomainPolicy": null,
"records": [
"v=DMARC1; p=quarantine"
]
},
"dkim": {
"checked": false,
"reason": "DKIM requires a selector; none was supplied."
}
},
"signals": {
"addressResolved": true,
"tlsAvailable": true,
"rdapAvailable": true,
"dnssecDelegationSigned": false,
"mxConfigured": true,
"spfConfigured": true,
"dmarcConfigured": true
},
"findings": [],
"provenance": {
"dns": {
"source": "recursive DNS"
},
"tls": {
"source": "direct verified TLS handshake",
"port": 443
},
"rdap": {
"source": "RDAP bootstrap",
"url": "https://rdap.org/domain/apiacre.com"
}
},
"collectionMs": 222,
"checkedAt": "2026-08-11T03:39:03+00:00"
},
"meta": {
"duration_ms": 42,
"cached": false,
"sources": [],
"warnings": [],
"next_actions": [
{
"service": "web.email-auth",
"title": "Email authentication posture",
"reason": "Deepen the domain result with focused MX, SPF, DMARC, caller-selected DKIM, MTA-STS, TLS-RPT, and BIMI posture.",
"method": "POST",
"path": "/v1/web/email-auth",
"price": "$0.005",
"input_template": {
"domain": "$result.data.domain",
"dkim_selectors": []
},
"use_output": "Use the DNS-only posture and findings as time-specific configuration evidence; supply only DKIM selectors already known to the buyer.",
"handoff_path": "/catalog/web.email-auth",
"checkout_path": "/try/web.email-auth",
"sample_path": "/samples/web.email-auth",
"maximum_atomic_usdc": "5000",
"handoff_payment_required": false,
"executes_automatically": false,
"authorization_required": true
},
{
"service": "web.business-due-diligence",
"title": "Website and domain technical due diligence",
"reason": "Combine domain signals with public-site quality checks in a business risk report.",
"method": "POST",
"path": "/v1/web/business-due-diligence",
"price": "$0.1",
"input_template": {
"url": "$request.url"
},
"use_output": "Review result.data.flags and riskLevel before relying on the domain.",
"handoff_path": "/catalog/web.business-due-diligence",
"checkout_path": "/try/web.business-due-diligence",
"sample_path": "/samples/web.business-due-diligence",
"maximum_atomic_usdc": "100000",
"handoff_payment_required": false,
"executes_automatically": false,
"authorization_required": true
}
]
}
}