Collect publisher-asserted page metadata, then combine public DNS, TLS, RDAP, and focused mail-authentication records for the same site. Results are time-specific configuration evidence, not an identity, ownership, delivery, or safety verdict.
Extract canonical, social, heading, feed, and privacy-safe publisher-asserted Organization metadata.
https://apiacre.com/v1/web/metadata{
"url": "$publicWebsiteUrl"
}Review redirect and content-hash provenance. Treat Organization fields as publisher assertions rather than verified identity evidence.
Collect bounded DNS, verified TLS, RDAP, DNSSEC, SPF, and DMARC evidence.
https://apiacre.com/v1/web/domain-intelligence{
"url": "$publicWebsiteUrl"
}Use result.data.domain for the mail-policy step and review signals as time-specific technical evidence, not proof of ownership or safety.
Inspect MX, SPF, DMARC, MTA-STS, TLS-RPT, BIMI, and any buyer-known DKIM selectors.
https://apiacre.com/v1/web/email-auth{
"domain": "$step2.result.data.domain",
"dkim_selectors": []
}Review findings and record hashes as DNS configuration evidence. An empty DKIM list means no selectors were tested; the result does not prove delivery, sender identity, or message authenticity.