All projects on Base matching “dns”

Evaluate an SPF record against an IPv4/IPv6 address using only its literal ip4/ip6/all mechanisms. DNS-dependent mechanisms (include, a, mx, exists, redirect) reached before a match yield an honest `indeterminate` result rather than a guess.

Look up a domain: registration data from RDAP (registrar, created, expires, status, nameservers), live DNS records (A, AAAA, MX, NS, TXT, CNAME), the TLS certificate served at the name (issuer, validity, alternative names, fingerprint), and the HTTP front door (status, server, redirect). One JSON answer, no API key, no rate-limited WHOIS. GET with ?name= or POST. $0.005.

Use when you have a company domain and need to know what the company is before spending more. Returns the company name and site title, domain age, registrar, mail provider, DNS provider, DMARC and HTTPS status, and a count of the third-party vendors detected. One call, no signup, no API key. The cheapest way to qualify a domain before buying a fuller record.

Assess the trustworthiness of a domain: RDAP registration age and registrar, DNS records (A/MX/TXT-SPF), and HTTPS reachability. Returns a 0-100 trust score with signals and an audit receipt.

Look up passive DNS resolution history and reputation for a domain or IP address. For a domain: which IPs it has resolved to over time. For an IP: which hostnames have resolved to it, plus malicious/suspicious vendor detection counts. Call to pivot from an indicator to its infrastructure history during an investigation.

Safe Read: read a webpage (URL to clean text) with a prompt injection scan. Fetch one public web page and get its clean main text, title, metadata, a sha256 content hash, and prompt-injection warnings with a 0-100 risk score (visible text, hidden elements, HTML comments, alt/meta attributes, invisible Unicode, base64). SSRF-guarded: DNS-checked and pinned public addresses only, 4 redirects max, 2

Domain RDAP via IANA DNS bootstrap. Registrar/NS/status/events. SSRF-safe.

Know Your Merchant (KYM) trust score: pass a merchant domain and get a deterministic 0-100 trust score with a band (high/medium/low/very_low/avoid) and human-readable reasons. Live signals: domain age from the RDAP registry of record, malware/phishing blocklist verdict via Cloudflare Security DNS, TLS certificate health, mail capability, and refund/privacy/contact page presence. The merchant-side

Lightweight utility API for agents and operators: DNS lookups, RDAP/WHOIS domain data, HTTP probes, page metadata extraction, cryptographic hashing, JSON validation, scheduled webhooks, and exotic endpoints (Base transaction decode, ENS resolve, USGS earthquakes, cron next-run, TLS certificate report). No shell access; outbound URL tools enforce SSRF protections.

Assess how trustworthy a domain is using authoritative live signals, not just its spelling. Fuses RDAP registration data (domain age — the single strongest phishing signal — plus registrar, expiry and registry status flags), DNS resolvability (A/AAAA), MX presence and DNSSEC into a 0-100 risk score with a verdict (low/medium/high) and the exact reasons. Pairs with `urltrust` (lexical) for a comple

DNS and list based verification. Never claims that a mailbox exists without evidence: without an SMTP probe the verdict for a routable address is "unknown", not "valid".

Is this vendor or domain safe? One call runs cert, DNS, email security, ransomware leak-site listing and vendor status checks and returns a verdict (safe, caution, risk, incomplete). $0.04 USDC on Base. Not charged if every check fails or input is invalid.

Why is this host failing right now? One call, no account: Ned probes it (DNS at three resolvers, its nameservers, TCP, TLS, HTTP timings, CDN and hosting fingerprints, cache and static splits, domain registration) and returns a diagnosis an agent can act on: findings and their strength, what was ruled out, and a ready runbook prompt. Page text never leaves Ned.

Email address verification for AI agents: RFC 5322 syntax check, live MX/A DNS lookup, disposable-domain detection, role-address and free-mail-provider flags, typo suggestions (gmial.com -> gmail.com), normalized form and a low/medium/high risk score. One address or up to 20 per request, same price. No mailbox probing.

Domain intelligence in one call: RDAP registration (registrar, created, expires, age, status, nameservers), DNS records (A, AAAA, MX, NS, TXT, CNAME, SPF, DMARC), a live HTTPS probe (reachable, status, server, redirect target, HSTS), plus risk flags and a 0-100 risk score for new, parked, unreachable or badly configured domains.

Domain liveness check / verify / audit: DNS resolution (A/MX/NS/TXT records), whether mail routing exists, HTTP reachability.

DNS and list based verification. Never claims that a mailbox exists without evidence: without an SMTP probe the verdict for a routable address is "unknown", not "valid".

Domain & DNS intelligence — records, SSL certs, subdomain discovery.

Phishing / impersonation check for crypto links before an agent or person connects a wallet or signs: brand lookalikes & typosquats of 60 wallets/exchanges/dapps, punycode, domain age (RDAP), DNS, redirects, and a page scan for seed-phrase prompts and approval-drainer code. 1-10 URLs per call.

DNS via Cloudflare/Google DoH: A/AAAA/MX/TXT/NS/CAA + optional SPF/DMARC parse. No mailbox probing.

DNS lookup: A/AAAA/MX/TXT/NS/CNAME/SOA/CAA, SPF and DMARC presence

DNS lookup API for agents at $0.01 USDC. Call when you need A/AAAA/CNAME/MX/TXT/NS for domain routing, email delivery, or infra checks without running a recursive resolver. Returns structured records via x402—no API key, no subscription.

Domain intel bundle: DNS records (A/AAAA/MX/NS/TXT/CAA/CNAME), RDAP registration (registrar, created/expires, status, nameservers) and TLS certificate (issuer, days left) in one call.

Public domain DNS, mail configuration and HTTP security headers

One-call domain due diligence: RDAP registration (age, registrar, expiry), DNS (A/AAAA/NS/CAA, DNSSEC), email setup (MX/SPF/DMARC), HTTPS reachability with security-headers grade, and risk flags such as newly_registered_lt_30d.

Use when you need to know what a website is built with (CMS, frameworks, analytics, CDN, hosting), who hosts its email and DNS, and how good its security headers are. Up to 3 domains per call; fetches each homepage once, follows robots.txt.

Full-domain intelligence report in one call: complete DNS sweep (A/AAAA/MX/NS/TXT/SOA/CNAME), RDAP registration data (registrar, dates, statuses), DNSSEC presence, mail posture summary (SPF/DMARC/DKIM selectors), TLS certificate snapshot (issuer, expiry, protocol), Certificate Transparency subdomain census, and HTTP probe (status, redirects, https enforcement, server header) — each section scored,

Company enrichment from domain — composite domain dossier: RDAP registration + DNS infrastructure signals, tech-stack detection, likely corporate email patterns + MX verification, and SSL/TLS certificate health for one domain, fused into a single response with an aggregated signals list. Lead data for B2B prospecting. One domain per call. Tiger Operations. Use when vetting a company or domain and

B2A Email Deliverability, MX, SPF & DMARC Verifier (/v1/email-verify) — Validates email syntax, disposable/burner provider status, role accounts, and live DNS MX/SPF/DMARC records. (https://email-verify.agentdiet.dev/v1/email-verify)

Domain OSINT, TLS Certificate & Security Headers Recon (/v1/domain-osint) — Inspects live IPv4/IPv6 DNS resolution, TLS certificate issuer/expiry, and HTTP security grade. (https://domain-osint.agentdiet.dev/v1/domain-osint)