Subdomain Finder x402 REST usage
Subdomains of a domain found in public Certificate Transparency logs (crt.sh), with first certificate and current validity date. Use for attack-surface mapping, asset inventory or competitor research.
1,016 services carry this tag in their source record. Tags come from the provider, not from us — a tag is a claim about what the service does, not proof that it does it well.
Subdomains of a domain found in public Certificate Transparency logs (crt.sh), with first certificate and current validity date. Use for attack-surface mapping, asset inventory or competitor research.
DNS check for a domain: does it resolve, plus A, MX and NS records. Input: d.
OpenAI-compatible chat completion with Qwen3 30B (fast mixture-of-experts model): set the base URL to /v1/llm/qwen3-30b in any OpenAI SDK. Up to 32,000 characters in and 2,048 tokens out per call, a fixed price per call,...
Resolve ENS (.eth) on Ethereum and Basenames (.base.eth) on Base, forward or reverse. Returns address, name, source, forward_verified, optional avatar.
Domain & DNS intelligence — records, SSL certs, subdomain discovery.
Convert one bounded fiat amount using the latest successfully fetched European Central Bank daily foreign-exchange reference table. Forest returns the ECB observation date and deterministic cross-rates through EUR. Fresh...
Everything about a domain in one call: DNS records (A, AAAA, NS, MX, TXT, CAA, CNAME), email security graded A-F (mail provider, SPF, DMARC policy, DKIM at common selectors, BIMI, with findings) and RDAP registration (re...
Base transaction explained from the chain: success or reverted, block and time, from, to, ETH value, method selector, gas used and fee, contract created, and every ERC-20 transfer decoded with token symbol and amount. In...
The main DNS records of a domain in one call. Pass ?domain= and get A and AAAA (with TTL), MX, NS, TXT, CNAME, CAA and SOA, at most 20 records per type and 300 characters per record, each type with its own status (ok, no...
Encode text or a URL as a QR code: PNG (base64 and a data URL) or SVG, with the size and error correction level you choose.
Check whether an isolated cart can reach checkout and expose blockers without payment. It never logs in, creates an order or finalizes checkout.
Paid network-timing breakdown for a URL — DNS resolve + TCP connect + TLS handshake + TTFB (time to first byte) + total download phase-by-phase milliseconds + CDN/edge-region detection from CF-Ray/X-Amz-Cf-Pop/X-Vercel-I...
Paid comprehensive DNS audit — parallel A/AAAA/MX/NS/TXT/CAA/SOA/DS queries via Cloudflare DoH, email-auth rollup (SPF/DKIM/DMARC + bulk-sender Gmail/Yahoo compliance), nameserver diversity, CAA policies, DNSSEC DS hint,...
Paid deep HTTP header policy audit — 30+ headers across 12 groups: CSP (Content-Security-Policy + Report-Only) + HSTS (max-age + includeSubDomains) + COOP/COEP/CORP/Origin-Agent-Cluster + Permissions-Policy (feature list...
Paid SVCB/HTTPSSVC (RFC 9460+9461) deep parser (cycle 170, x402 $0.001) - probes 11 conventional _<port>._<proto>.<domain> SVCB endpoints (_443._tcp + _443._tcp.www + _443._tcp.api + _80._tcp + _25._tcp + _587._tcp + _85...
Paid bulk-sender email-deliverability verdict (cycle 100) — composes MX + SPF + DKIM + DMARC + MTA-STS + TLS-RPT + provider fingerprint into a single 0-100 deliverability score with A-F grade and findings[]. Different fr...
Paid RPKI Route Origin Validation (ROV) auditor per RFC 6811 (cycle 172, x402 $0.001) - accepts ?prefix=<CIDR> [auto-resolves announcing ASN via RIPEstat prefix-overview] OR ?prefix=<CIDR>&asn=ASxxxx OR ?asn=ASxxxx; call...
Paid DNS CNAME chain tracer (cycle 175, x402 $0.001) - accepts ?host=<HOST> OR ?domain=<HOST> OR ?url=<URL>; actively follows CNAME + A/AAAA hops via Cloudflare DoH for the target host (up to 12 hops with loop detection)...
Paid DNS SRV (RFC 2782) record mapper + service-discovery auditor (cycle 174, x402 $0.001) - accepts ?domain=<DOMAIN> + ?service=<SVC> + ?proto=<tcp|udp|tls> OR shorthand ?q=<SVC>.<PROTO>.<DOMAIN>; actively probes Cloudf...
Paid MTA-STS (RFC 8461) policy+record cross-validator (cycle 174, x402 $0.001) - accepts ?domain=<DOMAIN>; actively probes _mta-sts.<domain> TXT (RFC 8461 SS3.1) via DoH + https://mta-sts.<domain>/.well-known/mta-sts.txt...
Paid RFC 8460 SMTP TLS-RPT (TLS Reporting) report parser (cycle 178, x402 $0.001) - accepts POST application/json {'report':<RFC 8460 JSON object>} OR POST application/json {'report_text':<JSON string>} OR GET ?report=<u...
Paid llms.txt provenance / author fingerprint (cycle 102) — extracts H1 + byline + contact emails + @-handles from llms.txt body, cross-references the same email against /.well-known/security.txt Contact: field (RFC 9116...
Paid active TLS 1.3 + PQC + ECH probe (cycle 108) — opens TLS 1.3 connection, advertises 13 named groups including PQC hybrids (X25519Kyber768Draft00/Draft01, X25519Kyber768, SecP256r1Kyber768Draft00/Draft01, P256Kyber76...
Paid brand-impersonation risk synthesis (cycle 106) — aggregates 8 signals (domain age via crt.sh, BIMI RFC 8848 record, RFC 9116 security.txt, llms.txt presence, /.well-known/x402 honest declaration, https→http redirect...