LIVE DOMAIN EVIDENCE

DNS, SPF and DMARC.
One useful JSON report.

Use this API in domain onboarding, email configuration checks, and agent research when you need current records rather than model memory. The report is a technical configuration check, not a reputation or legitimacy verdict.

POST /api/domain-audit
Content-Type: application/json
PAYMENT-SIGNATURE: <caller-created x402 authorization>

{ "domain": "example.com" }

Price: $0.002 USDC per completed call on Base mainnet. Send one ASCII or punycode hostname with no scheme, path, query, or port.

What comes back

• Observed A, AAAA, MX, NS, TXT, CAA, and DMARC records with TTLs.
• SPF and DMARC findings, DNSSEC authentication observations, and next steps.
• A point-in-time grade, score, timestamp, and resolver attribution.
• An x402 settlement receipt in the response header.

What the score means

The score describes this tool’s configuration rubric. A domain can be safe while intentionally lacking an apex address or CAA record. DNSSEC observations come from the resolver; they are not an independent DNSSEC validation. SPF includes and DMARC organizational-domain inheritance are not recursively evaluated.

Failure handling

Resolver SERVFAIL, refusal, malformed answers, or a network failure stop the audit before settlement. NXDOMAIN is a real DNS observation and can produce a paid report with findings. A domain explicitly rejecting inbound mail still needs SPF and DMARC checks because it can be spoofed as a sender.