Audit domain infrastructure consistency API

Compare caller-supplied DNS answers, certificate names, addresses, prefixes, and RPKI results for one domain. audit_status is consistent, inconsistencies_detected, warnings, or incomplete. risk_level is low, medium, high, or critical. No DNS, TLS, WHOIS, or BGP lookup is performed.

The Audit domain infrastructure consistency operation is part of the Domain Infrastructure Consistency Audit API on BRAINIAC.software. Compare caller-supplied DNS answers, certificate names, addresses, prefixes, and RPKI results for one domain. audit_status is consistent, inconsistencies_detected, warnings, or incomplete. risk_level is low, medium, high, or critical. No DNS, TLS, WHOIS, or BGP lookup is performed. It is exposed as POST /api/v1/domain-security/domain-infrastructure-consistency-audit and priced at $0.05 USDC on Base. Payment uses the x402 exact scheme: an unpaid call returns HTTP 402 with payment requirements; after paying the exact USDC amount, retry the same request with a payment-signature header and Idempotency-Key. No account and no API key are required. Data sources for this product: Caller-supplied DNS, certificate, and routing snapshots processed locally Caller-supplied custom-domain onboarding records processed locally Limitations: The records in the request are compared with each other. DNS, TLS, WHOIS, and BGP are not queried. Missing evidence is incomplete. It is not a confirmed inconsistency. An address or ASN change is not by itself malicious. A CDN or proxy address is expected only when the request supplies its host, range, ASN, or provider. A platform hostname is unassigned only when the request says so. A dangling DNS name is not proof of a takeover. infrastructure-health grades the supplied records, certificate names, expiry, and cipher names. A CNAME is dangling only when its target has no A or AAAA in the same snapshot. onboarding-readiness compares the supplied token, CNAME target, and certificate flag. A mismatched CNAME raises the hijacking index and is not proof of a takeover. Outputs are compliance prechecks, drafts, or data lookups for human review. They are not official determinations, legal advice, identity confirmation, or certified filings. Related operations in this group include Grade domain snapshot health, Audit custom domain onboarding, Score custom domain readiness. Open the group documentation for the full request schema, field notes, and response examples before integrating.

POST$0.05 USDC
/api/v1/domain-security/domain-infrastructure-consistency-audit

Example request

curl -i -X POST "https://www.brainiac.software/api/v1/domain-security/domain-infrastructure-consistency-audit" \
  -H 'content-type: application/json' \
  -H 'Idempotency-Key: <fresh-64-character-random-hex-key>' \
  --data-binary @- <<'JSON'
{
  "domain": "app.example.com",
  "checkedAt": "2026-11-05T00:00:00.000Z",
  "snapshot": {
    "records": [
      {
        "type": "A",
        "name": "app.example.com",
        "value": "198.51.100.8"
      },
      {
        "type": "A",
        "name": "app.example.com",
        "value": "203.0.113.10"
      },
      {
        "type": "CNAME",
        "name": "www.app.example.com",
        "value": "gone.example.net"
      },
      {
        "type": "TXT",
        "name": "gone.example.net",
        "value": "left"
      },
      {
        "type": "NS",
        "name": "example.com",
        "value": "ns1.expected.net"
      },
      {
        "type": "MX",
        "name": "example.com",
        "value": "mail.expected.net",
        "preference": 10
      }
    ],
    "certificates": [
      {
        "sans": [
          "other.example.com"
        ],
        "issuer": "Other CA",
        "notBefore": "2026-01-01T00:00:00.000Z",
        "notAfter": "2026-02-01T00:00:00.000Z",
        "fingerprint": "0123456789abcdef0123456789abcdef0123456789abcdef0123456789abcdef"
      }
    ],
    "addresses": [
      {
        "ip": "198.51.100.8",
        "source": "dns"
      },
      {
        "ip": "203.0.113.10",
        "source": "dns"
      },
      {
        "ip": "192.0.2.50",
        "source": "observed"
      }
    ],
    "prefixes": [
      {
        "prefix": "198.51.100.0/24",
        "asn": 64501,
        "rpki": "invalid"
      },
      {
        "prefix": "203.0.113.0/24",
        "asn": 64500,
        "rpki": "valid"
      }
    ],
    "owners": [
      {
        "ip": "198.51.100.8",
        "asn": 64501,
        "provider": "Other Net"
      },
      {
        "ip": "203.0.113.10",
        "asn": 64500,
        "provider": "Example Host"
      }
    ]
  },
  "previous": {
    "records": [
      {
        "type": "A",
        "name": "app.example.com",
        "value": "203.0.113.10"
      },
      {
        "type": "NS",
        "name": "example.com",
        "value": "ns1.expected.net"
      },
      {
        "type": "MX",
        "name": "example.com",
        "value": "mail.expected.net",
        "preference": 10
      }
    ],
    "certificates": [],
    "addresses": [
      {
        "ip": "203.0.113.10",
        "source": "dns"
      }
    ],
    "prefixes": [
      {
        "prefix": "203.0.113.0/24",
        "asn": 64500,
        "rpki": "valid"
      }
    ],
    "owners": [
      {
        "ip": "203.0.113.10",
        "asn": 64500,
        "provider": "Example Host"
      }
    ]
  },
  "expected": {
    "providers": [
      "Example Host"
    ],
    "asns": [
      64500
    ],
    "ranges": [
      "203.0.113.0/24"
    ],
    "names": [
      "app.example.com"
    ],
    "issuers": [
      "Example CA"
    ],
    "nameservers": [
      "ns1.expected.net"
    ],
    "mailHosts": [
      "mail.expected.net"
    ]
  },
  "edge": {
    "providers": [
      "Example Host"
    ],
    "asns": [
      64500
    ],
    "ranges": [
      "203.0.113.0/24"
    ],
    "hosts": [
      "cdn.example.net"
    ]
  }
}
JSON

An unpaid probe returns HTTP 402 with x402 payment requirements. After paying the exact USDC amount on Base, retry the identical request with a payment-signature header.

FAQ

  • Do I need an API key? No. Pay the listed USDC amount with x402.
  • What network? Base (eip155:8453), USDC.
  • Is this an official determination? No. Results are for human review against the cited sources.

Related APIs

Domain Infrastructure Consistency Audit APIFull docsHow it works