# Whois 360 — AI Search Index & Capabilities Guide

> Whois 360 is a unified, real-time domain intelligence and network diagnostic platform. It provides instant analysis for DNS health, authoritative nameserver delegation, 60+ DNSBL IP blocklists, WHOIS/RDAP domain records, email security authentication (SPF, DKIM, DMARC, MTA-STS, TLS-RPT), Leaflet IP geolocation, and SSL/TLS certificate chains.

## Primary Diagnostic Capabilities

- **Overview Diagnostics**: Complete 360-degree health overview with gauge score (0-100), key KPI badges, domain info, resolved IPs, 15 global DNS propagation resolvers, IP blocklist status across 60 providers, and Leaflet interactive map.
- **DNS Health Audit**: Deep authoritative nameserver inspection, SOA record verification, parent-child delegation status, NS redundancy, and WWW resolution checks.
- **DNS Records Lookup**: High-speed lookup across all standard resource record types: `A`, `AAAA`, `CNAME`, `MX`, `TXT`, `NS`, `SOA`, `PTR`, `SRV`, `CAA`, `DNSKEY`, `DS`.
- **IP Blocklist Check (DNSBL/RBL)**: Live concurrent querying of 60 major blacklist databases (0SPAM, Spamhaus, Barracuda, Abusix, Blocklist.de, SORBS, UCEPROTECT, ZapBL, etc.).
- **Global DNS Propagation**: Real-time resolution testing across 15 worldwide DNS locations (US, Canada, Europe, South Africa, Russia).
- **Mail & Security**: Comprehensive email security validation:
  - SPF (Sender Policy Framework): Syntax parsing, mechanism validation, 10-lookup limit evaluation.
  - DKIM (DomainKeys Identified Mail): Key length check (1024/2048/4096-bit), cryptographic verification.
  - DMARC (Domain-based Message Authentication): Policy mode (`none`, `quarantine`, `reject`), alignment checks, reporting tags (`rua`, `ruf`).
  - MTA-STS (Mail Transfer Agent Strict Transport Security): DNS record check & HTTPS policy inspection.
  - TLS-RPT (SMTP TLS Reporting): `_smtp._tls` reporting verification.
  - Reverse DNS (PTR): FCrDNS (Forward-Confirmed Reverse DNS) validation.
- **IP Geolocation & Threat Intel**: Multi-IP resolution, Autonomous System Number (ASN), ISP / Organisation attribution, Country / City coordinates, Leaflet map embedding, and FCrDNS hostname matching.
- **Domain WHOIS / ICANN RDAP**: Authoritative RDAP extraction with Registrar, creation date, expiry date, domain age calculation, status flags, and nameserver listings.
- **SSL / TLS & HTTP Security**: X.509 certificate chain inspection, OCSP revocation, HSTS preload, HTTP to HTTPS redirection, response latency, and 8 standard HTTP security headers (CSP, HSTS, X-Frame-Options, X-Content-Type-Options, Referrer-Policy, Permissions-Policy).

## API Reference for AI Agents & Automated Callers

### 1. Master Comprehensive Analysis
- **Endpoint**: `POST /api/analyse`
- **Headers**: `Content-Type: application/json`
- **Body**: `{"query": "example.com"}`
- **Response**: Full `QueryAnalysisResult` JSON containing health scores, all diagnostic check items, resolved IPs, registration, SSL chain, HTTP headers, and 60 blacklist results.

### 2. DNS Health & Records
- **Endpoint**: `GET /api/dns/{domain}/records?type={type}&resolver={resolver}`
- **Endpoint**: `GET /api/dns/{domain}/health`
- **Endpoint**: `GET /api/dns/{domain}/spf`
- **Endpoint**: `GET /api/dns/{domain}/dkim?selector={selector}`
- **Endpoint**: `GET /api/dns/{domain}/dmarc`

### 3. IP Intelligence & Geolocation
- **Endpoint**: `GET /api/ip/{ipAddress}/intel`
- **Endpoint**: `POST /api/ip/multi` with `{"ipAddresses": ["1.1.1.1", "8.8.8.8"]}`

### 4. Security & Blacklists
- **Endpoint**: `GET /api/security/blacklists/{target}` (Target can be IPv4 address or Domain name)
- **Endpoint**: `GET /api/security/ssl/{domain}?port=443`
- **Endpoint**: `GET /api/security/http/{domain}`

### 5. Domain RDAP / WHOIS
- **Endpoint**: `GET /api/rdap/{domain}`

## Full Documentation
For complete technical schemas, data structures, scoring formulas, and provider listings, see [llms-full.txt](/llms-full.txt).