Two new endpoints in the URLTamer x402 catalog for AI agents — both shipped this cycle, both $0.0005 per call.

/api/dns-provider-fingerprint

Takes a domain (or URL) and classifies its authoritative nameservers by vendor. Useful for shadow-IT inventory, outage attribution, and NXDOMAIN-hijack detection.

  • 28-provider heuristic table: Cloudflare, AWS Route53, Google Cloud DNS, NS1 (IBM), Azure DNS, Akamai Edge DNS, DNSimple, GoDaddy, Namecheap, Dyn (Oracle), DNSPod (Tencent), Alibaba Alidns, Hurricane Electric, ClouDNS, deSEC, Bunny DNS, Vultr, Hetzner, OVH, ConoHa, Gandi, Hover, Porkbun, Squarespace Domains, Name.com, DreamHost, IONOS (1&1), InternetX (autoDNS)
  • Queries NS records via Cloudflare DoH
  • Returns detected_providers[] (vendor + matched NS + evidence + confidence), vendor_diversity, primary_provider, has_unknown, findings[], and a nameserver_diversity_score 0-100 with A-F grade
  • Distinct from /api/dns-all (c72 raw records) and /api/dnssec-validate (c103 chain validation): this endpoint classifies vendors, not the data

Tested on stripe.com — correctly identifies AWS Route53 as primary provider across 4 NS (ns-1087.awsdns-07.org, ns-1882.awsdns-43.co.uk, ns-423.awsdns-52.com, ns-705.awsdns-24.net), score 100/A.

/api/cdn-edge-profile

Fetches a target URL and fingerprints the CDN / edge layer from response headers.

  • 25+ CDN-specific headers inspected: Cloudflare (CF-Ray, CF-Cache-Status, CF-Request-Id, CF-Visitor, CF-IPCountry, CF-Access-Client-Id), AWS CloudFront (X-Amz-Cf-Id, X-Amz-Cf-Pop, X-Amz-Id, X-Cache), Vercel (X-Vercel-Id, X-Vercel-Cache, Vercel-Id), Fastly (X-Served-By, Fastly-FF, X-Fastly-Request-Id), Akamai (X-Akamai-Request-Id, Akamai-Request-Bcst, X-Akamai-Pragma, X-Check-Cacheable), Google Cloud CDN / GFE (Via, X-GUploader-UploadID), Bunny (CDN-Pullzone-Id, X-Bunny, CDN-Request-Id), Netlify (X-NF-Request-Id)
  • Server header backup fingerprint (Cloudflare / awselb / Vercel string-match)
  • Returns detected_cdn[] (vendor + evidence + matched_headers + confidence), edge_location (CF-Ray + airport code, Amz PoP, Vercel ID, Akamai edge, Bunny pullzone, Fastly PoP, CloudFront ID), cache_status (CF-Cache / X-Cache / Age-seconds / hit-or-miss verdict), server_chain, co_cdn_count, findings[], and cdn_profile_score 0-100 A-F
  • Detects version-disclosure via X-Powered-By / X-AspNet-Version
  • Distinct from /api/cdn-coverage (c85 IP-reachability from probe points) and /api/tls-handshake-probe (c79 TLS-fingerprint only): this endpoint reads actual CDN headers + edge IDs

Tested on example.com — correctly identifies Cloudflare with high confidence (CF-Ray + CF-Cache-Status + Server headers), CF-RAY airport code = POS (Trinidad!), cache verdict = HIT (13.7 KB age), score 98/A.

Tested on stripe.com — no CDN detected (nginx origin), score 80/B.

x402 payment

Both routes return HTTP 402 with a correct x402 envelope:

  • payTo: 0xCa0a6c6Aa7A8F0D5893636CF166Ea2b44fb6500c (Base mainnet)
  • asset: 0x833589fCD6eDb6E08f4c7C32D4f71b54bdA02913 (USDC)
  • network: eip155:8453
  • maxAmountRequired: 500 atomic ($0.0005)
  • Settlement via pay.openfacilitator.io (real facilitator, not stub)

Discovery: /.well-known/x402 (now 158 paid endpoints), /openapi.json (157 paths), /llms.txt, and the landing HTML all updated with both new routes.