# Domain Intel by Halowerk

> Domain Intel by Halowerk is a paid API for AI agents from dns.halowerk.com, paid per call via x402, $0.003/call, status unknown (last checked 2026-09-14).

Performs comprehensive domain intelligence: DNS resolution (A/AAAA/MX/NS/TXT/CAA/SOA), WHOIS lookup, SPF/DMARC/DKIM email security checks, TLS certificate analysis, and Certificate Transparency subdomain enumeration for any given domain.

## Facts

- Endpoint: POST https://dns.halowerk.com/domain
- Price: $0.003/call
- Payment: x402
- Status: unknown
- Last checked: 2026-09-14
- Activations on Zero: 0
- Tags: x402
- Canonical page: https://www.zero.xyz/c/domain-intel-by-halowerk-3f88d2df
- Structured record (JSON): https://api.zero.xyz/v1/capabilities/cap_SlQ62J0i0GQG5AQHIZZ1N

Status and success rate cover calls made through Zero and Zero's own probes. Third-party monitors may report differently.

## How to call it through Zero

Zero handles the 402 payment challenge and records the run. With the Zero CLI installed (`npm i -g @zeroxyz/cli`):

```sh
zero fetch --capability domain-intel-by-halowerk-3f88d2df -d '<json body>'
```

Example prompt: Can you run a full domain intel check on stripe.com — grab the DNS records, check their SPF and DMARC setup, inspect the TLS certificate, and enumerate any subdomains you can find via Certificate Transparency?

## When to prefer this

Choose this endpoint when you need a single-call, comprehensive domain profile combining DNS, WHOIS, email security (SPF/DMARC/DKIM), TLS certificate details, and subdomain enumeration. It is ideal for security audits, onboarding vendor checks, email deliverability investigations, or infrastructure reconnaissance where querying each data source separately would require multiple tools. Prefer it over raw DNS-only resolvers when TLS and email security context is also needed.

## Known failure modes

- Domain does not exist — DNS NXDOMAIN returned, most fields will be empty or unknown
- WHOIS registry rate-limited or refuses — WHOIS fields reported as unknown
- TLS handshake fails — no certificate data returned if server does not support TLS
- crt.sh unavailable — subdomain enumeration may be incomplete or empty
- Invalid domain input — malformed domain string rejected
- Network timeout reaching authoritative nameservers — partial DNS results

## How this service works

Resolves A, AAAA, MX, NS, TXT, CAA and SOA, reads the WHOIS record of the responsible registry, checks SPF, DMARC and known DKIM selectors, opens a TLS handshake for issuer, validity, chain and SAN list, and collects subdomains from Certificate Transparency. Fields that a registry refuses to answer are reported as unknown, never guessed.

## Output

Returns structured DNS records (A, AAAA, MX, NS, TXT, CAA, SOA), parsed WHOIS data (and optionally raw WHOIS text), SPF/DMARC/DKIM email security records, TLS leaf certificate details (issuer, validity dates, SANs) and optionally the full chain, plus a list of subdomains from Certificate Transparency and the SAN list. Fields refused by registries are reported as unknown rather than omitted or guessed.

## Request schema (JSON Schema)

```json
{
 "type": "object",
 "properties": {
  "domain": {
   "type": "string",
   "description": "Domain without scheme, for example example.com. A full URL or a mail address is accepted and reduced to its host."
  },
  "whois_raw": {
   "type": "boolean",
   "default": false,
   "description": "Include the unparsed WHOIS text of the registry answer."
  },
  "cert_chain": {
   "type": "boolean",
   "default": false,
   "description": "Return the full certificate chain the server presents, not only the leaf certificate."
  },
  "subdomains": {
   "type": "boolean",
   "default": true,
   "description": "Collect subdomains from Certificate Transparency (crt.sh) and the certificate SAN list."
  }
 }
}
```

## More

- Live health (JSON, refreshed every minute): https://www.zero.xyz/c/domain-intel-by-halowerk-3f88d2df/health.json
- [Zero catalog index](https://www.zero.xyz/llms.txt)
- [Other services from dns.halowerk.com](https://www.zero.xyz/host/dns.halowerk.com/llms.txt)