# Domain Intel – DNS, WHOIS & TLS Lookup

> Domain Intel – DNS, WHOIS & TLS Lookup is a paid API for AI agents from dns.halowerk.com, paid per call via x402, $0.009/call, status unknown (last checked 2026-10-13).

Returns WHOIS, DNS records, mail policy (SPF/DKIM/DMARC), TLS certificate details, and subdomains for a given domain name

## Facts

- Endpoint: POST https://dns.halowerk.com/domain/articles/ns-infomaniak?utm_source=zero.xyz
- Price: $0.009/call
- Payment: x402
- Status: unknown
- Last checked: 2026-10-13
- Activations on Zero: 0
- Tags: x402
- Canonical page: https://www.zero.xyz/c/domain-intel-dns-whois-tls-lookup-e5757fad
- Structured record (JSON): https://api.zero.xyz/v1/capabilities/cap_ggBPtlX88bmkolTXmyx2H

Status and success rate cover calls made through Zero and Zero's own probes. Third-party monitors may report differently.

## How to call it through Zero

Zero handles the 402 payment challenge and records the run. With the Zero CLI installed (`npm i -g @zeroxyz/cli`):

```sh
zero fetch --capability domain-intel-dns-whois-tls-lookup-e5757fad -d '<json body>'
```

Example prompt: Can you pull the full domain intelligence report for stripe.com — I need the WHOIS info, DNS records, mail policy (SPF/DMARC), TLS certificate, and any subdomains you can find?

## When to prefer this

Choose this endpoint when you need a comprehensive, single-call domain intelligence profile combining WHOIS, DNS, mail policy, TLS, and subdomain data without signing up for an API key. Ideal for security assessments, vendor due diligence, or monitoring domain changes. The baseline diff feature makes it especially useful for change detection workflows. At $0.009/call over x402, it suits pay-as-you-go agents that need occasional domain lookups without a subscription.

## Known failure modes

- Invalid or malformed domain name returns a validation error
- Domain does not exist (NXDOMAIN) results in empty or error response
- WHOIS data may be redacted for privacy-protected registrations
- TLS certificate lookup fails if the domain has no HTTPS service
- Rate limits or upstream WHOIS/DNS resolver timeouts can cause partial results
- Payment failure via x402 results in 402 response before any data is returned

## How this service works

Requires an unauthenticated caller-owned baseline; returns real current NS/MX records, added/removed sets and tri-state target-provider transition. Current DNS comes from one bounded native recursive-resolver query; existing Dossier provides context. Resolver caching may apply; no account ownership or global migration-completion claim. Existing provider patterns are reused without new invented attribution. At most50records,domain253chars,9sbudget; DNSsubquery2s/oneattempt. Unknown provider remai

## Output

A structured response containing: WHOIS registration data (registrar, registrant, dates), full DNS record set (A, AAAA, MX, NS, TXT, CNAME etc.), mail policy records (SPF, DKIM, DMARC), TLS/SSL certificate metadata (issuer, validity, SANs), and a list of discovered subdomains. If a baseline snapshot is provided, results may include change detection against that baseline.

## Request schema (JSON Schema)

```json
{
 "type": "object",
 "properties": {
  "domain": {
   "type": "string",
   "maxLength": 253
  },
  "baseline": {
   "type": "object",
   "required": [
    "domain",
    "observed_at",
    "records"
   ],
   "properties": {
    "domain": {
     "type": "string",
     "maxLength": 253
    },
    "records": {
     "type": "array",
     "items": {
      "type": "string",
      "maxLength": 254
     },
     "maxItems": 50
    },
    "observed_at": {
     "type": "string",
     "maxLength": 40
    }
   },
   "additionalProperties": false
  }
 }
}
```

## More

- Live health (JSON, refreshed every minute): https://www.zero.xyz/c/domain-intel-dns-whois-tls-lookup-e5757fad/health.json
- [Zero catalog index](https://www.zero.xyz/llms.txt)
- [Other services from dns.halowerk.com](https://www.zero.xyz/host/dns.halowerk.com/llms.txt)