# Domain Intel — Pay-Per-Call Domain Intelligence (x402)

> Domain Intel — Pay-Per-Call Domain Intelligence (x402) is a paid API for AI agents from dns.halowerk.com, paid per call via x402, $0.009/call, status unknown (last checked 2026-10-13).

Returns WHOIS, DNS records, mail policy (SPF/DKIM/DMARC), TLS certificate, and subdomain data for a given domain, billed per call in USDC via x402.

## Facts

- Endpoint: POST https://dns.halowerk.com/domain/articles/ns-united-domains?utm_source=zero.xyz
- Price: $0.009/call
- Payment: x402
- Status: unknown
- Last checked: 2026-10-13
- Activations on Zero: 0
- Tags: x402
- Canonical page: https://www.zero.xyz/c/domain-intel-pay-per-call-domain-intelligence-x402-5746f7b6
- Structured record (JSON): https://api.zero.xyz/v1/capabilities/cap_egV05WpbrpitD-y82FqG1

Status and success rate cover calls made through Zero and Zero's own probes. Third-party monitors may report differently.

## How to call it through Zero

Zero handles the 402 payment challenge and records the run. With the Zero CLI installed (`npm i -g @zeroxyz/cli`):

```sh
zero fetch --capability domain-intel-pay-per-call-domain-intelligence-x402-5746f7b6 -d '<json body>'
```

Example prompt: Pull a full domain intelligence report for github.com — I want WHOIS, all DNS records, mail policy, TLS certificate info, and any subdomains you can find.

## When to prefer this

Choose this endpoint when you need a comprehensive, all-in-one domain intelligence profile without managing API keys or subscriptions. It is ideal for one-off investigations, security audits, phishing detection, or DNS monitoring workflows where pay-per-call economics are preferable to a monthly plan. Prefer it over dedicated WHOIS-only or DNS-only APIs when you need multiple data types (WHOIS + DNS + TLS + mail policy + subdomains) in a single call. The optional baseline parameter makes it especially useful for change-detection scenarios.

## Known failure modes

- Domain not found or unregistered — returns empty or partial result
- Invalid domain format — returns validation error
- WHOIS privacy protection — registrant details may be redacted
- Rate limiting or upstream resolver failures — transient error
- x402 payment failure — call blocked if USDC payment is rejected
- TLS certificate absent — returns null cert data for HTTP-only domains

## How this service works

Domain in, WHOIS, DNS, mail policy, TLS certificate and subdomains out. Pay per call in USDC over x402. No signup, no API key.

## Output

A structured report containing WHOIS registration details (registrar, dates, registrant), full DNS record set (A, AAAA, MX, NS, TXT, CNAME, etc.), email authentication policy records (SPF, DKIM, DMARC), active TLS certificate metadata (issuer, validity, SANs), and a list of discovered subdomains. When a baseline is provided, the response can be used to detect drift from a prior observed state.

## Request schema (JSON Schema)

```json
{
 "type": "object",
 "properties": {
  "domain": {
   "type": "string",
   "maxLength": 253
  },
  "baseline": {
   "type": "object",
   "required": [
    "domain",
    "observed_at",
    "records"
   ],
   "properties": {
    "domain": {
     "type": "string",
     "maxLength": 253
    },
    "records": {
     "type": "array",
     "items": {
      "type": "string",
      "maxLength": 254
     },
     "maxItems": 50
    },
    "observed_at": {
     "type": "string",
     "maxLength": 40
    }
   },
   "additionalProperties": false
  }
 }
}
```

## More

- Live health (JSON, refreshed every minute): https://www.zero.xyz/c/domain-intel-pay-per-call-domain-intelligence-x402-5746f7b6/health.json
- [Zero catalog index](https://www.zero.xyz/llms.txt)
- [Other services from dns.halowerk.com](https://www.zero.xyz/host/dns.halowerk.com/llms.txt)