# Domain Intel – WHOIS, DNS, Mail Policy, TLS & Subdomains

> Domain Intel – WHOIS, DNS, Mail Policy, TLS & Subdomains is a paid API for AI agents from dns.halowerk.com, paid per call via x402, $0.009/call, status unknown (last checked 2026-10-12).

Given a domain name, returns comprehensive intelligence including WHOIS registration data, DNS records, mail policy (SPF/DKIM/DMARC), TLS certificate details, and discovered subdomains.

## Facts

- Endpoint: POST https://dns.halowerk.com/domain/articles/ns-ionos?utm_source=zero.xyz
- Price: $0.009/call
- Payment: x402
- Status: unknown
- Last checked: 2026-10-12
- Activations on Zero: 0
- Tags: x402
- Canonical page: https://www.zero.xyz/c/domain-intel-whois-dns-mail-policy-tls-subdomains-96c217da
- Structured record (JSON): https://api.zero.xyz/v1/capabilities/cap_Pnr76y8_8meOgg4qasxtL

Status and success rate cover calls made through Zero and Zero's own probes. Third-party monitors may report differently.

## How to call it through Zero

Zero handles the 402 payment challenge and records the run. With the Zero CLI installed (`npm i -g @zeroxyz/cli`):

```sh
zero fetch --capability domain-intel-whois-dns-mail-policy-tls-subdomains-96c217da -d '<json body>'
```

Example prompt: Pull a full domain intelligence report for stripe.com — I need WHOIS registration details, all DNS records, mail security policies like SPF and DMARC, the TLS certificate info, and any subdomains you can find.

## When to prefer this

Choose this endpoint when you need a comprehensive, all-in-one domain intelligence snapshot without signing up for an API key — especially useful for ad-hoc security investigations, vendor assessments, or DNS change monitoring. It covers WHOIS, DNS, mail policy, TLS, and subdomains in a single pay-per-call request at $0.009 USDC, making it cost-effective for infrequent or automated lookups. Prefer it over dedicated WHOIS-only or DNS-only tools when you need the full picture in one call.

## Known failure modes

- Invalid or non-existent domain returns an error or empty result set
- WHOIS data may be redacted for privacy-protected domains (GDPR shields)
- Payment failure over x402 results in HTTP 402 with no data returned
- Rate limits or upstream WHOIS throttling may cause partial results
- Very new domains may have incomplete WHOIS or propagation gaps in DNS records
- TLS certificate lookup may fail if domain has no HTTPS endpoint

## How this service works

Requires an unauthenticated caller-owned baseline; returns real current NS/MX records, added/removed sets and tri-state target-provider transition. Current DNS comes from one bounded native recursive-resolver query; existing Dossier provides context. Resolver caching may apply; no account ownership or global migration-completion claim. Existing provider patterns are reused without new invented attribution. At most50records,domain253chars,9sbudget; DNSsubquery2s/oneattempt. Unknown provider remai

## Output

Returns a structured payload containing: WHOIS registration data (registrar, registrant, creation/expiry dates), DNS records (A, AAAA, MX, NS, TXT, CNAME etc.), mail security policy evaluation (SPF, DKIM, DMARC), TLS certificate metadata (issuer, validity, SANs), and an enumerated list of subdomains discovered for the target domain.

## Request schema (JSON Schema)

```json
{
 "type": "object",
 "properties": {
  "domain": {
   "type": "string",
   "maxLength": 253
  },
  "baseline": {
   "type": "object",
   "required": [
    "domain",
    "observed_at",
    "records"
   ],
   "properties": {
    "domain": {
     "type": "string",
     "maxLength": 253
    },
    "records": {
     "type": "array",
     "items": {
      "type": "string",
      "maxLength": 254
     },
     "maxItems": 50
    },
    "observed_at": {
     "type": "string",
     "maxLength": 40
    }
   },
   "additionalProperties": false
  }
 }
}
```

## More

- Live health (JSON, refreshed every minute): https://www.zero.xyz/c/domain-intel-whois-dns-mail-policy-tls-subdomains-96c217da/health.json
- [Zero catalog index](https://www.zero.xyz/llms.txt)
- [Other services from dns.halowerk.com](https://www.zero.xyz/host/dns.halowerk.com/llms.txt)