# Domain Intel — WHOIS, DNS, Mail Policy, TLS & Subdomains (Halowerk)

> Domain Intel — WHOIS, DNS, Mail Policy, TLS & Subdomains (Halowerk) is a paid API for AI agents from dns.halowerk.com, paid per call via x402, $0.009/call, status unknown (last checked 2026-10-13).

Given a domain name, returns WHOIS record, DNS records (A, AAAA, MX, NS, TXT, CAA, SOA), mail policy (SPF/DKIM/DMARC), TLS certificate details, and subdomains — paid per call via x402/USDC.

## Facts

- Endpoint: POST https://dns.halowerk.com/domain/articles/ns-inwx?utm_source=zero.xyz
- Price: $0.009/call
- Payment: x402
- Status: unknown
- Last checked: 2026-10-13
- Activations on Zero: 0
- Tags: x402
- Canonical page: https://www.zero.xyz/c/domain-intel-whois-dns-mail-policy-tls-subdomains-halowerk-d19f5233
- Structured record (JSON): https://api.zero.xyz/v1/capabilities/cap_BGw9mQgdz0UUSw6acBsh3

Status and success rate cover calls made through Zero and Zero's own probes. Third-party monitors may report differently.

## How to call it through Zero

Zero handles the 402 payment challenge and records the run. With the Zero CLI installed (`npm i -g @zeroxyz/cli`):

```sh
zero fetch --capability domain-intel-whois-dns-mail-policy-tls-subdomains-halowerk-d19f5233 -d '<json body>'
```

Example prompt: Pull up the full domain intelligence report for github.com — I need WHOIS, all DNS records, mail policy (SPF/DMARC/DKIM), TLS certificate info, and any subdomains you can find.

## When to prefer this

Choose this endpoint when you need a one-shot, comprehensive domain profile — WHOIS + DNS + mail policy + TLS + subdomains — without having to call multiple separate services or manage API keys. It is ideal for agents performing due diligence, security audits, or email infrastructure checks on arbitrary domains. The optional baseline input makes it suitable for change-detection workflows. Prefer it over raw DNS resolvers when you need the full intelligence stack in a single call, and over subscription APIs when you want frictionless pay-per-use via USDC with no account setup.

## Known failure modes

- Domain not found or does not exist — returns empty or error response
- WHOIS data redacted/unavailable due to privacy protection (GDPR, registrar policy)
- TLS certificate absent if domain has no HTTPS endpoint
- Subdomain enumeration may be incomplete depending on DNS zone exposure
- Rate limiting or payment failure via x402 if USDC balance is insufficient
- Invalid domain format exceeding 253 characters returns validation error
- Baseline comparison returns no diff if records are identical to snapshot

## How this service works

Domain in, WHOIS, DNS, mail policy, TLS certificate and subdomains out. Pay per call in USDC over x402. No signup, no API key.

## Output

A comprehensive domain intelligence bundle including: WHOIS registration data (registrant, registrar, expiry), DNS records (A, AAAA, MX, NS, TXT, CAA, SOA), mail security policies (SPF, DKIM, DMARC), TLS/SSL certificate details (issuer, validity, SANs), and a list of discovered subdomains — all for the queried domain, optionally diffed against a provided baseline snapshot.

## Request schema (JSON Schema)

```json
{
 "type": "object",
 "properties": {
  "domain": {
   "type": "string",
   "maxLength": 253
  },
  "baseline": {
   "type": "object",
   "required": [
    "domain",
    "observed_at",
    "records"
   ],
   "properties": {
    "domain": {
     "type": "string",
     "maxLength": 253
    },
    "records": {
     "type": "array",
     "items": {
      "type": "string",
      "maxLength": 254
     },
     "maxItems": 50
    },
    "observed_at": {
     "type": "string",
     "maxLength": 40
    }
   },
   "additionalProperties": false
  }
 }
}
```

## More

- Live health (JSON, refreshed every minute): https://www.zero.xyz/c/domain-intel-whois-dns-mail-policy-tls-subdomains-halowerk-d19f5233/health.json
- [Zero catalog index](https://www.zero.xyz/llms.txt)
- [Other services from dns.halowerk.com](https://www.zero.xyz/host/dns.halowerk.com/llms.txt)