# Domain Intel — WHOIS, DNS, Mail Policy, TLS & Subdomains via x402

> Domain Intel — WHOIS, DNS, Mail Policy, TLS & Subdomains via x402 is a paid API for AI agents from dns.halowerk.com, paid per call via x402, $0.009/call, status unknown (last checked 2026-10-12).

Accepts a domain name and returns WHOIS, DNS records, mail policy (SPF/DKIM/DMARC), TLS certificate details, and subdomains — paid per call in USDC over x402 with no signup required.

## Facts

- Endpoint: POST https://dns.halowerk.com/domain/articles/ns-hetzner?utm_source=zero.xyz
- Price: $0.009/call
- Payment: x402
- Status: unknown
- Last checked: 2026-10-12
- Activations on Zero: 0
- Tags: x402
- Canonical page: https://www.zero.xyz/c/domain-intel-whois-dns-mail-policy-tls-subdomains-via-x402-4fd0169e
- Structured record (JSON): https://api.zero.xyz/v1/capabilities/cap_rJGnOCHWHrjgGdnXvhsZQ

Status and success rate cover calls made through Zero and Zero's own probes. Third-party monitors may report differently.

## How to call it through Zero

Zero handles the 402 payment challenge and records the run. With the Zero CLI installed (`npm i -g @zeroxyz/cli`):

```sh
zero fetch --capability domain-intel-whois-dns-mail-policy-tls-subdomains-via-x402-4fd0169e -d '<json body>'
```

Example prompt: Pull the full domain intelligence report for stripe.com — I want WHOIS, all DNS records, mail policy (SPF, DMARC, DKIM), TLS certificate info, and any discovered subdomains.

## When to prefer this

Choose this endpoint when you need a comprehensive, multi-signal domain intelligence snapshot in a single call — covering WHOIS, all DNS record types, mail security policy, TLS certificate, and subdomains simultaneously. It is ideal for no-signup, pay-as-you-go workflows via x402 where provisioning API keys to multiple specialist services (WHOIS API, DNS resolver, certificate transparency logs) would be impractical. Prefer it for security audits, infrastructure recon, and DNS change detection use cases where breadth of output per call matters more than depth in any single category.

## Known failure modes

- Invalid or malformed domain name returns validation error
- Domain not found or not resolvable returns empty or partial results
- WHOIS registry throttling may result in incomplete WHOIS data
- Payment failure over x402 results in 402 response before any data is returned
- Baseline schema mismatch (missing required fields) causes request rejection
- Some subdomains may be undiscoverable due to DNS wildcard or private configurations
- TLS certificate lookup may fail if domain has no HTTPS endpoint

## How this service works

Domain in, WHOIS, DNS, mail policy, TLS certificate and subdomains out. Pay per call in USDC over x402. No signup, no API key.

## Output

Returns a structured report for the queried domain containing: WHOIS registration data (registrar, dates, contacts), all major DNS record types (A, AAAA, MX, NS, TXT, CAA, SOA), mail security policy records (SPF, DKIM, DMARC), TLS/SSL certificate details, and discovered subdomains. When a baseline is provided, changes since that snapshot are highlighted.

## Request schema (JSON Schema)

```json
{
 "type": "object",
 "properties": {
  "domain": {
   "type": "string",
   "maxLength": 253
  },
  "baseline": {
   "type": "object",
   "required": [
    "domain",
    "observed_at",
    "records"
   ],
   "properties": {
    "domain": {
     "type": "string",
     "maxLength": 253
    },
    "records": {
     "type": "array",
     "items": {
      "type": "string",
      "maxLength": 254
     },
     "maxItems": 50
    },
    "observed_at": {
     "type": "string",
     "maxLength": 40
    }
   },
   "additionalProperties": false
  }
 }
}
```

## More

- Live health (JSON, refreshed every minute): https://www.zero.xyz/c/domain-intel-whois-dns-mail-policy-tls-subdomains-via-x402-4fd0169e/health.json
- [Zero catalog index](https://www.zero.xyz/llms.txt)
- [Other services from dns.halowerk.com](https://www.zero.xyz/host/dns.halowerk.com/llms.txt)