# Domain Intel — WHOIS, DNS, Mail, TLS & Subdomain Dossier

> Domain Intel — WHOIS, DNS, Mail, TLS & Subdomain Dossier is a paid API for AI agents from dns.halowerk.com, paid per call via x402, $0.008/call, status unknown (last checked 2026-10-13).

Given a domain name, returns a comprehensive intelligence dossier including WHOIS registration data, DNS records, mail policy (SPF/DKIM/DMARC), TLS certificate details, and discovered subdomains — paid per call in USDC via x402.

## Facts

- Endpoint: POST https://dns.halowerk.com/domain/dossier?utm_source=zero.xyz
- Price: $0.008/call
- Payment: x402
- Status: unknown
- Last checked: 2026-10-13
- Activations on Zero: 0
- Tags: x402
- Canonical page: https://www.zero.xyz/c/domain-intel-whois-dns-mail-tls-subdomain-dossier-fe132125
- Structured record (JSON): https://api.zero.xyz/v1/capabilities/cap_l73TSrANpXpc0ZM6J2Zq6

Status and success rate cover calls made through Zero and Zero's own probes. Third-party monitors may report differently.

## How to call it through Zero

Zero handles the 402 payment challenge and records the run. With the Zero CLI installed (`npm i -g @zeroxyz/cli`):

```sh
zero fetch --capability domain-intel-whois-dns-mail-tls-subdomain-dossier-fe132125 -d '<json body>'
```

Example prompt: Pull a full domain dossier on stripe.com — I want WHOIS registration details, DNS records, SPF/DKIM/DMARC mail policy, TLS certificate info, and any subdomains you can find.

## When to prefer this

Choose this endpoint when you need a comprehensive, multi-signal domain intelligence report in a single call rather than querying WHOIS, DNS, and certificate transparency logs separately. Ideal for security investigations, vendor due diligence, phishing triage, and email deliverability audits. The pay-per-call x402 model (no API key or signup) makes it ideal for agents that need on-demand domain lookups without managing credentials or subscriptions.

## Known failure modes

- Invalid domain format — returns error if input doesn't match the required domain pattern
- Domain not found or unresolvable — may return empty or partial results for non-existent domains
- WHOIS rate limiting or privacy proxy — registrant data may be redacted for privacy-protected domains
- No subdomains discovered — subdomain enumeration may return empty list for domains with minimal public footprint
- Payment failure — x402 payment not accepted or insufficient USDC balance results in 402 response

## How this service works

Domain in, WHOIS, DNS, mail policy, TLS certificate and subdomains out. Pay per call in USDC over x402. No signup, no API key.

## Output

Returns a structured dossier containing: WHOIS registration data (registrar, registrant, creation/expiry dates), DNS records (A, AAAA, MX, NS, TXT, CNAME, etc.), mail policy records (SPF, DKIM, DMARC), TLS/SSL certificate details (issuer, validity, SANs), and a list of discovered subdomains — all aggregated from a single domain input.

## Request schema (JSON Schema)

```json
{
 "type": "object",
 "properties": {
  "domain": {
   "type": "string",
   "pattern": "^(?=.{1,253}$)(?:[a-zA-Z0-9](?:[a-zA-Z0-9-]{0,61}[a-zA-Z0-9])?\\.)+[a-zA-Z]{2,63}$",
   "maxLength": 253,
   "minLength": 4
  }
 }
}
```

## More

- Live health (JSON, refreshed every minute): https://www.zero.xyz/c/domain-intel-whois-dns-mail-tls-subdomain-dossier-fe132125/health.json
- [Zero catalog index](https://www.zero.xyz/llms.txt)
- [Other services from dns.halowerk.com](https://www.zero.xyz/host/dns.halowerk.com/llms.txt)