# Domain Intel — WHOIS, DNS, TLS, Mail Policy & Subdomains via x402

> Domain Intel — WHOIS, DNS, TLS, Mail Policy & Subdomains via x402 is a paid API for AI agents from dns.halowerk.com, paid per call via x402, $0.009/call, status unknown (last checked 2026-10-13).

Given a domain name, returns WHOIS registration data, DNS records, mail policy (SPF/DMARC), TLS certificate details, and subdomain enumeration — billed per call in USDC over x402 with no API key required.

## Facts

- Endpoint: POST https://dns.halowerk.com/domain/articles/ns-internetx?utm_source=zero.xyz
- Price: $0.009/call
- Payment: x402
- Status: unknown
- Last checked: 2026-10-13
- Activations on Zero: 0
- Tags: x402
- Canonical page: https://www.zero.xyz/c/domain-intel-whois-dns-tls-mail-policy-subdomains-via-x402-825cc314
- Structured record (JSON): https://api.zero.xyz/v1/capabilities/cap_xipgjSLvUmoJNQvTX3MtR

Status and success rate cover calls made through Zero and Zero's own probes. Third-party monitors may report differently.

## How to call it through Zero

Zero handles the 402 payment challenge and records the run. With the Zero CLI installed (`npm i -g @zeroxyz/cli`):

```sh
zero fetch --capability domain-intel-whois-dns-tls-mail-policy-subdomains-via-x402-825cc314 -d '<json body>'
```

Example prompt: Pull a full domain intelligence report for stripe.com — I need the WHOIS info, all DNS records, SPF and DMARC mail policy, TLS certificate details, and any subdomains you can find.

## When to prefer this

Choose this endpoint when you need a single, all-in-one domain intelligence snapshot covering WHOIS, DNS, mail security policy, TLS, and subdomains without signing up for a separate service or managing an API key. It is ideal for ad-hoc, pay-as-you-go investigations where a subscription is overkill, and particularly useful for agents that need to autonomously pay per call via x402 USDC micropayments. Prefer it over specialized single-purpose DNS or WHOIS APIs when breadth of coverage per call matters more than depth in one dimension.

## Known failure modes

- Invalid or malformed domain name returns a validation error
- Domain does not exist (NXDOMAIN) may return empty or partial results
- Rate limiting or payment failure returns HTTP 402 if USDC balance is insufficient
- WHOIS data may be redacted for privacy-protected registrations
- Subdomain enumeration may be incomplete for domains with aggressive DNS wildcard configurations
- TLS certificate data unavailable if domain has no HTTPS endpoint

## How this service works

Domain in, WHOIS, DNS, mail policy, TLS certificate and subdomains out. Pay per call in USDC over x402. No signup, no API key.

## Output

A comprehensive domain intelligence report including: WHOIS registration data (registrar, registrant, expiry dates), full DNS record set (A, AAAA, MX, NS, TXT, CNAME, etc.), mail policy records (SPF, DMARC, DKIM hints), TLS certificate metadata (issuer, validity, SANs), and a list of discovered subdomains. When a baseline is provided, the response can be used to identify drift from the prior snapshot.

## Request schema (JSON Schema)

```json
{
 "type": "object",
 "properties": {
  "domain": {
   "type": "string",
   "maxLength": 253
  },
  "baseline": {
   "type": "object",
   "required": [
    "domain",
    "observed_at",
    "records"
   ],
   "properties": {
    "domain": {
     "type": "string",
     "maxLength": 253
    },
    "records": {
     "type": "array",
     "items": {
      "type": "string",
      "maxLength": 254
     },
     "maxItems": 50
    },
    "observed_at": {
     "type": "string",
     "maxLength": 40
    }
   },
   "additionalProperties": false
  }
 }
}
```

## More

- Live health (JSON, refreshed every minute): https://www.zero.xyz/c/domain-intel-whois-dns-tls-mail-policy-subdomains-via-x402-825cc314/health.json
- [Zero catalog index](https://www.zero.xyz/llms.txt)
- [Other services from dns.halowerk.com](https://www.zero.xyz/host/dns.halowerk.com/llms.txt)