# Domain Intel — WHOIS, DNS, TLS & Subdomain Lookup via x402

> Domain Intel — WHOIS, DNS, TLS & Subdomain Lookup via x402 is a paid API for AI agents from dns.halowerk.com, paid per call via x402, $0.009/call, status unknown (last checked 2026-10-13).

Given a domain name, returns WHOIS registration data, DNS records, mail policy (SPF/DKIM/DMARC), TLS certificate details, and subdomain enumeration — billed per call in USDC over the x402 protocol.

## Facts

- Endpoint: POST https://dns.halowerk.com/domain/articles/ns-enom?utm_source=zero.xyz
- Price: $0.009/call
- Payment: x402
- Status: unknown
- Last checked: 2026-10-13
- Activations on Zero: 0
- Tags: x402
- Canonical page: https://www.zero.xyz/c/domain-intel-whois-dns-tls-subdomain-lookup-via-x402-17ed4dd6
- Structured record (JSON): https://api.zero.xyz/v1/capabilities/cap_v5mrXEYx0aDC1BAon6OxG

Status and success rate cover calls made through Zero and Zero's own probes. Third-party monitors may report differently.

## How to call it through Zero

Zero handles the 402 payment challenge and records the run. With the Zero CLI installed (`npm i -g @zeroxyz/cli`):

```sh
zero fetch --capability domain-intel-whois-dns-tls-subdomain-lookup-via-x402-17ed4dd6 -d '<json body>'
```

Example prompt: Pull full domain intelligence on stripe.com — I need WHOIS registration details, all DNS records, SPF/DKIM/DMARC mail policies, the TLS certificate, and any subdomains you can find, no signup needed.

## When to prefer this

Choose this endpoint when you need a single, no-signup, pay-per-call call that bundles WHOIS, DNS, mail policy, TLS, and subdomains together for one domain — especially useful in agent workflows where spinning up API keys is impractical. Prefer it over dedicated WHOIS or DNS tools when you want all domain intelligence signals in one response. The optional baseline parameter makes it uniquely suited for change-detection workflows comparing current state against a previously observed snapshot.

## Known failure modes

- Domain not found or NXDOMAIN — returns empty or error for non-existent domains
- WHOIS privacy shielding may result in redacted registrant data
- TLS certificate absent if domain has no HTTPS endpoint
- Subdomain enumeration is limited and may miss passively-hidden subdomains
- Rate limiting or payment failure via x402 if USDC funds are insufficient
- Malformed domain input (exceeds 253 characters or invalid format) returns validation error

## How this service works

Domain in, WHOIS, DNS, mail policy, TLS certificate and subdomains out. Pay per call in USDC over x402. No signup, no API key.

## Output

A structured response containing: WHOIS registration data (registrar, registrant, expiry dates), full DNS records (A, AAAA, MX, NS, TXT, CNAME etc.), mail policy records (SPF, DKIM, DMARC), TLS certificate metadata (issuer, validity, SANs), and a list of discovered subdomains — all for the queried domain.

## Request schema (JSON Schema)

```json
{
 "type": "object",
 "properties": {
  "domain": {
   "type": "string",
   "maxLength": 253
  },
  "baseline": {
   "type": "object",
   "required": [
    "domain",
    "observed_at",
    "records"
   ],
   "properties": {
    "domain": {
     "type": "string",
     "maxLength": 253
    },
    "records": {
     "type": "array",
     "items": {
      "type": "string",
      "maxLength": 254
     },
     "maxItems": 50
    },
    "observed_at": {
     "type": "string",
     "maxLength": 40
    }
   },
   "additionalProperties": false
  }
 }
}
```

## More

- Live health (JSON, refreshed every minute): https://www.zero.xyz/c/domain-intel-whois-dns-tls-subdomain-lookup-via-x402-17ed4dd6/health.json
- [Zero catalog index](https://www.zero.xyz/llms.txt)
- [Other services from dns.halowerk.com](https://www.zero.xyz/host/dns.halowerk.com/llms.txt)