# Domain Intel — WHOIS, DNS, TLS & Subdomain Lookup via x402

> Domain Intel — WHOIS, DNS, TLS & Subdomain Lookup via x402 is a paid API for AI agents from dns.halowerk.com, paid per call via x402, $0.009/call, status unknown (last checked 2026-10-13).

Accepts a domain name and returns comprehensive intelligence including WHOIS data, DNS records, mail policy (SPF/DKIM/DMARC), TLS certificate details, and subdomains, paid per call in USDC via x402.

## Facts

- Endpoint: POST https://dns.halowerk.com/domain/articles/ns-variomedia?utm_source=zero.xyz
- Price: $0.009/call
- Payment: x402
- Status: unknown
- Last checked: 2026-10-13
- Activations on Zero: 0
- Tags: x402
- Canonical page: https://www.zero.xyz/c/domain-intel-whois-dns-tls-subdomain-lookup-via-x402-9b29add1
- Structured record (JSON): https://api.zero.xyz/v1/capabilities/cap_4vTxwaa-2Eo0XCk1XuwfY

Status and success rate cover calls made through Zero and Zero's own probes. Third-party monitors may report differently.

## How to call it through Zero

Zero handles the 402 payment challenge and records the run. With the Zero CLI installed (`npm i -g @zeroxyz/cli`):

```sh
zero fetch --capability domain-intel-whois-dns-tls-subdomain-lookup-via-x402-9b29add1 -d '<json body>'
```

Example prompt: Can you pull a full domain intelligence report on stripe.com — I need the WHOIS registration details, DNS records, SPF/DMARC mail policy, TLS certificate info, and any subdomains you can find?

## When to prefer this

Choose this endpoint when you need a comprehensive, multi-signal domain intelligence report in a single call without API key registration — ideal for ad-hoc security investigations, one-off domain audits, or agentic workflows requiring pay-as-you-go access. Prefer it over traditional WHOIS-only tools when you also need DNS, TLS, and mail policy data in one response.

## Known failure modes

- Invalid or malformed domain name returns a validation error
- Domain does not exist (NXDOMAIN) may return empty or partial results
- Payment failure via x402 prevents the call from executing
- Rate limiting or upstream DNS/WHOIS provider outages may cause timeouts
- Private WHOIS registrations return redacted registrant details
- TLS data unavailable for domains not serving HTTPS

## How this service works

Domain in, WHOIS, DNS, mail policy, TLS certificate and subdomains out. Pay per call in USDC over x402. No signup, no API key.

## Output

Returns a structured report containing WHOIS registration data (registrar, registrant, dates), full DNS record set (A, MX, NS, TXT, etc.), mail policy evaluation (SPF, DKIM, DMARC), TLS certificate details (issuer, validity, SANs), and a list of discovered subdomains for the queried domain.

## Request schema (JSON Schema)

```json
{
 "type": "object",
 "properties": {
  "domain": {
   "type": "string",
   "maxLength": 253
  },
  "baseline": {
   "type": "object",
   "required": [
    "domain",
    "observed_at",
    "records"
   ],
   "properties": {
    "domain": {
     "type": "string",
     "maxLength": 253
    },
    "records": {
     "type": "array",
     "items": {
      "type": "string",
      "maxLength": 254
     },
     "maxItems": 50
    },
    "observed_at": {
     "type": "string",
     "maxLength": 40
    }
   },
   "additionalProperties": false
  }
 }
}
```

## More

- Live health (JSON, refreshed every minute): https://www.zero.xyz/c/domain-intel-whois-dns-tls-subdomain-lookup-via-x402-9b29add1/health.json
- [Zero catalog index](https://www.zero.xyz/llms.txt)
- [Other services from dns.halowerk.com](https://www.zero.xyz/host/dns.halowerk.com/llms.txt)