# Domain Intel — WHOIS, DNS, TLS & Subdomain Lookup via x402

> Domain Intel — WHOIS, DNS, TLS & Subdomain Lookup via x402 is a paid API for AI agents from dns.halowerk.com, paid per call via x402, $0.009/call, status unknown (last checked 2026-10-13).

Given a domain name, returns WHOIS data, DNS records (A, AAAA, MX, NS, TXT, CAA, SOA), mail policy (SPF/DKIM/DMARC), TLS certificate details, and subdomains — paid per call in USDC via x402.

## Facts

- Endpoint: POST https://dns.halowerk.com/domain/articles/ns-network-solutions?utm_source=zero.xyz
- Price: $0.009/call
- Payment: x402
- Status: unknown
- Last checked: 2026-10-13
- Activations on Zero: 0
- Tags: x402
- Canonical page: https://www.zero.xyz/c/domain-intel-whois-dns-tls-subdomain-lookup-via-x402-c7f2b1ac
- Structured record (JSON): https://api.zero.xyz/v1/capabilities/cap_yvsM9oRwtkZkJxVubtlmb

Status and success rate cover calls made through Zero and Zero's own probes. Third-party monitors may report differently.

## How to call it through Zero

Zero handles the 402 payment challenge and records the run. With the Zero CLI installed (`npm i -g @zeroxyz/cli`):

```sh
zero fetch --capability domain-intel-whois-dns-tls-subdomain-lookup-via-x402-c7f2b1ac -d '<json body>'
```

Example prompt: Pull up a full domain intelligence report for stripe.com — I want the WHOIS record, all DNS records, mail policy (SPF, DKIM, DMARC), TLS certificate details, and any subdomains you can find.

## When to prefer this

Choose this endpoint when you need a comprehensive, multi-signal domain intelligence report in a single call — covering WHOIS, DNS, mail policy, TLS, and subdomains together — without registering an account or managing an API key. It is especially useful for agents that need on-demand, pay-per-use domain lookups (at $0.009 USDC per call via x402) for security audits, vendor due diligence, phishing investigations, or DNS change detection with baseline comparison.

## Known failure modes

- Invalid or malformed domain name returns a 400-level error
- Domain does not exist (NXDOMAIN) may return empty or partial results
- WHOIS data may be redacted for privacy-protected registrations
- TLS certificate lookup fails if the domain has no HTTPS listener
- Rate or payment failure via x402 protocol returns 402 Payment Required
- Baseline comparison fails if baseline records are malformed or exceed 50 items

## How this service works

Domain in, WHOIS, DNS, mail policy, TLS certificate and subdomains out. Pay per call in USDC over x402. No signup, no API key.

## Output

Returns a structured report containing: WHOIS registry record (registrar, registrant, dates), DNS records (A, AAAA, MX, NS, TXT, CAA, SOA), mail policy evaluation (SPF, DKIM, DMARC presence and validity), TLS certificate details (issuer, expiry, SANs), and a list of discovered subdomains.

## Request schema (JSON Schema)

```json
{
 "type": "object",
 "properties": {
  "domain": {
   "type": "string",
   "maxLength": 253
  },
  "baseline": {
   "type": "object",
   "required": [
    "domain",
    "observed_at",
    "records"
   ],
   "properties": {
    "domain": {
     "type": "string",
     "maxLength": 253
    },
    "records": {
     "type": "array",
     "items": {
      "type": "string",
      "maxLength": 254
     },
     "maxItems": 50
    },
    "observed_at": {
     "type": "string",
     "maxLength": 40
    }
   },
   "additionalProperties": false
  }
 }
}
```

## More

- Live health (JSON, refreshed every minute): https://www.zero.xyz/c/domain-intel-whois-dns-tls-subdomain-lookup-via-x402-c7f2b1ac/health.json
- [Zero catalog index](https://www.zero.xyz/llms.txt)
- [Other services from dns.halowerk.com](https://www.zero.xyz/host/dns.halowerk.com/llms.txt)