# Domain Intel — WHOIS, DNS, TLS & Subdomain Lookup via x402

> Domain Intel — WHOIS, DNS, TLS & Subdomain Lookup via x402 is a paid API for AI agents from dns.halowerk.com, paid per call via x402, $0.009/call, status unknown (last checked 2026-10-12).

Given a domain name, returns WHOIS registration data, full DNS records, mail policy (SPF/DKIM/DMARC), TLS certificate details, and subdomain enumeration — paid per call in USDC over x402 with no signup required.

## Facts

- Endpoint: POST https://dns.halowerk.com/domain/articles/mx-united-domains?utm_source=zero.xyz
- Price: $0.009/call
- Payment: x402
- Status: unknown
- Last checked: 2026-10-12
- Activations on Zero: 0
- Tags: x402
- Canonical page: https://www.zero.xyz/c/domain-intel-whois-dns-tls-subdomain-lookup-via-x402-cde5ccbb
- Structured record (JSON): https://api.zero.xyz/v1/capabilities/cap_WA4y3WZCXmWBOzkuJoijx

Status and success rate cover calls made through Zero and Zero's own probes. Third-party monitors may report differently.

## How to call it through Zero

Zero handles the 402 payment challenge and records the run. With the Zero CLI installed (`npm i -g @zeroxyz/cli`):

```sh
zero fetch --capability domain-intel-whois-dns-tls-subdomain-lookup-via-x402-cde5ccbb -d '<json body>'
```

Example prompt: Can you pull up the full domain intelligence report for stripe.com — WHOIS, DNS records, mail policy, TLS certificate, and any subdomains you can find?

## When to prefer this

Choose this endpoint when you need a comprehensive, multi-faceted domain intelligence report in a single call — covering WHOIS, DNS, mail policy, TLS, and subdomains simultaneously — without any registration, API key, or subscription. Ideal for agents that need one-off or low-frequency domain investigations and can pay per call in USDC via x402. Prefer this over raw DNS resolvers when you need ownership data (WHOIS) and security posture (mail policy, TLS) alongside DNS records in one response.

## Known failure modes

- Domain not found or invalid — malformed domain string exceeding 253 characters or non-existent TLD returns an error
- WHOIS throttling — some registries rate-limit WHOIS queries, resulting in partial or missing registration data
- TLS lookup failure — if the domain has no HTTPS service, certificate data will be absent
- Subdomain enumeration may be incomplete — passive enumeration only, does not guarantee full coverage
- Payment failure — x402 USDC payment not accepted results in 402 response with no data returned
- Baseline mismatch validation only covers MX records, not full DNS diff

## How this service works

Domain in, WHOIS, DNS, mail policy, TLS certificate and subdomains out. Pay per call in USDC over x402. No signup, no API key.

## Output

Returns a structured report containing: WHOIS registration data (registrar, registrant, expiry dates), all DNS record types (A, AAAA, MX, NS, TXT, CAA, SOA), email authentication policies (SPF, DKIM, DMARC), TLS certificate metadata (issuer, validity, SANs), and discovered subdomains. If a baseline is provided, drift from observed MX records is flagged.

## Request schema (JSON Schema)

```json
{
 "type": "object",
 "properties": {
  "domain": {
   "type": "string",
   "maxLength": 253
  },
  "baseline": {
   "type": "object",
   "required": [
    "domain",
    "observed_at",
    "records"
   ],
   "properties": {
    "domain": {
     "type": "string",
     "maxLength": 253
    },
    "records": {
     "type": "array",
     "items": {
      "type": "object",
      "required": [
       "exchange",
       "priority"
      ],
      "properties": {
       "exchange": {
        "type": "string",
        "maxLength": 254
       },
       "priority": {
        "type": "integer",
        "maximum": 65535,
        "minimum": 0
       }
      },
      "additionalProperties": false
     },
     "maxItems": 50
    },
    "observed_at": {
     "type": "string",
     "maxLength": 40
    }
   },
   "additionalProperties": false
  }
 }
}
```

## More

- Live health (JSON, refreshed every minute): https://www.zero.xyz/c/domain-intel-whois-dns-tls-subdomain-lookup-via-x402-cde5ccbb/health.json
- [Zero catalog index](https://www.zero.xyz/llms.txt)
- [Other services from dns.halowerk.com](https://www.zero.xyz/host/dns.halowerk.com/llms.txt)
