# Domain Intel — WHOIS, DNS, TLS & Subdomain Lookup (x402)

> Domain Intel — WHOIS, DNS, TLS & Subdomain Lookup (x402) is a paid API for AI agents from dns.halowerk.com, paid per call via x402, $0.009/call, status unknown (last checked 2026-10-13).

Given a domain name, returns WHOIS registration data, DNS records, mail policy (SPF/DKIM/DMARC), TLS certificate details, and discovered subdomains — paid per call in USDC via x402.

## Facts

- Endpoint: POST https://dns.halowerk.com/domain/articles/ns-key-systems?utm_source=zero.xyz
- Price: $0.009/call
- Payment: x402
- Status: unknown
- Last checked: 2026-10-13
- Activations on Zero: 0
- Tags: x402
- Canonical page: https://www.zero.xyz/c/domain-intel-whois-dns-tls-subdomain-lookup-x402-88a6b285
- Structured record (JSON): https://api.zero.xyz/v1/capabilities/cap_H3CBfJqQlrhxSlmP-F8eZ

Status and success rate cover calls made through Zero and Zero's own probes. Third-party monitors may report differently.

## How to call it through Zero

Zero handles the 402 payment challenge and records the run. With the Zero CLI installed (`npm i -g @zeroxyz/cli`):

```sh
zero fetch --capability domain-intel-whois-dns-tls-subdomain-lookup-x402-88a6b285 -d '<json body>'
```

Example prompt: Pull a full domain intelligence report for stripe.com — I need the WHOIS registration info, all DNS records, mail policy settings, TLS certificate details, and any subdomains you can find.

## When to prefer this

Choose this endpoint when you need comprehensive, multi-signal domain intelligence in a single call — WHOIS + DNS + mail policy + TLS + subdomains — without needing an API key or subscription. It is ideal for pay-as-you-go agent workflows where domain lookups are infrequent or one-off. Prefer it over dedicated WHOIS-only or DNS-only services when you want consolidated output and optional delta comparison against a stored baseline snapshot.

## Known failure modes

- Invalid or non-existent domain returns an error or empty result set
- Rate limiting or payment failure via x402 prevents the call from completing
- Firewall or DNS propagation delays may cause incomplete DNS record retrieval
- WHOIS privacy protection may redact registrant contact details
- TLS certificate lookup may fail for domains without HTTPS
- Baseline comparison fails if baseline object schema is malformed or observed_at is unparseable

## How this service works

Domain in, WHOIS, DNS, mail policy, TLS certificate and subdomains out. Pay per call in USDC over x402. No signup, no API key.

## Output

Returns a structured object containing WHOIS registration details (registrar, dates, contacts), full DNS record set (A, MX, CNAME, TXT, NS, etc.), mail policy analysis (SPF, DKIM, DMARC presence and validity), TLS certificate metadata (issuer, validity dates, SANs), and an enumerated list of discovered subdomains.

## Request schema (JSON Schema)

```json
{
 "type": "object",
 "properties": {
  "domain": {
   "type": "string",
   "maxLength": 253
  },
  "baseline": {
   "type": "object",
   "required": [
    "domain",
    "observed_at",
    "records"
   ],
   "properties": {
    "domain": {
     "type": "string",
     "maxLength": 253
    },
    "records": {
     "type": "array",
     "items": {
      "type": "string",
      "maxLength": 254
     },
     "maxItems": 50
    },
    "observed_at": {
     "type": "string",
     "maxLength": 40
    }
   },
   "additionalProperties": false
  }
 }
}
```

## More

- Live health (JSON, refreshed every minute): https://www.zero.xyz/c/domain-intel-whois-dns-tls-subdomain-lookup-x402-88a6b285/health.json
- [Zero catalog index](https://www.zero.xyz/llms.txt)
- [Other services from dns.halowerk.com](https://www.zero.xyz/host/dns.halowerk.com/llms.txt)