# Halowerk Domain Intel — NS Zone Media Lookup

> Halowerk Domain Intel — NS Zone Media Lookup is a paid API for AI agents from dns.halowerk.com, paid per call via x402, $0.009/call, status unknown (last checked 2026-10-13).

Returns WHOIS, DNS records, mail policy (SPF/DKIM/DMARC), TLS certificate, and subdomain data for a given domain, paid per-call in USDC via x402.

## Facts

- Endpoint: POST https://dns.halowerk.com/domain/articles/ns-zone-media?utm_source=zero.xyz
- Price: $0.009/call
- Payment: x402
- Status: unknown
- Last checked: 2026-10-13
- Activations on Zero: 0
- Tags: x402
- Canonical page: https://www.zero.xyz/c/halowerk-domain-intel-ns-zone-media-lookup-7a7355fa
- Structured record (JSON): https://api.zero.xyz/v1/capabilities/cap_UNF43wPxRrBCH1MUSInpg

Status and success rate cover calls made through Zero and Zero's own probes. Third-party monitors may report differently.

## How to call it through Zero

Zero handles the 402 payment challenge and records the run. With the Zero CLI installed (`npm i -g @zeroxyz/cli`):

```sh
zero fetch --capability halowerk-domain-intel-ns-zone-media-lookup-7a7355fa -d '<json body>'
```

Example prompt: Pull full domain intelligence on stripe.com — I need WHOIS, all DNS records, SPF/DKIM/DMARC mail policy, TLS certificate info, and any subdomains you can find.

## When to prefer this

Choose this endpoint when you need comprehensive domain intelligence — WHOIS, DNS, mail security policy, TLS, and subdomains — in a single pay-per-call request with no API key or signup required. It is ideal for one-off or low-frequency lookups where setting up a subscription-based DNS/WHOIS service is overkill, or for AI agents operating autonomously with USDC payment capability via x402. Prefer alternatives if you need very high-volume batch lookups or real-time streaming DNS monitoring.

## Known failure modes

- Domain not found or unresolvable — returns empty or error result
- Invalid domain format exceeding 253 characters — schema validation error
- WHOIS data unavailable for privacy-protected or ccTLD domains
- TLS certificate absent if domain has no HTTPS endpoint
- Rate limiting or payment failure via x402 protocol
- Baseline object malformed (missing required domain, observed_at, or records fields)

## How this service works

Domain in, WHOIS, DNS, mail policy, TLS certificate and subdomains out. Pay per call in USDC over x402. No signup, no API key.

## Output

A structured response containing: WHOIS registration data (registrar, registrant, dates), full DNS record set (A, MX, NS, TXT, CNAME, etc.), mail policy records (SPF, DKIM, DMARC), TLS certificate metadata (issuer, validity, SANs), and enumerated subdomains for the queried domain.

## Request schema (JSON Schema)

```json
{
 "type": "object",
 "properties": {
  "domain": {
   "type": "string",
   "maxLength": 253
  },
  "baseline": {
   "type": "object",
   "required": [
    "domain",
    "observed_at",
    "records"
   ],
   "properties": {
    "domain": {
     "type": "string",
     "maxLength": 253
    },
    "records": {
     "type": "array",
     "items": {
      "type": "string",
      "maxLength": 254
     },
     "maxItems": 50
    },
    "observed_at": {
     "type": "string",
     "maxLength": 40
    }
   },
   "additionalProperties": false
  }
 }
}
```

## More

- Live health (JSON, refreshed every minute): https://www.zero.xyz/c/halowerk-domain-intel-ns-zone-media-lookup-7a7355fa/health.json
- [Zero catalog index](https://www.zero.xyz/llms.txt)
- [Other services from dns.halowerk.com](https://www.zero.xyz/host/dns.halowerk.com/llms.txt)