{"uid":"cap_Pnr76y8_8meOgg4qasxtL","slug":"domain-intel-whois-dns-mail-policy-tls-subdomains-96c217da","name":"Domain Intel – WHOIS, DNS, Mail Policy, TLS & Subdomains","description":"Requires an unauthenticated caller-owned baseline; returns real current NS/MX records, added/removed sets and tri-state target-provider transition. Current DNS comes from one bounded native recursive-resolver query; existing Dossier provides context. Resolver caching may apply; no account ownership or global migration-completion claim. Existing provider patterns are reused without new invented attribution. At most50records,domain253chars,9sbudget; DNSsubquery2s/oneattempt. Unknown provider remai","url":"https://dns.halowerk.com/domain/articles/ns-ionos?utm_source=zero.xyz","method":"POST","headers":{},"bodySchema":{"type":"object","properties":{"domain":{"type":"string","maxLength":253},"baseline":{"type":"object","required":["domain","observed_at","records"],"properties":{"domain":{"type":"string","maxLength":253},"records":{"type":"array","items":{"type":"string","maxLength":254},"maxItems":50},"observed_at":{"type":"string","maxLength":40}},"additionalProperties":false}}},"responseSchema":null,"example":null,"exampleRequest":null,"tags":["x402"],"displayCostAmount":"0.009","displayCostAsset":"USDC","priceDynamic":false,"priceHint":null,"priceStatus":"priced","priceSource":"probe","requiresHandshake":false,"reviewCount":0,"rating":{"score":"0.00","successRate":"0.00","reviews":0,"stars":null,"state":"unrated"},"availabilityStatus":"unknown","priceObserved":null,"sessionDeposit":null,"pricing":{"kind":"static","summary":"$0.009/call","primary":{"kind":"static","protocol":"x402","network":"base","amountUsd":"0.009","per":"call","confidence":"exact"},"accepted":[{"kind":"static","protocol":"x402","network":"base","amountUsd":"0.009","per":"call","confidence":"exact"}]},"paymentMethods":[{"uid":"pm_MtYO_KYfo0vNNQsP6b1CK","protocol":"x402","methodType":"crypto","chain":"base","mode":"charge","costAmount":"0.009","costPer":"request","priority":0,"asset":"0x833589fCD6eDb6E08f4c7C32D4f71b54bdA02913","unit":"request","depositMicros":null,"planRef":null}],"brandName":null,"brandSlug":null,"brandBaseUrl":null,"brandDocsUrl":null,"whatItDoes":"Given a domain name, returns comprehensive intelligence including WHOIS registration data, DNS records, mail policy (SPF/DKIM/DMARC), TLS certificate details, and discovered subdomains.","exampleAgentPrompt":"Pull a full domain intelligence report for stripe.com — I need WHOIS registration details, all DNS records, mail security policies like SPF and DMARC, the TLS certificate info, and any subdomains you can find.","exampleUseCases":[{"title":"Vendor security due diligence check","prompt":"Before we onboard acme-vendor.io as a supplier, can you pull their domain intelligence — WHOIS ownership, DNS setup, whether they have proper SPF and DMARC policies, and what their TLS cert looks like?"},{"title":"Phishing domain investigation","prompt":"I got a suspicious email from support@paypa1-secure.com — can you look up that domain's WHOIS, DNS records, mail policy, and TLS cert to see if it looks like a spoofed phishing domain?"},{"title":"Monitor competitor infrastructure changes","prompt":"I want to check the current DNS records, nameservers, and subdomains for competitor.io against this baseline snapshot I took last month so I can see what's changed."}],"resultDescription":"Returns a structured payload containing: WHOIS registration data (registrar, registrant, creation/expiry dates), DNS records (A, AAAA, MX, NS, TXT, CNAME etc.), mail security policy evaluation (SPF, DKIM, DMARC), TLS certificate metadata (issuer, validity, SANs), and an enumerated list of subdomains discovered for the target domain.","failureModes":["Invalid or non-existent domain returns an error or empty result set","WHOIS data may be redacted for privacy-protected domains (GDPR shields)","Payment failure over x402 results in HTTP 402 with no data returned","Rate limits or upstream WHOIS throttling may cause partial results","Very new domains may have incomplete WHOIS or propagation gaps in DNS records","TLS certificate lookup may fail if domain has no HTTPS endpoint"],"whenToPreferThis":"Choose this endpoint when you need a comprehensive, all-in-one domain intelligence snapshot without signing up for an API key — especially useful for ad-hoc security investigations, vendor assessments, or DNS change monitoring. It covers WHOIS, DNS, mail policy, TLS, and subdomains in a single pay-per-call request at $0.009 USDC, making it cost-effective for infrequent or automated lookups. Prefer it over dedicated WHOIS-only or DNS-only tools when you need the full picture in one call.","instructions":null,"reviewSummary":null,"reviewSummaryHighlights":null,"reviewSummaryConcerns":null,"reviewSummaryGeneratedAt":null,"activationCount":0,"lastUsedAt":null,"lastSuccessfullyRanAt":null,"lastHealthCheckAt":"2026-10-12T18:44:18.116Z","isFirstParty":false,"canonicalSlug":"domain-intel-whois-dns-mail-policy-tls-subdomains-96c217da"}