{"uid":"cap_Vi2aHpkmkq0TQqZZWPQVH","slug":"domain-intel-whois-dns-tls-subdomain-lookup-x402-6d7e0b42","name":"Domain Intel – WHOIS, DNS, TLS & Subdomain Lookup (x402)","description":"Domain in, WHOIS, DNS, mail policy, TLS certificate and subdomains out. Pay per call in USDC over x402. No signup, no API key.","url":"https://dns.halowerk.com/domain/articles/ns-aws-route-53?utm_source=zero.xyz","method":"POST","headers":{},"bodySchema":{"type":"object","properties":{"domain":{"type":"string","maxLength":253},"baseline":{"type":"object","required":["domain","observed_at","records"],"properties":{"domain":{"type":"string","maxLength":253},"records":{"type":"array","items":{"type":"string","maxLength":254},"maxItems":50},"observed_at":{"type":"string","maxLength":40}},"additionalProperties":false}}},"responseSchema":null,"example":null,"exampleRequest":null,"tags":["x402"],"displayCostAmount":"0.009","displayCostAsset":"USDC","priceDynamic":false,"priceHint":null,"priceStatus":"priced","priceSource":"probe","requiresHandshake":false,"reviewCount":0,"rating":{"score":"0.00","successRate":"0.00","reviews":0,"stars":null,"state":"unrated"},"availabilityStatus":"unknown","priceObserved":null,"sessionDeposit":null,"pricing":{"kind":"static","summary":"$0.009/call","primary":{"kind":"static","protocol":"x402","network":"base","amountUsd":"0.009","per":"call","confidence":"exact"},"accepted":[{"kind":"static","protocol":"x402","network":"base","amountUsd":"0.009","per":"call","confidence":"exact"}]},"paymentMethods":[{"uid":"pm_46tOlbXSMw-d705mCmcEO","protocol":"x402","methodType":"crypto","chain":"base","mode":"charge","costAmount":"0.009","costPer":"request","priority":0,"asset":"0x833589fCD6eDb6E08f4c7C32D4f71b54bdA02913","unit":"request","depositMicros":null,"planRef":null}],"brandName":null,"brandSlug":null,"brandBaseUrl":null,"brandDocsUrl":null,"whatItDoes":"Given a domain name, returns WHOIS registration data, DNS records, mail policy (SPF/DKIM/DMARC), TLS certificate details, and subdomains — paid per call in USDC via x402.","exampleAgentPrompt":"Pull a full domain intelligence report for stripe.com — I need WHOIS registration info, all DNS records, SPF/DMARC mail policy, TLS certificate details, and any subdomains you can find.","exampleUseCases":[{"title":"Investigate suspicious domain before clicking","prompt":"I got an email from paypa1-secure.com — can you look up everything you know about that domain: who registered it, what DNS records it has, whether it has a valid TLS cert, and any subdomains?"},{"title":"Audit competitor mail security posture","prompt":"Check the DNS and mail policy configuration for acme-corp.com — I want to see their SPF, DKIM, and DMARC records to understand how locked down their email security is."},{"title":"Detect DNS drift against known baseline","prompt":"I have a snapshot of the DNS records for mycompany.io from last week. Can you fetch the current DNS and compare it against that baseline to flag any changes?"}],"resultDescription":"Returns a structured report containing: WHOIS registration details (registrar, dates, contacts), full DNS record set (A, AAAA, MX, NS, TXT, CNAME, etc.), mail policy records (SPF, DKIM, DMARC), TLS certificate metadata (issuer, validity, SANs), and a list of discovered subdomains.","failureModes":["Domain not found or unregistered — partial or empty WHOIS/DNS data returned","Invalid domain format — rejected with input validation error","Payment not settled via x402 — 402 response requiring USDC payment","Rate limiting or upstream WHOIS provider throttling — delayed or incomplete response","TLS certificate absent or expired — certificate section returns null or error state","Baseline schema mismatch — comparison fails if baseline records array is malformed"],"whenToPreferThis":"Choose this endpoint when you need a comprehensive, multi-faceted domain profile in a single call — covering WHOIS, DNS, mail policy, TLS, and subdomains simultaneously — without needing an API key or subscription. Ideal for ad-hoc security investigations, one-off domain audits, or agent workflows where signup friction is unacceptable. If you only need a single record type (e.g. a raw DNS query), a free public DNS-over-HTTPS resolver may be more appropriate.","instructions":null,"reviewSummary":null,"reviewSummaryHighlights":null,"reviewSummaryConcerns":null,"reviewSummaryGeneratedAt":null,"activationCount":0,"lastUsedAt":null,"lastSuccessfullyRanAt":null,"lastHealthCheckAt":"2026-10-13T00:41:32.561Z","isFirstParty":false,"canonicalSlug":"domain-intel-whois-dns-tls-subdomain-lookup-x402-6d7e0b42"}