{"uid":"cap_VwqLeFwrDCy4OXfUoGi12","slug":"halowerk-domain-intel-whois-dns-tls-subdomain-lookup-10ccd81a","name":"Halowerk Domain Intel — WHOIS, DNS, TLS & Subdomain Lookup","description":"Domain in, WHOIS, DNS, mail policy, TLS certificate and subdomains out. Pay per call in USDC over x402. No signup, no API key.","url":"https://dns.halowerk.com/domain/articles/ns-opensrs?utm_source=zero.xyz","method":"POST","headers":{},"bodySchema":{"type":"object","properties":{"domain":{"type":"string","maxLength":253},"baseline":{"type":"object","required":["domain","observed_at","records"],"properties":{"domain":{"type":"string","maxLength":253},"records":{"type":"array","items":{"type":"string","maxLength":254},"maxItems":50},"observed_at":{"type":"string","maxLength":40}},"additionalProperties":false}}},"responseSchema":null,"example":null,"exampleRequest":null,"tags":["x402"],"displayCostAmount":"0.009","displayCostAsset":"USDC","priceDynamic":false,"priceHint":null,"priceStatus":"priced","priceSource":"probe","requiresHandshake":false,"reviewCount":0,"rating":{"score":"0.00","successRate":"0.00","reviews":0,"stars":null,"state":"unrated"},"availabilityStatus":"unknown","priceObserved":null,"sessionDeposit":null,"pricing":{"kind":"static","summary":"$0.009/call","primary":{"kind":"static","protocol":"x402","network":"base","amountUsd":"0.009","per":"call","confidence":"exact"},"accepted":[{"kind":"static","protocol":"x402","network":"base","amountUsd":"0.009","per":"call","confidence":"exact"}]},"paymentMethods":[{"uid":"pm_S7DnX5WKHKbnkMN4-i0Jz","protocol":"x402","methodType":"crypto","chain":"base","mode":"charge","costAmount":"0.009","costPer":"request","priority":0,"asset":"0x833589fCD6eDb6E08f4c7C32D4f71b54bdA02913","unit":"request","depositMicros":null,"planRef":null}],"brandName":null,"brandSlug":null,"brandBaseUrl":null,"brandDocsUrl":null,"whatItDoes":"Given a domain name, returns WHOIS registration data, DNS records, mail policy (SPF/DKIM/DMARC), TLS certificate details, and subdomains — paid per call in USDC via x402.","exampleAgentPrompt":"Pull a full domain intelligence report for stripe.com — I need the WHOIS registration info, all DNS records, SPF/DMARC mail policy, TLS certificate details, and any subdomains you can find.","exampleUseCases":[{"title":"Suspicious domain threat investigation","prompt":"I just received an email from support@paypa1-secure.com — can you pull the full domain intel on paypa1-secure.com including WHOIS, DNS records, mail policy, and TLS cert so I can figure out if it's a phishing domain?"},{"title":"Email deliverability audit for a business","prompt":"Can you check the mail security configuration for acmecorp.io? I need to see whether they have SPF, DKIM, and DMARC set up properly, along with their MX records."},{"title":"DNS change detection against a baseline","prompt":"Last week I recorded the DNS records for competitor-site.com — here's the baseline. Can you run a fresh domain intel lookup on competitor-site.com and compare it against those records observed on 2025-06-01T00:00:00Z to see what's changed?"}],"resultDescription":"Returns a structured report for the queried domain containing: WHOIS registration details (registrar, registrant, creation/expiry dates), full DNS records (A, AAAA, MX, NS, TXT, CNAME, etc.), mail policy records (SPF, DKIM, DMARC), TLS/SSL certificate metadata (issuer, validity, SANs), and discovered subdomains. If a baseline snapshot is provided, the response may highlight changes relative to that prior state.","failureModes":["Domain not resolvable or does not exist — returns empty or error result","Invalid domain format exceeding 253 characters — schema validation error","WHOIS data unavailable due to privacy protection or registry restrictions — partial result","TLS certificate absent (non-HTTPS domain) — cert fields empty","Rate limiting or payment failure via x402 — HTTP 402 response requiring USDC payment","Subdomain enumeration may be incomplete for well-protected domains"],"whenToPreferThis":"Choose this endpoint when you need a comprehensive, multi-signal domain intelligence report in a single call without signing up for an API key. It is ideal for one-off or infrequent lookups (cybersecurity investigations, due diligence, email audit) where pay-per-call USDC pricing is preferable to a subscription. Prefer it over dedicated WHOIS-only or DNS-only tools when you need correlated output across WHOIS, DNS, mail policy, TLS, and subdomains simultaneously. The optional baseline parameter makes it useful for change detection workflows.","instructions":null,"reviewSummary":null,"reviewSummaryHighlights":null,"reviewSummaryConcerns":null,"reviewSummaryGeneratedAt":null,"activationCount":0,"lastUsedAt":null,"lastSuccessfullyRanAt":null,"lastHealthCheckAt":"2026-10-13T00:40:52.411Z","isFirstParty":false,"canonicalSlug":"halowerk-domain-intel-whois-dns-tls-subdomain-lookup-cea6fa9a"}