docs / domain-intel

Domain Intelligence

Domain, DNS and WHOIS lookups.

base /domain-intel/v19 endpoints
post/domain-intel/v1/whois1 credit

registration/WHOIS via RDAP (registrar, dates, status, NS, DNSSEC)

ParameterAllowed / rangeDescription
domainrequiredThe domain to inspect (a bare host like github.com; a full URL or leading www. is accepted and normalized).
raw = falseoptionalIf true, also attach the raw upstream RDAP JSON under whois.raw_rdap.
include_pii = falseoptionalIf true, return the full WHOIS/RDAP registrant contact. Default false → personal data is dropped (GDPR), organization kept.
Try in playground →
post/domain-intel/v1/dns1 credit

DNS records (A/AAAA/MX/TXT/NS/CNAME/SOA/CAA)

ParameterAllowed / rangeDescription
domainrequiredThe domain to inspect (a bare host like github.com; a full URL or leading www. is accepted and normalized).
typesoptionalA · AAAA · MX · TXT · NS · CNAME · SOA · CAAWhich DNS record types to query (comma-separated string or array). Defaults to A,AAAA,MX,TXT,NS,CNAME,SOA,CAA. Other RR types are accepted and passed through to the resolver.
Try in playground →
post/domain-intel/v1/ssl_certs1 credit

SSL/TLS certificates from Certificate Transparency (CT) logs

ParameterAllowed / rangeDescription
domainrequiredThe domain to inspect (a bare host like github.com; a full URL or leading www. is accepted and normalized).
limit = 50optional1–Max certificates to return (newest first). Default 50.
deep = falseoptionalIf true, query the full crt.sh CT-log history (slower, deeper) instead of the fast certspotter source first.
Try in playground →
post/domain-intel/v1/subdomains1 credit

subdomain discovery via CT-log cert SANs

ParameterAllowed / rangeDescription
domainrequiredThe domain to inspect (a bare host like github.com; a full URL or leading www. is accepted and normalized).
deep = falseoptionalIf true, query the full crt.sh CT-log history (slower, deeper) instead of the fast certspotter source first.
Try in playground →
post/domain-intel/v1/availability1 credit

domain registration availability via RDAP

ParameterAllowed / rangeDescription
domainrequiredThe domain to inspect (a bare host like github.com; a full URL or leading www. is accepted and normalized).
Try in playground →
post/domain-intel/v1/tld_listfree

IANA TLD list (optionally filtered)

ParameterAllowed / rangeDescription
searchoptionalCase-insensitive substring filter over the IANA TLD list (e.g. 'shop' → shop, eshop, bargains…).
limitoptional1–Max TLDs to return (0/unset = all ~1500).
Try in playground →
post/domain-intel/v1/tld_detailfree

TLD metadata + RDAP server (IANA bootstrap)

ParameterAllowed / rangeDescription
tldrequiredA top-level domain, with or without a leading dot (e.g. com, io, co.uk). Returns its type + IANA RDAP server(s).
Try in playground →
post/domain-intel/v1/tech_detect1 credit

tech-stack fingerprint via response headers/HTML

ParameterAllowed / rangeDescription
domainrequiredThe domain to inspect (a bare host like github.com; a full URL or leading www. is accepted and normalized).
Try in playground →
post/domain-intel/v1/full_report3 credits

merged whois+dns+ssl_certs+subdomains (one call)

ParameterAllowed / rangeDescription
domainrequiredThe domain to inspect (a bare host like github.com; a full URL or leading www. is accepted and normalized).
include_tech = falseoptionalIf true, also run the tech-stack fingerprint as part of full_report.
include_pii = falseoptionalIf true, return the full WHOIS/RDAP registrant contact. Default false → personal data is dropped (GDPR), organization kept.
deep = falseoptionalIf true, query the full crt.sh CT-log history (slower, deeper) instead of the fast certspotter source first.
Try in playground →