Domain Intelligence

DNS records for a domain: A, AAAA, MX, TXT, NS, CAA and SOA, resolved in parallel.

Full report on a domain in one call: WHOIS/RDAP registration, DNS records, live SSL certificate, subdomains (live hosts with IPs first) and email authentication (SPF, DMARC, DKIM). Use it to triage a suspicious domain or profile a company's domain. If one section fails it comes back as an object with an `error` field and the rest is unaffected. Set wait=true to wait for every subdomain source (up to about 20 s) instead of the fast first result.

Email authentication for a domain: SPF and DMARC records, and DKIM keys found by probing about 29 common selectors (Google, Microsoft 365, Mailchimp, SendGrid and others). Custom selectors may not be found.

The certificate a domain serves on port 443, from a live TLS handshake: issuer, subject, valid_from, valid_to, days_until_expiry, SANs, signature algorithm and serial number.

Subdomains of a domain from certificate transparency logs, passive DNS and DNS brute force. `live` lists hosts that resolve now, each with its IP; `subdomains` lists every name found, live first; `pools` summarises large shared-infrastructure zones. The first lookup of a domain is a fast snapshot and later ones are fuller; set wait=true to wait for every source (up to about 20 s).

Registration data for a domain: registrar, created, updated and expiry dates, nameservers and status. RDAP first (rdap.org, IANA bootstrap, 22 fallback servers), then port-43 WHOIS for 60+ TLDs. `_source` says which one answered. Use it for domain age, expiry or registrar checks.