Domain intelligence
6 endpointsLead GenDataWeb ToolsWhat a domain reveals: registration age and registrar, DNS and email platform, subdomains from certificate logs, and its history in the Wayback Machine.
From RDAP domain registry, DNS lookup, Wayback Machine, crt.sh.
/domainWhen a domain was registered and when it expires, who the registrar is, its status flags and nameservers. Use it to age a company, spot a parked or recently registered domain, or see which registrar and DNS host they use.
/lookupResolve one record type for a hostname: A, AAAA, MX, TXT, NS, CNAME, SOA, CAA or SRV. TXT on the bare domain shows SPF and verification records (google-site-verification, MS, Stripe, HubSpot…); TXT on _dmarc.<domain> shows the DMARC policy.
/email-providerWhich platform handles a domain's email (Google Workspace, Microsoft 365, Proofpoint, Zoho…) from its MX records, plus whether the domain can receive mail at all. Cheap qualification before verifying addresses.
/first-seenThe earliest Wayback Machine capture of a URL: date and a link to that snapshot. A quick proxy for how long a company has existed. Returns a provider error (no charge) when the URL was never archived.
/snapshotsArchived captures of a URL between two dates, one per day at most, each with a link to view it. Use it to see how a pricing or product page changed over time.
/subdomainsEvery hostname under a domain that has appeared in a public TLS certificate, deduplicated and sorted. Shows a company's products, environments and tools (app, api, docs, status, jobs, careers, shop…). Certificates that expired are skipped unless include_expired is true.