Built by Metorial, the integration platform for agentic AI.
Look up WHOIS registration data for an IP address or Autonomous System Number (ASN). For IPs, returns registration data, contact details, routes, and network information. For ASNs, returns ownership, network infrastructure, organization details, and associated IP ranges.
Retrieve one page of historical WHOIS records for a domain name, including registration changes, ownership transfers, and registrar updates over time. The response includes pagination metadata.
Search WHOIS records by owner name, email address, domain keyword, or company name. Useful for finding all domains associated with a specific registrant, organization, or contact email. Supports pagination and a mini mode that returns lighter results.
Discover related domains by pivoting on DNS infrastructure signals. Search by IP address, mail exchange server, nameserver, CNAME, or other DNS record values to find all domains that share the same infrastructure.
Retrieve live WHOIS registration data for one or more domain names. Returns structured ownership, registrar, contact, nameserver, and date information fetched in real-time from WHOIS servers. Supports bulk lookups of up to 100 domains per request.
Perform real-time DNS lookups for one or more domains. Supports all major DNS record types including A, AAAA, CNAME, MX, NS, TXT, SPF, PTR, and SOA. Use "all" to retrieve every record type at once. Supports bulk lookups of up to 100 domains.
Get geolocation and network intelligence data for one or more IP addresses. Returns country, region, city, ZIP code, coordinates, timezone, ISP, ASN, and organization info. Also detects VPN/proxy usage and threat indicators. Supports bulk lookups of up to 100 IPs.
Check whether a domain name is available for registration. Optionally get alternative domain name suggestions. Supports single domain checks with suggestions, or bulk checks for up to 100 domains at once.
Retrieve historical DNS records for a domain. Shows how DNS configurations have changed over time, including past A, MX, NS, CNAME, and other record types. Useful for investigating domain infrastructure changes and tracking DNS modifications.
Retrieve one page of known subdomains for a given domain, with first-seen, last-seen, and active/inactive status metadata. Filter by observation dates or status when investigating an attack surface.
Find all registered domains containing an exact keyword. Searches across 800M+ domains, 1500+ TLDs, and 9000+ SLDs. Useful for brand monitoring, competitive analysis, and finding related domains.
Retrieve the SSL/TLS certificate details for a domain, including validity dates, issuer, subject, and public key information. Optionally retrieve the full certificate chain from end-user to root CA, or include raw OpenSSL output.
Assess a domain for security risk using its reputation verdict, trust score, domain-generation analysis, threat intelligence matches, and supporting signals.
Retrieve subscription status, remaining API credits, served requests, and request limits for the connected API key.
Retrieve threat intelligence for an IPv4 or IPv6 address, including threat score, Tor, proxy, VPN, and abuse signals, with location and network information.