Everything Deepinfo knows about one domain, in one call.

Pass a domain. Get back the full enriched record: Whois, DNS, SSL, registration metadata, and risk scoring, all aligned to the same observation timestamp.

WHAT THIS API RETURNS

The full enrichment surface, for any domain.

The Domain Detail API is the per-record version of Domain Search. Pass one domain on the query string and the API returns the same enrichment surface that Search returns inside its result set: Whois, DNS, SSL, registration metadata, derived attributes, and risk scoring.

Use this when you have a specific domain to investigate or enrich, instead of a query against the corpus. The response is shaped to be self-contained: every field that Search exposes for filtering is present here for direct read.

Pair with Whois Lookup, DNS Lookup, or SSL Lookup when you need fresh state instead of indexed state. Domain Detail returns Deepinfo's most recent indexed observation; the Lookup APIs go to the live source.

REQUEST

One endpoint, one parameter.

Endpoint:

GET https://api.deepinfo.com/v1/discovery/domain-detail?domain={domain}

Parameters:

Name In Type Required Description
domain query string Yes A registered domain such as deepinfo.com.

Authentication is by API token in the request header. See docs.deepinfo.com for the full request reference.

SAMPLE RESPONSE

See what the API returns.

Real response structure for the Everything Deepinfo knows about one domain, in one call endpoint. Field coverage may vary based on query parameters and data availability.

JSON RESPONSE
{
  "fqdn": "deepinfo.com",
  "domain": {
    "name": "deepinfo",
    "extension": "com",
    "extension_root": "com",
    "extension_type": "gtld"
  },
  "whois": {
    "create_date": "2018-06-12T10:15:43Z",
    "expiry_date": "2027-06-12T10:15:43Z",
    "registrar": "GoDaddy.com, LLC",
    "registrant": {"organization": "Deepinfo", "country": "TR"},
    "name_servers": ["ns-cloud-a1.googledomains.com", "ns-cloud-a2.googledomains.com"]
  },
  "dns": {
    "a": ["203.0.113.42"],
    "mx": [{"value": "alt1.aspmx.l.google.com", "priority": 10}],
    "txt": ["v=spf1 include:_spf.google.com ~all"]
  },
  "ssl": {
    "issuer": "Let's Encrypt R3",
    "not_after": "2026-08-09T23:59:59Z",
    "sans": ["deepinfo.com", "www.deepinfo.com"]
  },
  "risk_score": 12,
  "indexed_at": "2026-05-02T08:30:11Z"
}
STRUCTURED VIEW
Fields
Fqdn
deepinfo.com
Risk score
12
Indexed at
2026-05-02T08:30:11Z
Domain
Name
deepinfo
Extension
com
Extension root
com
Extension type
gtld
Whois
Create date
2018-06-12T10:15:43Z
Expiry date
2027-06-12T10:15:43Z
Registrar
GoDaddy.com, LLC
Registrant
{2 fields}
Name servers
ns-cloud-a1.googledomains.com, ns-cloud-a2.googledomains.com
Dns
A
203.0.113.42
Mx
1 items
Txt
v=spf1 include:_spf.google.com ~all
Ssl
Issuer
Let's Encrypt R3
Not after
2026-08-09T23:59:59Z
Sans
deepinfo.com, www.deepinfo.com

Sample response shown. Real responses depend on query parameters, data availability, and API version. Talk to us for full schema documentation.

“One API call returning Whois, DNS, SSL, and risk scoring aligned to the same observation timestamp removed the consistency problem we had stitching four separate sources. Investigation context loads in one round trip.”

— Principal Engineer, Security Analytics Platform
GET STARTED

Pull a sample record, or batch enrich your inventory.

We'll set up token access and answer schema questions on a call.

Talk to us Browse API docs