DNS records, WHOIS/RDAP registration, SSL certificate, subdomain enumeration, and email-security posture — aggregated in real time and cached.
curl "https://domain-intelligence-api.p.rapidapi.com/lookup/cmu.edu" \ -H "X-RapidAPI-Host: domain-intelligence-api.p.rapidapi.com" \ -H "X-RapidAPI-Key: YOUR_RAPIDAPI_KEY"
import requests
url = "https://domain-intelligence-api.p.rapidapi.com/lookup/cmu.edu"
headers = {
"X-RapidAPI-Host": "domain-intelligence-api.p.rapidapi.com",
"X-RapidAPI-Key": "YOUR_RAPIDAPI_KEY",
}
r = requests.get(url, headers=headers, timeout=15)
data = r.json()
print(data["subdomains"]["count"], "subdomains found")
// Node 18+ has built-in fetch — no import needed
const res = await fetch(
"https://domain-intelligence-api.p.rapidapi.com/lookup/cmu.edu",
{ headers: {
"X-RapidAPI-Host": "domain-intelligence-api.p.rapidapi.com",
"X-RapidAPI-Key": "YOUR_RAPIDAPI_KEY",
}}
);
const data = await res.json();
console.log(data.dns.A, data.email_security.spf);
<?php
$ch = curl_init("https://domain-intelligence-api.p.rapidapi.com/lookup/cmu.edu");
curl_setopt($ch, CURLOPT_RETURNTRANSFER, true);
curl_setopt($ch, CURLOPT_HTTPHEADER, [
"X-RapidAPI-Host: domain-intelligence-api.p.rapidapi.com",
"X-RapidAPI-Key: YOUR_RAPIDAPI_KEY",
]);
$data = json_decode(curl_exec($ch), true);
curl_close($ch);
echo $data["subdomains"]["count"];
All record types resolved from authoritative DNS for cmu.edu.
Registration data for cmu.edu via the RDAP protocol, with port-43 WHOIS fallback if RDAP is unavailable.
Live TLS handshake against cmu.edu. No third-party scanner.
Aggregated from 5 upstream sources in parallel — crt.sh, certspotter, hackertarget, rapiddns, and VirusTotal — plus an always-on DNS bruteforce across a curated 773-word wordlist with automatic wildcard filtering, and background enrichment aggregating 25+ passive sources for comprehensive coverage.
+ more seen in CT logs / passive DNS (historical — may be inactive)
No subdomains discovered.
SPF and DMARC presence and records for cmu.edu, plus DKIM keys auto-probed across 29 common selectors (Google Workspace, Microsoft 365, Mailchimp, SendGrid, Postmark and more).
Probed common selectors (Google, Microsoft 365, Mailchimp, SendGrid, etc.). Custom or hash-based selectors aren't auto-discoverable.
Same data, JSON response, REST API. Free tier available, no card required.
Browse intelligence reports for other popular domains.