Domain Intelligence API

Use domain endpoints to inspect registration, DNS, email posture, parking, malware, and risk signals for a hostname or domain.

Authentication is required.

Endpoints

GET /domain/{domain}
GET /domain/{domain}/rdap

Domain Risk

GET /domain/example.com

Returns domain intelligence used by RequestGuard assessments, including registration age, TLD risk, parking signals, DNS posture, email posture, malware resolver comparison, and decision context when available.

RDAP

GET /domain/example.com/rdap

Returns a normalized ownership summary for the domain, including registrar, status, registration dates, nameservers, and abuse-contact fields when available.

Response Shape

Common fields include:

Field	Meaning
domain	Queried domain.
risk_score	Normalized 0-100 risk score when available.
risk_level	Low, medium, high, or critical risk grouping.
is_new_domain	Newly registered domain signal.
is_disposable	Disposable or suspicious-use signal when applicable.
dns	DNS posture and resolver evidence.
email	MX, SPF, and DMARC posture when available.
sources	Source metadata used to build the response.

For package-specific vulnerability intelligence, use npm Vulnerabilities instead of the general domain endpoint.