Every signal behind a domain. One key.
WHOIS and RDAP, the full DNS surface, SSL and Certificate Transparency history, GeoIP and ASN, email authentication, and company enrichment from nothing but a domain — all from one API. Read public records and answer the questions that matter before you ever fetch a page.
Built for security teams · packaged in the domain-intelligence bundle · see the lead-enrichment recipe.
Complete reconnaissance from DNS to company profiles.
The DNS surface, decoded
Raw A / MX / TXT / NS / CNAME / AAAA records from /v1/dns/lookup, and a separate intelligence pass that names the email provider, the nameserver provider, and the SPF / DMARC posture from those records. One request replaces a stack of dig commands and a lookup table.
Certificates and history
Live certificate posture from /v1/intel/ssl — issuer, SANs, expiry, days remaining — plus the full Certificate Transparency history for a domain and every subdomain it has ever issued a cert for. Built for renewal monitoring and footprint mapping, not one-off curiosity.
Network identity
GeoIP and ASN resolution for any public IPv4 or IPv6 address, served from a local database with no per-lookup latency. Map an IP to its country, network operator, and autonomous system without leaving the call you are already making.
Registration and ownership
WHOIS / RDAP returns the registrar, creation and expiry dates, abuse contacts, and nameservers as structured fields — not a free-text blob you have to parse. Detect when infrastructure quietly changes hands.
Email authentication
Parse and score SPF, DKIM, DMARC, and BIMI for a domain in a single DNS-only call. No SMTP probing, no mail sent — just the published policy and a posture score you can gate deliverability decisions on.
Domain to company
Point /v1/enrich/company at a homepage or about page and get a lite company profile built from public structured data — organization markup, open-graph tags, social profiles, and contact patterns. No third-party company-data feed in the loop.
Examples that work today.
Drop any of these into a terminal or notebook.
# One call returns the full DNS + provider picture for a domain.
curl -X POST https://api.ollagraph.com/v1/dns/intelligence \
-H "Authorization: Bearer $OLLAGRAPH_API_KEY" \
-H "Content-Type: application/json" \
-d '{"domain": "example.com"}'
# Response includes email_provider, nameserver_provider,
# has_spf, has_dmarc, inferred technologies, and the raw records. # Registrar, key dates, abuse contacts, nameservers — structured.
curl -X POST https://api.ollagraph.com/v1/intel/whois \
-H "Authorization: Bearer $OLLAGRAPH_API_KEY" \
-d '{"domain": "example.com"}'
# Certificate posture for renewal monitoring.
curl -X POST https://api.ollagraph.com/v1/intel/ssl \
-H "Authorization: Bearer $OLLAGRAPH_API_KEY" \
-d '{"domain": "example.com"}'
# Returns issuer, subject, SANs, not_after, days_remaining. import httpx
# Turn a bare domain into a company + infrastructure profile.
key = {"Authorization": "Bearer $OLLAGRAPH_API_KEY"}
dns = httpx.post(
"https://api.ollagraph.com/v1/dns/intelligence",
headers=key, json={"domain": "example.com"},
).json()
company = httpx.post(
"https://api.ollagraph.com/v1/enrich/company",
headers=key, json={"url": "https://example.com"},
).json()
print(dns["email_provider"]) # which provider runs their mail
print(dns["nameserver_provider"]) # which provider runs their DNS
print(company["name"], company["socials"]) The intelligence endpoint family.
Every endpoint here reads public, free-to-query data — DNS, Certificate Transparency, RDAP, a local GeoIP database, and the page itself.
DNS lookup
A, MX, TXT, NS, CNAME, and AAAA records in one structured response.
DNS intelligence
Email provider, nameserver provider, SPF and DMARC posture, and inferred technology footprint — layered on the raw lookup.
WHOIS / RDAP
Registrar, creation and expiry dates, abuse contacts, and nameservers as structured fields.
SSL certificate
Issuer, subject, SANs, expiry date, and days remaining — built for monitoring and pipeline-aware renewals.
Cert Transparency history
Every certificate ever issued for the domain or any subdomain, from public CT logs, deduplicated and newest-first.
Subdomain enumeration
Discover subdomains from public Certificate Transparency logs — no DNS brute-forcing, no paid feeds.
Email authentication
Parse and score SPF, DKIM, DMARC, and BIMI for a domain. All-DNS, no message ever sent.
GeoIP
Country, region, city, lat/lon, timezone, ASN, and ISP for any public IPv4 or IPv6 — from a local database.
ASN lookup
Resolve an IP or AS number to its autonomous system, network operator, and announced prefixes.
Page intelligence
Technology stack, contact emails and phones, social profiles, feeds, logos, and favicons from a single page.
Company enrichment
A lite company profile from one page — organization markup, og:* tags, social anchors, contact patterns.
Part of the full 124-endpoint surface — browse it as the domain-intelligence bundle or alongside the scraping and crawl families.
Domain intelligence questions
1 What is the difference between /v1/dns/lookup and /v1/dns/intelligence?
What is the difference between /v1/dns/lookup and /v1/dns/intelligence?
2 Where does the certificate and subdomain data come from?
Where does the certificate and subdomain data come from?
3 Can I check email deliverability posture without sending anything?
Can I check email deliverability posture without sending anything?
4 How is GeoIP and ASN resolution served?
How is GeoIP and ASN resolution served?
5 Is this safe to run at scale against the same domain?
Is this safe to run at scale against the same domain?
6 Does this rely on any paid threat-intelligence feed?
Does this rely on any paid threat-intelligence feed?
7 How is the intelligence family different from a standalone enrichment vendor?
How is the intelligence family different from a standalone enrichment vendor?
Enrich your first domains free.
1,000 free credits, one bearer token, failed calls auto-refund. No paid threat-intel feed in the path.