Find every domain that looks like yours.

Pass a seed domain. Get back the cluster of domains that share registrar, registrant, name server, certificate, or string-similarity signals.

WHAT THIS API RETURNS

Cluster the corpus around any seed.

The Associated Domain Finder API surfaces the cluster of domains that share signal with a given seed. Association can be by exact ownership match, by infrastructure overlap, or by string-similarity to the seed name. The API runs the cluster query against the full indexed corpus.

Pass the seed and the optional association parameter to scope the cluster (registrant, registrar, name server, certificate, or name-similarity). Use strict to control how aggressive the matching is, and include_subdomains to expand to the FQDN level.

Use this when you need infrastructure clustering as a hunt or attribution input, brand-impersonation graphs around a seed name, or M&A inheritance discovery from a known apex.

REQUEST

One endpoint, one required parameter.

Endpoint:

GET https://api.deepinfo.com/v1/discovery/associated-domain-finder?domain={domain}

Parameters:

Name In Type Required Description
domain query string Yes Seed domain such as deepinfo.com.
association query enum No Association dimension: registrant, registrar, name_server, certificate, or name_similarity. Defaults to a multi-signal blend.
strict query boolean No Tighter matching when true; broader cluster when false.
include_subdomains query boolean No When true, surface FQDNs in addition to apex domains.
page query integer No Page number for paginated responses. Defaults to 1.
page_size query integer No Page size for paginated responses. Defaults to a sensible per-endpoint limit; see docs.
ordering query string No Field to sort by; prefix with - for descending order.
export query boolean No When true, returns the full result set as a downloadable export instead of paginated JSON.
export_format query enum No Format of the export when export=true. Typically json or csv.
export_scope query enum No Subset of fields to include in the export. See the docs for per-endpoint scopes.

Authentication is by API token in the request header. See docs.deepinfo.com for the full request reference.

SAMPLE RESPONSE

See what the API returns.

Real response structure for the Find every domain that looks like yours endpoint. Field coverage may vary based on query parameters and data availability.

JSON RESPONSE
{
  "_request": {"domain": "deepinfo.com", "association": "registrant"},
  "results": [
    {"fqdn": "deepinfo.com", "association_signal": "seed"},
    {"fqdn": "deepinfo.io", "association_signal": "registrant_match", "confidence": 0.96},
    {"fqdn": "deepinfo.net", "association_signal": "registrant_match", "confidence": 0.96},
    {"fqdn": "dofo.com", "association_signal": "registrant_match", "confidence": 0.91}
  ],
  "pagination": {"page": 1, "page_size": 50, "total": 12}
}
STRUCTURED VIEW
Request
Domain
deepinfo.com
Association
registrant
Results
Count
4
First fqdn
deepinfo.com
First association signal
seed
Pagination
Page
1
Page size
50
Total
12

Sample response shown. Real responses depend on query parameters, data availability, and API version. Talk to us for full schema documentation.

“Clustering by registrar, registrant, and certificate signal in one call is exactly the pivot we used to do across four separate APIs. Investigation timelines shortened measurably once we consolidated.”

— Threat Intelligence Analyst, Managed Detection and Response Provider
GET STARTED

Run a finder against your seed, or have us walk you through the dimensions.

We'll set up token access and discuss which association dimensions fit your workflow.

Talk to us Browse API docs