Domain Search Examples · Example 7 of 8 in Combinations › Investigations

Confusable IDN Domains

POSThttps://api.deepinfo.com/v1/discovery/domain-search

Field: is_idn name.contains_confusable
Operator: eq
Logic: must

Internationalized names that contain characters which look like other letters: the raw material of homograph attacks.

Request

curl

curl -X POST 'https://api.deepinfo.com/v1/discovery/domain-search?page_size=25' \
  -H 'apikey: YOUR_API_KEY' \
  -H 'Accept: application/json' \
  -H 'Content-Type: application/json' \
  -d '{
  "filters": {
    "must": [
      {
        "name": "is_idn",
        "type": "eq",
        "value": true
      },
      {
        "name": "name.contains_confusable",
        "type": "eq",
        "value": true
      }
    ]
  }
}'

Python

import requests

url = "https://api.deepinfo.com/v1/discovery/domain-search"

params = {
    "page_size": "25"
}

headers = {
    "apikey": "YOUR_API_KEY",
    "Accept": "application/json",
    "Content-Type": "application/json"
}

payload = {
    "filters": {
        "must": [
            {
                "name": "is_idn",
                "type": "eq",
                "value": True
            },
            {
                "name": "name.contains_confusable",
                "type": "eq",
                "value": True
            }
        ]
    }
}

response = requests.post(url, params=params, headers=headers, json=payload)
response.raise_for_status()
print(response.json())

JavaScript

const url = "https://api.deepinfo.com/v1/discovery/domain-search?page_size=25";

const response = await fetch(url, {
  method: "POST",
  headers: {
    "apikey": "YOUR_API_KEY",
    "Accept": "application/json",
    "Content-Type": "application/json"
  },
  body: JSON.stringify({
    filters: {
      must: [
        {
          name: "is_idn",
          type: "eq",
          value: true
        },
        {
          name: "name.contains_confusable",
          type: "eq",
          value: true
        }
      ]
    }
  }),
});

const data = await response.json();
console.log(data);

package main

import (
	"fmt"
	"io"
	"net/http"
	"strings"
)

func main() {
	payload := strings.NewReader(`{
  "filters": {
    "must": [
      {
        "name": "is_idn",
        "type": "eq",
        "value": true
      },
      {
        "name": "name.contains_confusable",
        "type": "eq",
        "value": true
      }
    ]
  }
}`)

	req, err := http.NewRequest("POST", "https://api.deepinfo.com/v1/discovery/domain-search?page_size=25", payload)
	if err != nil {
		panic(err)
	}
	req.Header.Set("apikey", "YOUR_API_KEY")
	req.Header.Set("Accept", "application/json")
	req.Header.Set("Content-Type", "application/json")

	res, err := http.DefaultClient.Do(req)
	if err != nil {
		panic(err)
	}
	defer res.Body.Close()

	body, err := io.ReadAll(res.Body)
	if err != nil {
		panic(err)
	}
	fmt.Println(string(body))
}

Java

import java.net.URI;
import java.net.http.HttpClient;
import java.net.http.HttpRequest;
import java.net.http.HttpResponse;

public class Main {
    public static void main(String[] args) throws Exception {
        String body = """
            {
              "filters": {
                "must": [
                  {
                    "name": "is_idn",
                    "type": "eq",
                    "value": true
                  },
                  {
                    "name": "name.contains_confusable",
                    "type": "eq",
                    "value": true
                  }
                ]
              }
            }""";

        HttpRequest request = HttpRequest.newBuilder()
            .uri(URI.create("https://api.deepinfo.com/v1/discovery/domain-search?page_size=25"))
            .header("apikey", "YOUR_API_KEY")
            .header("Accept", "application/json")
            .header("Content-Type", "application/json")
            .POST(HttpRequest.BodyPublishers.ofString(body))
            .build();

        HttpResponse<String> response = HttpClient.newHttpClient()
            .send(request, HttpResponse.BodyHandlers.ofString());

        System.out.println(response.body());
    }
}

using System;
using System.Net.Http;
using System.Text;

using var client = new HttpClient();

var body = """
    {
      "filters": {
        "must": [
          {
            "name": "is_idn",
            "type": "eq",
            "value": true
          },
          {
            "name": "name.contains_confusable",
            "type": "eq",
            "value": true
          }
        ]
      }
    }
    """;

var request = new HttpRequestMessage(HttpMethod.Post, "https://api.deepinfo.com/v1/discovery/domain-search?page_size=25");
request.Headers.Add("apikey", "YOUR_API_KEY");
request.Headers.Add("Accept", "application/json");
request.Content = new StringContent(body, Encoding.UTF8, "application/json");

using var response = await client.SendAsync(request);
Console.WriteLine(await response.Content.ReadAsStringAsync());

PHP

<?php

$body = <<<'JSON'
{
  "filters": {
    "must": [
      {
        "name": "is_idn",
        "type": "eq",
        "value": true
      },
      {
        "name": "name.contains_confusable",
        "type": "eq",
        "value": true
      }
    ]
  }
}
JSON;

$curl = curl_init();

curl_setopt_array($curl, [
    CURLOPT_URL => 'https://api.deepinfo.com/v1/discovery/domain-search?page_size=25',
    CURLOPT_RETURNTRANSFER => true,
    CURLOPT_CUSTOMREQUEST => 'POST',
    CURLOPT_HTTPHEADER => [
        'apikey: YOUR_API_KEY',
        'Accept: application/json',
        'Content-Type: application/json',
    ],
    CURLOPT_POSTFIELDS => $body,
]);

$response = curl_exec($curl);

if ($response === false) {
    throw new RuntimeException(curl_error($curl));
}

echo $response . PHP_EOL;

Ruby

require 'net/http'
require 'uri'

uri = URI('https://api.deepinfo.com/v1/discovery/domain-search?page_size=25')

request = Net::HTTP::Post.new(uri)
request['apikey'] = 'YOUR_API_KEY'
request['Accept'] = 'application/json'
request['Content-Type'] = 'application/json'
request.body = <<~'JSON'.chomp
  {
    "filters": {
      "must": [
        {
          "name": "is_idn",
          "type": "eq",
          "value": true
        },
        {
          "name": "name.contains_confusable",
          "type": "eq",
          "value": true
        }
      ]
    }
  }
JSON

response = Net::HTTP.start(uri.hostname, uri.port, use_ssl: uri.scheme == 'https') do |http|
  http.request(request)
end

puts response.body

Response

200 OK · application/json

Shortened for this page: results: 3 of 25 shown

Response Body

{
  "page": 1,
  "page_size": 25,
  "result_count": 11538069,
  "results": [
    {
      "punycode": "otrs.xn----8sb6acicjnk5hua.xn--p1ai",
      "unicode": "otrs.мос-тюльпан.рф",
      "is_idn": true,
      "subdomain": {
        "punycode": "otrs",
        "unicode": "otrs",
        "is_idn": false,
        "contains_letter": true,
        "contains_number": false,
        "contains_hyphen": false,
        "length": 4
      },
      "subdomain_last": {
        "punycode": "otrs",
        "unicode": "otrs",
        "is_idn": false,
        "contains_letter": true,
        "contains_number": false,
        "contains_hyphen": false,
        "length": 4
      },
      "subdomain_root": {
        "punycode": "otrs",
        "unicode": "otrs",
        "is_idn": false,
        "contains_letter": true,
        "contains_number": false,
        "contains_hyphen": false,
        "length": 4
      },
      "name": {
        "punycode": "otrs.xn----8sb6acicjnk5hua",
        "unicode": "otrs.мос-тюльпан",
        "is_idn": true,
        "contains_letter": true,
        "contains_number": false,
        "contains_hyphen": true,
        "length": 25,
        "lang": "ru",
        "keywords": [
          "otrs",
          "мос",
          "тюльпан"
        ],
        "keyword_count": 3,
        "latinized": [
          "otrs.moc-tlbpah"
        ],
        "contains_confusable": true
      },
      "domain": {
        "punycode": "xn----8sb6acicjnk5hua.xn--p1ai",
        "unicode": "мос-тюльпан.рф",
        "is_idn": true,
        "name": {
          "punycode": "xn----8sb6acicjnk5hua",
          "unicode": "мос-тюльпан",
          "is_idn": true,
          "contains_letter": true,
          "contains_number": false,
          "contains_hyphen": true,
          "length": 21,
          "lang": "ru",
          "keywords": [
            "мос",
            "тюльпан"
          ],
          "keyword_count": 2
        },
        "extension": {
          "punycode": "xn--p1ai",
          "unicode": "рф",
          "is_idn": true
        },
        "extension_root": {
          "punycode": "xn--p1ai",
          "unicode": "рф",
          "is_idn": true
        },
        "extension_sub": null,
        "extension_type": 2,
        "reserved": null,
        "premium": null,
        "registered": true,
        "whois": {
          "create_date": "2022-02-05T18:58:46Z",
          "update_date": "2026-08-07T09:18:01Z",
          "expiry_date": "2027-02-05T18:58:46Z",
          "registrar": "domenus-rf",
          "registrant": {
            "name": null,
            "organization": null,
            "street": null,
            "city": null,
            "state": null,
            "postal_code": null,
            "country": null,
            "phone": null,
            "email": null
          },
          "name_servers": [
            "ns1.jino.ru",
            "ns2.jino.ru",
            "ns3.jino.ru",
            "ns4.jino.ru"
          ],
          "domain_status": [
            "delegated",
            "registered",
            "verified"
          ],
          "whois_server": null,
          "check_date": "2026-08-07T09:20:25Z"
        },
        "whois_normalized": {
          "registrant": null
        },
        "whois_last_check_date": "2026-08-07T09:20:25Z",
        "whois_create_date_historical": null,
        "whois_last_change_date": "2026-08-07T09:41:55Z",
        "whois_registrant_email_historical": null,
        "whois_privacy_enabled": null,
        "dns": {
          "a": {
            "update_date": "2026-08-22T00:25:35Z",
            "ip_addresses": [
              "185.215.4.20"
            ]
          }
        },
        "dns_last_change_date": "2026-08-22T13:08:45Z",
        "ip_history": null,
        "ssl": null,
        "ssl_last_change_date": "2024-10-01T07:13:20Z"
      },
      "type": 2,
      "subdomain_level_count": 1,
      "dns": {
        "a": {
          "update_date": "2026-08-29T12:43:02Z",
          "ip_addresses": [
            "185.215.4.20"
          ]
        },
        "aaaa": {
          "update_date": "2026-08-29T12:43:02Z",
          "ip_addresses": []
        },
        "ns": {
          "update_date": "2026-08-29T12:43:02Z",
          "name_servers": []
        },
        "mx": {
          "update_date": "2026-08-29T12:43:02Z",
          "mail_servers": []
        },
        "soa": {
          "update_date": "2026-08-29T12:43:02Z",
          "mnames": [],
          "rnames": [],
          "rname_emails": []
        },
        "txt": {
          "update_date": "2026-08-29T12:43:02Z",
          "values": []
        },
        "cname": {
          "update_date": "2026-08-29T12:43:02Z",
          "values": []
        },
        "others": []
      },
      "dns_last_change_date": "2026-08-29T12:43:02Z",
      "ip_history": [
        "185.215.4.20"
      ],
      "ssl": null,
      "ssl_last_change_date": null,
      "webdata": {
        "connection_status": "success",
        "html": {
          "source_code_hash": "0027ca0c6097ea7596e9777de0d30adb376a887649ccfe4962538f1086482c3c"
        },
        "http": {
          "status_code_first": 404,
          "status_code_last": 404,
          "redirection_history": [
            {
              "url": "http://otrs.xn----8sb6acicjnk5hua.xn--p1ai/",
              "status_code": 404
            }
          ],
          "external_redirection": null,
          "final_url": "http://otrs.xn----8sb6acicjnk5hua.xn--p1ai/",
          "final_fqdn": "otrs.мос-тюльпан.рф",
          "final_domain": "мос-тюльпан.рф",
          "headers": {
            "others": [
              {
                "name": "connection",
                "value": "keep-alive"
              },
              {
                "name": "keep_alive",
                "value": "timeout=60"
              },
              {
                "name": "date",
                "value": "Sat, 29 Aug 2026 12:44:31 GMT"
              },
              {
                "name": "etag",
                "value": "W/\"365-62ddcdd098780\""
              },
              {
                "name": "x_tilda_server",
                "value": "27"
              },
              {
                "name": "x_tilda_imprint",
                "value": "bb096f02-9c94-4319-ba48-2c11a6721003"
              },
              {
                "name": "transfer_encoding",
                "value": "chunked"
              }
            ],
            "access_control_allow_headers": null,
            "access_control_allow_methods": null,
            "access_control_allow_origin": null,
            "cache_control": null,
            "clear_site_data": null,
            "content_encoding": "gzip",
            "content_security_policy": null,
            "content_type": "text/html; charset=UTF-8",
            "cross_origin_embedder_policy": null,
            "cross_origin_opener_policy": null,
            "cross_origin_resource_policy": null,
            "expect_ct": null,
            "feature_policy": null,
            "last_modified": "Tue, 11 Feb 2025 12:21:24 GMT",
            "permission_policy": null,
            "referrer_policy": null,
            "server": "ddos-guard",
            "set_cookie": "__ddg8_=<value>; Domain=.xn----8sb6acicjnk5hua.xn--p1ai; Path=/; Expires=Sat, 29-Aug-2026 13:04:31 GMT, __ddg10_=<value>; Domain=.xn----8sb6acicjnk5hua.xn--p1ai; Path=/; Expires=Sat, 29-Aug-2026 13:04:31 GMT, __ddg9_=<value>; Domain=.xn----8sb6acicjnk5hua.xn--p1ai; Path=/; Expires=Sat, 29-Aug-2026 13:04:31 GMT, __ddg1_=<value>; Domain=.xn----8sb6acicjnk5hua.xn--p1ai; HttpOnly; Path=/; Expires=Sun, 29-Aug-2027 12:44:31 GMT",
            "strict_transport_security": null,
            "x_content_type_options": null,
            "x_download_options": null,
            "x_frame_options": "SAMEORIGIN",
            "x_permitted_cross_domain_policies": null,
            "x_powered_by": null,
            "x_xss_protection": null
          },
          "cookies": [
            {
              "name": "__ddg10_",
              "value": "<value>"
            },
            {
              "name": "__ddg1_",
              "value": "<value>"
            },
            {
              "name": "__ddg8_",
              "value": "<value>"
            },
            {
              "name": "__ddg9_",
              "value": "<value>"
            }
          ]
        }
      }
    },
    {
      "punycode": "ftp.xn--evsteet-6wa.fi",
      "unicode": "ftp.evästeet.fi",
      "is_idn": true,
      "subdomain": {
        "punycode": "ftp",
        "unicode": "ftp",
        "is_idn": false,
        "contains_letter": true,
        "contains_number": false,
        "contains_hyphen": false,
        "length": 3
      },
      "subdomain_last": {
        "punycode": "ftp",
        "unicode": "ftp",
        "is_idn": false,
        "contains_letter": true,
        "contains_number": false,
        "contains_hyphen": false,
        "length": 3
      },
      "subdomain_root": {
        "punycode": "ftp",
        "unicode": "ftp",
        "is_idn": false,
        "contains_letter": true,
        "contains_number": false,
        "contains_hyphen": false,
        "length": 3
      },
      "name": {
        "punycode": "ftp.xn--evsteet-6wa",
        "unicode": "ftp.evästeet",
        "is_idn": true,
        "contains_letter": true,
        "contains_number": false,
        "contains_hyphen": false,
        "length": 18,
        "lang": "fi",
        "keywords": [
          "ftp",
          "evästeet"
        ],
        "keyword_count": 2,
        "latinized": [
          "ftp.evasteet"
        ],
        "contains_confusable": true
      },
      "domain": {
        "punycode": "xn--evsteet-6wa.fi",
        "unicode": "evästeet.fi",
        "is_idn": true,
        "name": {
          "punycode": "xn--evsteet-6wa",
          "unicode": "evästeet",
          "is_idn": true,
          "contains_letter": true,
          "contains_number": false,
          "contains_hyphen": false,
          "length": 15,
          "lang": "fi",
          "keywords": [
            "evästeet"
          ],
          "keyword_count": 1
        },
        "extension": {
          "punycode": "fi",
          "unicode": "fi",
          "is_idn": false
        },
        "extension_root": {
          "punycode": "fi",
          "unicode": "fi",
          "is_idn": false
        },
        "extension_sub": null,
        "extension_type": 2,
        "reserved": null,
        "premium": null,
        "registered": true,
        "whois": {
          "create_date": "2023-09-07T20:47:57Z",
          "update_date": "2025-08-29T09:35:57Z",
          "expiry_date": "2026-09-07T20:47:57Z",
          "registrar": "planeetta internet oy",
          "registrant": {
            "name": "REDACTED FOR PRIVACY",
            "organization": "pixelwork studios / superluminaly oy",
            "street": "REDACTED FOR PRIVACY",
            "city": "helsinki",
            "state": null,
            "postal_code": "REDACTED FOR PRIVACY",
            "country": "fi",
            "phone": null,
            "email": "REDACTED FOR PRIVACY"
          },
          "name_servers": [
            "ns23.hostaan.fi",
            "ns24.hostaan.fi"
          ],
          "domain_status": [
            "registered"
          ],
          "whois_server": null,
          "check_date": "2026-08-27T10:15:15Z"
        },
        "whois_normalized": {
          "registrant": {
            "organization": "REDACTED FOR PRIVACY",
            "phone": null,
            "email": "REDACTED FOR PRIVACY",
            "email_fqdn_apex": "REDACTED FOR PRIVACY",
            "email_domain_apex": "REDACTED FOR PRIVACY"
          }
        },
        "whois_last_check_date": "2026-08-27T10:15:15Z",
        "whois_create_date_historical": null,
        "whois_last_change_date": "2025-09-03T04:51:45Z",
        "whois_registrant_email_historical": null,
        "whois_privacy_enabled": false,
        "dns": {
          "a": {
            "update_date": "2026-08-23T04:17:10Z",
            "ip_addresses": [
              "94.237.107.18"
            ]
          }
        },
        "dns_last_change_date": "2026-08-07T20:07:14Z",
        "ip_history": null,
        "ssl": {
          "validity": {
            "start_date": "2026-07-30T00:14:25Z",
            "end_date": "2026-10-28T00:14:24Z"
          },
          "serial_number": "502044265708247912000363477832427164636371",
          "check_date": "2026-08-29T18:31:10Z"
        },
        "ssl_last_change_date": "2026-08-27T09:45:43Z"
      },
      "type": 2,
      "subdomain_level_count": 1,
      "dns": {
        "a": {
          "update_date": "2026-05-01T13:28:48Z",
          "ip_addresses": [
            "94.237.107.18"
          ]
        },
        "aaaa": {
          "update_date": "2026-05-01T13:28:48Z",
          "ip_addresses": [
            "2a04:3545:1000:720:54b9:a2ff:fe8e:34f2"
          ]
        },
        "ns": {
          "update_date": "2026-05-01T13:28:48Z",
          "name_servers": [
            "ns23.hostaan.fi",
            "ns24.hostaan.fi"
          ]
        },
        "mx": {
          "update_date": "2026-05-01T13:28:48Z",
          "mail_servers": [
            "mail.xn--evsteet-6wa.fi"
          ]
        },
        "soa": {
          "update_date": "2026-05-01T13:28:48Z",
          "mnames": [
            "ns24.hostaan.fi"
          ],
          "rnames": [
            "hello.pixelwork.fi"
          ],
          "rname_emails": [
            "user@pixelwork.fi"
          ]
        },
        "txt": {
          "update_date": "2026-05-01T13:28:48Z",
          "values": [
            "\"brevo-code:f7f382cee934eeb225f5faed39cf5d1b\"",
            "\"v=spf1 +a +mx +a:fi24.hostaan.fi include:spf.brevo.com ~all\""
          ]
        },
        "cname": {
          "update_date": "2026-05-01T13:28:48Z",
          "values": [
            "xn--evsteet-6wa.fi."
          ]
        },
        "others": []
      },
      "dns_last_change_date": "2026-05-01T13:30:42Z",
      "ip_history": [
        "31.217.196.198",
        "94.237.107.18"
      ],
      "ssl": {
        "tags": [
          "dla"
        ],
        "fqdns": [
          "hostaan.fi"
        ],
        "version": 3,
        "serial_number": "17154598185769069759777079698",
        "fingerprint": {
          "sha256": "fcb4f25faa7b7ede1c17248661aef55c891c41daec225e51f42245efd1e12c78",
          "sha1": "de7d4e2e797fa9f59f68768d8d5b19e62933947a",
          "md5": "564191240ef1bccb2930e5126b2ec1b1"
        },
        "validity": {
          "start_date": "2026-03-16T11:25:22Z",
          "end_date": "2026-10-01T11:25:22Z",
          "length": 17193600
        },
        "signature": {
          "is_self_signed": false,
          "is_valid": false,
          "value": "kKZzR7T3K3G8R6G+DtEHLl/q6JPxhZkTzNpP6znLcOj+Vu7egC9ZQzqOnGhL6DZ1FPQ/SJmK060fbMfgMjWXvnfTARmhUEwE3jQ/DyoxGgrSWNBtwZup5DUjBBoc2DQOYILw0bXzkb7GzbEUiZQO9W7wkJZ/iFjb7YE74nExPofjNgC4qy/ltWyzh7kTSH0UReRYdq3odFHmdD3Hluv1uwzPTgwM3GqoJi4nhdIMOEyqnOx+/pjcysDia2j1KlYQPgqq5hd28biyg7OKTqamtLD8giRBLfUyfxRVXnpHc4UxJW5mxsabbFj8yqRmN4Ii6gG1SqEP4DwEPthQ+R96Tg==",
          "algorithm": {
            "oid": "1.2.840.113549.1.1.11",
            "name": "sha256"
          }
        },
        "issuer_dn": "CN=GlobalSign GCC R6 AlphaSSL CA 2025,O=GlobalSign nv-sa,C=BE",
        "issuer": {
          "common_name": "GlobalSign GCC R6 AlphaSSL CA 2025",
          "country": "BE",
          "state": null,
          "locality": null,
          "organization": "GlobalSign nv-sa",
          "organizational_unit": null
        },
        "subject_dn": "CN=*.hostaan.fi",
        "subject": {
          "common_name": "*.hostaan.fi",
          "country": null,
          "state": null,
          "locality": null,
          "organization": null,
          "organizational_unit": null
        },
        "extensions": {
          "authority_key_id": "xbSTj28r3B5Iv7cQMIXO0bK7SC0=",
          "basic_constraints": {
            "is_ca": false
          },
          "certificate_policies": [
            "2.23.140.1.2.1",
            "1.3.6.1.4.1.4146.10.1.3"
          ],
          "extended_key_usage": {
            "client_auth": true,
            "server_auth": true
          },
          "key_usage": {
            "digital_signature": true,
            "content_commitment": false,
            "key_agreement": false,
            "data_encipherment": false,
            "key_encipherment": true,
            "key_cert_sign": false,
            "crl_sign": false
          },
          "signed_certificate_timestamps": [
            "2026-03-16T11:25:26Z",
            "2026-03-16T11:25:25Z"
          ],
          "subject_alt_name": {
            "dns_names": [
              "*.hostaan.fi",
              "hostaan.fi"
            ]
          },
          "subject_key_id": "5mQzHBOR1l6Kno8/9gVZoRIRvPw="
        },
        "check_date": "2026-08-29T18:31:09Z"
      },
      "ssl_last_change_date": "2026-08-29T18:31:31Z",
      "webdata": {
        "connection_status": "success",
        "html": {
          "source_code_hash": "49003b369ded2de0b2fca4736da68295367e32034565993590d5d25166d07d02"
        },
        "http": {
          "status_code_first": 200,
          "status_code_last": 200,
          "redirection_history": [
            {
              "url": "http://ftp.xn--evsteet-6wa.fi/",
              "status_code": 200
            }
          ],
          "external_redirection": null,
          "final_url": "http://ftp.xn--evsteet-6wa.fi/",
          "final_fqdn": "ftp.evästeet.fi",
          "final_domain": "evästeet.fi",
          "headers": {
            "others": [
              {
                "name": "date",
                "value": "Mon, 11 May 2026 14:54:50 GMT"
              },
              {
                "name": "content_length",
                "value": "778"
              },
              {
                "name": "connection",
                "value": "keep-alive"
              },
              {
                "name": "etag",
                "value": "\"604-639dfcc070565-gzip\""
              },
              {
                "name": "accept_ranges",
                "value": "bytes"
              },
              {
                "name": "vary",
                "value": "Accept-Encoding"
              }
            ],
            "access_control_allow_headers": null,
            "access_control_allow_methods": null,
            "access_control_allow_origin": null,
            "cache_control": null,
            "clear_site_data": null,
            "content_encoding": "gzip",
            "content_security_policy": null,
            "content_type": "text/html",
            "cross_origin_embedder_policy": null,
            "cross_origin_opener_policy": null,
            "cross_origin_resource_policy": null,
            "expect_ct": null,
            "feature_policy": null,
            "last_modified": "Mon, 14 Jul 2025 08:53:43 GMT",
            "permission_policy": null,
            "referrer_policy": null,
            "server": "nginx",
            "set_cookie": null,
            "strict_transport_security": null,
            "x_content_type_options": null,
            "x_download_options": null,
            "x_frame_options": null,
            "x_permitted_cross_domain_policies": null,
            "x_powered_by": null,
            "x_xss_protection": null
          },
          "cookies": []
        }
      }
    },
    {
      "punycode": "webmail.xn--lhellsi-5wae.fi",
      "unicode": "webmail.lähelläsi.fi",
      "is_idn": true,
      "subdomain": {
        "punycode": "webmail",
        "unicode": "webmail",
        "is_idn": false,
        "contains_letter": true,
        "contains_number": false,
        "contains_hyphen": false,
        "length": 7
      },
      "subdomain_last": {
        "punycode": "webmail",
        "unicode": "webmail",
        "is_idn": false,
        "contains_letter": true,
        "contains_number": false,
        "contains_hyphen": false,
        "length": 7
      },
      "subdomain_root": {
        "punycode": "webmail",
        "unicode": "webmail",
        "is_idn": false,
        "contains_letter": true,
        "contains_number": false,
        "contains_hyphen": false,
        "length": 7
      },
      "name": {
        "punycode": "webmail.xn--lhellsi-5wae",
        "unicode": "webmail.lähelläsi",
        "is_idn": true,
        "contains_letter": true,
        "contains_number": false,
        "contains_hyphen": false,
        "length": 23,
        "lang": "en",
        "keywords": [
          "webmail",
          "lähellä",
          "si"
        ],
        "keyword_count": 3,
        "latinized": [
          "webmail.lahellasi"
        ],
        "contains_confusable": true
      },
      "domain": {
        "punycode": "xn--lhellsi-5wae.fi",
        "unicode": "lähelläsi.fi",
        "is_idn": true,
        "name": {
          "punycode": "xn--lhellsi-5wae",
          "unicode": "lähelläsi",
          "is_idn": true,
          "contains_letter": true,
          "contains_number": false,
          "contains_hyphen": false,
          "length": 16,
          "lang": "fi",
          "keywords": [
            "lähellä",
            "si"
          ],
          "keyword_count": 2
        },
        "extension": {
          "punycode": "fi",
          "unicode": "fi",
          "is_idn": false
        },
        "extension_root": {
          "punycode": "fi",
          "unicode": "fi",
          "is_idn": false
        },
        "extension_sub": null,
        "extension_type": 2,
        "reserved": null,
        "premium": null,
        "registered": true,
        "whois": {
          "create_date": "2022-03-13T12:27:01Z",
          "update_date": null,
          "expiry_date": "2027-03-13T12:27:01Z",
          "registrar": "planeetta internet oy",
          "registrant": {
            "name": "REDACTED FOR PRIVACY",
            "organization": "firmus data oy",
            "street": "REDACTED FOR PRIVACY",
            "city": "helsinki",
            "state": null,
            "postal_code": "REDACTED FOR PRIVACY",
            "country": "fi",
            "phone": null,
            "email": "REDACTED FOR PRIVACY"
          },
          "name_servers": [
            "ns1.domainhotelli.fi",
            "ns2.domainhotelli.fi"
          ],
          "domain_status": [
            "registered"
          ],
          "whois_server": null,
          "check_date": "2026-02-26T05:39:55Z"
        },
        "whois_normalized": {
          "registrant": {
            "organization": "REDACTED FOR PRIVACY",
            "phone": null,
            "email": "REDACTED FOR PRIVACY",
            "email_fqdn_apex": "REDACTED FOR PRIVACY",
            "email_domain_apex": "REDACTED FOR PRIVACY"
          }
        },
        "whois_last_check_date": "2026-02-26T05:39:55Z",
        "whois_create_date_historical": null,
        "whois_last_change_date": "2026-02-26T05:40:51Z",
        "whois_registrant_email_historical": null,
        "whois_privacy_enabled": false,
        "dns": {
          "a": {
            "update_date": "2026-08-04T02:54:49Z",
            "ip_addresses": [
              "94.237.81.166"
            ]
          }
        },
        "dns_last_change_date": "2026-08-04T02:55:10Z",
        "ip_history": null,
        "ssl": {
          "validity": {
            "start_date": "2026-07-30T18:00:15Z",
            "end_date": "2026-10-28T18:00:14Z"
          },
          "serial_number": "584561824765857620398199205619113922687510",
          "check_date": "2026-08-29T15:48:18Z"
        },
        "ssl_last_change_date": "2026-08-27T01:05:35Z"
      },
      "type": 2,
      "subdomain_level_count": 1,
      "dns": {
        "a": {
          "update_date": "2026-08-04T06:07:32Z",
          "ip_addresses": [
            "31.217.196.124"
          ]
        },
        "aaaa": {
          "update_date": "2026-08-04T06:07:32Z",
          "ip_addresses": []
        },
        "ns": {
          "update_date": "2026-08-04T06:07:32Z",
          "name_servers": []
        },
        "mx": {
          "update_date": "2026-08-04T06:07:32Z",
          "mail_servers": []
        },
        "soa": {
          "update_date": "2026-08-04T06:07:32Z",
          "mnames": [],
          "rnames": [],
          "rname_emails": []
        },
        "txt": {
          "update_date": "2026-08-04T06:07:32Z",
          "values": []
        },
        "cname": {
          "update_date": "2026-08-04T06:07:32Z",
          "values": []
        },
        "others": []
      },
      "dns_last_change_date": "2025-02-23T18:37:17Z",
      "ip_history": [
        "31.217.196.124"
      ],
      "ssl": {
        "tags": [
          "dla"
        ],
        "fqdns": [
          "domainhotelli.fi"
        ],
        "version": 3,
        "serial_number": "2664263062848156003013932940310993665",
        "fingerprint": {
          "sha256": "13160aa2963a6f3689dd696bfaaf1d2bb9727586bf062ff11ab4da7f38085c4d",
          "sha1": "76ec6b6202b9346ac4e667ce898e235eedfefd66",
          "md5": "046ec032de9125bc5500b277be0b5a26"
        },
        "validity": {
          "start_date": "2026-08-06T00:00:00Z",
          "end_date": "2027-02-20T23:59:59Z",
          "length": 17193599
        },
        "signature": {
          "is_self_signed": false,
          "is_valid": false,
          "value": "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",
          "algorithm": {
            "oid": "1.2.840.113549.1.1.11",
            "name": "sha256"
          }
        },
        "issuer_dn": "CN=Sectigo Public Server Authentication CA DV R36,O=Sectigo Limited,C=GB",
        "issuer": {
          "common_name": "Sectigo Public Server Authentication CA DV R36",
          "country": "GB",
          "state": null,
          "locality": null,
          "organization": "Sectigo Limited",
          "organizational_unit": null
        },
        "subject_dn": "CN=*.domainhotelli.fi",
        "subject": {
          "common_name": "*.domainhotelli.fi",
          "country": null,
          "state": null,
          "locality": null,
          "organization": null,
          "organizational_unit": null
        },
        "extensions": {
          "authority_key_id": "aMASFhgOr872h6YyV6NGUV3LByc=",
          "basic_constraints": {
            "is_ca": false
          },
          "certificate_policies": [
            "1.3.6.1.4.1.6449.1.2.2.7",
            "2.23.140.1.2.1"
          ],
          "extended_key_usage": {
            "client_auth": null,
            "server_auth": true
          },
          "key_usage": {
            "digital_signature": true,
            "content_commitment": false,
            "key_agreement": false,
            "data_encipherment": false,
            "key_encipherment": true,
            "key_cert_sign": false,
            "crl_sign": false
          },
          "signed_certificate_timestamps": [
            "2026-08-06T06:52:21Z",
            "2026-08-06T06:52:22Z"
          ],
          "subject_alt_name": {
            "dns_names": [
              "*.domainhotelli.fi",
              "domainhotelli.fi"
            ]
          },
          "subject_key_id": "CCgaDSpo1MwJLm2bcftwiUL4nZU="
        },
        "check_date": "2026-08-29T18:34:11Z"
      },
      "ssl_last_change_date": "2026-08-29T18:34:58Z",
      "webdata": {
        "connection_status": "success",
        "html": {
          "source_code_hash": "cf61da7450f617024d01252ec5f2c47a66fd26b5de11f3a4ea85a87b6fa8aa57"
        },
        "http": {
          "status_code_first": 301,
          "status_code_last": 200,
          "redirection_history": [
            {
              "url": "http://webmail.xn--lhellsi-5wae.fi/",
              "status_code": 301
            },
            {
              "url": "https://webmail.xn--lhellsi-5wae.fi/",
              "status_code": 200
            }
          ],
          "external_redirection": false,
          "final_url": "https://webmail.xn--lhellsi-5wae.fi/",
          "final_fqdn": "webmail.lähelläsi.fi",
          "final_domain": "lähelläsi.fi",
          "headers": {
            "others": [
              {
                "name": "connection",
                "value": "Keep-Alive"
              },
              {
                "name": "keep_alive",
                "value": "timeout=5, max=100"
              },
              {
                "name": "pragma",
                "value": "no-cache"
              },
              {
                "name": "content_length",
                "value": "12381"
              },
              {
                "name": "vary",
                "value": "Accept-Encoding"
              },
              {
                "name": "date",
                "value": "Tue, 01 Jul 2025 01:08:08 GMT"
              },
              {
                "name": "alt_svc",
                "value": "h3=\":443\"; ma=2592000, h3-29=\":443\"; ma=2592000, h3-Q050=\":443\"; ma=2592000, h3-Q046=\":443\"; ma=2592000, h3-Q043=\":443\"; ma=2592000, quic=\":443\"; ma=2592000; v=\"43,46\""
              }
            ],
            "access_control_allow_headers": null,
            "access_control_allow_methods": null,
            "access_control_allow_origin": null,
            "cache_control": "no-cache, no-store, must-revalidate, private",
            "clear_site_data": null,
            "content_encoding": "gzip",
            "content_security_policy": null,
            "content_type": "text/html; charset=\"utf-8\"",
            "cross_origin_embedder_policy": null,
            "cross_origin_opener_policy": null,
            "cross_origin_resource_policy": null,
            "expect_ct": null,
            "feature_policy": null,
            "last_modified": null,
            "permission_policy": null,
            "referrer_policy": null,
            "server": "LiteSpeed",
            "set_cookie": "webmailrelogin=<value>; HttpOnly; expires=Thu, 01-Jan-1970 00:00:01 GMT; path=/; port=443; secure, webmailsession=<value>; HttpOnly; path=/; port=443; secure, roundcube_sessid=<value>; HttpOnly; expires=Thu, 01-Jan-1970 00:00:01 GMT; path=/; port=443; secure, roundcube_sessauth=<value>; HttpOnly; domain=webmail.xn--lhellsi-5wae.fi; expires=Thu, 01-Jan-1970 00:00:01 GMT; path=/; port=443; secure, PPA_ID=<value>; HttpOnly; expires=Thu, 01-Jan-1970 00:00:01 GMT; path=/; port=443; secure, roundcube_cookies=<value>; HttpOnly; expires=Wed, 01-Jul-2026 01:08:08 GMT; path=/; port=443; secure",
            "strict_transport_security": null,
            "x_content_type_options": null,
            "x_download_options": null,
            "x_frame_options": null,
            "x_permitted_cross_domain_policies": null,
            "x_powered_by": null,
            "x_xss_protection": null
          },
          "cookies": []
        }
      }
    }
  ]
}

Content-Type: application/json
ratelimit-limit: 1000
ratelimit-remaining: 999
ratelimit-reset: 1
x-ratelimit-limit-hour: 100000
x-ratelimit-limit-minute: 10000
x-ratelimit-limit-second: 1000
x-ratelimit-remaining-hour: 99816
x-ratelimit-remaining-minute: 9986
x-ratelimit-remaining-second: 999
deepinfo-request-id: 5f0c6a8e-1b2d-4c3e-9f4a-7b8c9d0e1f2a

Request

What this example sends. Every parameter is documented on Domain Search; the exact request is in the code panel.

Parameter	Value
`page_size`query	`25`
`filters.must[0].name`body	`is_idn`
`filters.must[0].type`body	`eq`
`filters.must[0].value`body	`true`
`filters.must[1].name`body	`name.contains_confusable`
`filters.must[1].type`body	`eq`
`filters.must[1].value`body	`true`

Reference updated September 26, 2026

Request

Related Examples