Domain APIs

Domain APIs provide comprehensive information about domains, including subdomains, hosts, DNS records, exposed ports, and more.

Get Domain Details

Get domain details, subdomains, associated hosts, DNS records, exposed ports, and more.

HTTP Request

GET https://fullhunt.io/api/v1/domain/<domain>/details

URL Parameters

Parameter	Description
domain	The domain to query (e.g., kaspersky.com)

Example Request

curl "https://fullhunt.io/api/v1/domain/kaspersky.com/details" \
  -H "X-API-KEY: xxxx-xxxx-xxxx-xxxxxx"

Example Response

{
  "domain": "kaspersky.com",
  "hosts": [
    {
      "host": "s252.cloud.kaspersky.com",
      "domain": "kaspersky.com",
      "ip_address": "101.46.33.250",
      "http_status_code": 200,
      "http_title": "Kaspersky Endpoint Security Cloud",
      "is_live": true,
      "is_resolvable": true,
      "is_cloud": true,
      "is_cdn": false,
      "is_cloudflare": false,
      "has_ipv6": false,
      "has_private_ip": false,
      "cdn": "CloudFlare",
      "categories": ["Web-Servers"],
      "tags": ["https", "microsoft-kestrel", "web-servers"],
      "tld": "com",
      "dns": {
        "a": ["101.46.33.250"],
        "aaaa": [],
        "cname": [],
        "mx": [],
        "ns": [],
        "ptr": ["ecs-101-46-33-250.compute.hwclouds-dns.eu."],
        "txt": []
      },
      "cert_object": {
        "subject_common_name": "*.cloud.kaspersky.com",
        "issuer_common_name": "DigiCert Global G2 TLS RSA SHA256 2020 CA1",
        "issuer_organization": "DigiCert Inc",
        "not_before": "15-04-2025 00:00:00",
        "not_after": "14-04-2026 23:59:59",
        "signature_algorithm": "SHA256-RSA",
        "dns_names": ["s252.cloud.kaspersky.com", "*.cloud.kaspersky.com"],
        "ip_addresses": ["101.46.33.250"],
        "is_valid_hostname": true
      },
      "cloud": {
        "provider": "Huawei Cloud",
        "region": "ap-southeast-1"
      },
      "ip_metadata": {
        "asn": 136907,
        "isp": "HUAWEI CLOUDS",
        "organization": "HUAWEI CLOUDS",
        "country_code": "SG",
        "country_name": "Singapore",
        "city_name": "Singapore",
        "region": "Central Region"
      },
      "network_ports": [8000, 8080, 8081, 9443],
      "network_services": [
        {
          "port": 8080,
          "type": "tcp",
          "service": ["https"],
          "httpstatuscode": 200,
          "httptitle": "Kaspersky Endpoint Security Cloud",
          "httpfavicon": "abeeb96320c2f5bec5e40c1d436836be",
          "banner": "200 OK\r\nContent-Type: text/html; charset=utf-8\r\n...",
          "category": ["Web-Servers"],
          "product": [
            {
              "name": "Microsoft ASP.NET",
              "version": "5.0",
              "cpe23": ["cpe:2.3:a:microsoft:asp.net:*:*:*:*:*:*:*:*"],
              "maincpe": "cpe:2.3:a:microsoft:asp.net"
            }
          ],
          "web": ["HSTS"],
          "ssljarm": "29d29d00029d29d00042d42d000000..."
        }
        // ... additional network services omitted
      ],
      "products": [
        {"name": "Microsoft-Kestrel", "version": ""},
        {"name": "Apache", "version": ""}
      ],
      "urls": [
        "https://s252.cloud.kaspersky.com:8080",
        "https://s252.cloud.kaspersky.com:8081"
      ],
      "web": ["HSTS", "Microsoft ASP.NET", "Windows Server", "Kestrel"]
    }
  ],
  "status": 200,
  "message": "",
  "metadata": {
    "all_results_count": 349,
    "available_results_for_user": 300,
    "domain": "kaspersky.com",
    "last_scanned": 1626577921,
    "max_results_for_user": 300,
    "timestamp": 1634004417,
    "user_plan": "advanced"
  }
}

Response Fields

Top-level fields

Field	Type	Description
domain	string	The queried domain
hosts	array	List of discovered host objects (see below)
status	integer	HTTP status code
message	string	Empty on success, error description on failure
metadata	object	Pagination and plan information

Host object

Field	Type	Description
host	string	Fully qualified hostname
domain	string	Parent domain
ip_address	string	Resolved IPv4 address
http_status_code	integer	HTTP response status code
http_title	string	HTML <title> of the page
is_live	boolean	Whether the host is currently reachable
is_resolvable	boolean	Whether DNS resolves to an IP
is_cloud	boolean	Whether hosted on a cloud provider
is_cdn	boolean	Whether served through a CDN
cdn	string	CDN provider name (if detected)
categories	array	Service categories (e.g., Web-Servers)
dns	object	DNS records: a, aaaa, cname, mx, ns, ptr, txt
cert_object	object	TLS certificate details
cloud	object	Cloud provider and region
ip_metadata	object	ASN, ISP, geolocation data
network_ports	array	List of open ports
network_services	array	Per-port service details (banner, product, TLS)
products	array	Detected software products with CPE identifiers
tags	array	Searchable tags for the host
web	array	Detected web technologies

Metadata object

Field	Type	Description
all_results_count	integer	Total hosts discovered for the domain
available_results_for_user	integer	Results returned based on plan
max_results_for_user	integer	Maximum results allowed by plan
domain	string	The queried domain
last_scanned	integer	Unix timestamp of last scan
timestamp	integer	Unix timestamp of the response
user_plan	string	Current user's plan tier

---

Get Subdomains

List all discovered subdomains/hosts for a given domain.

HTTP Request

GET https://fullhunt.io/api/v1/domain/<domain>/subdomains

URL Parameters

Parameter	Description
domain	The domain to query

Example Request

curl "https://fullhunt.io/api/v1/domain/kaspersky.com/subdomains" \
  -H "X-API-KEY: xxxx-xxxx-xxxx-xxxxxx"

Example Response

{
  "domain": "kaspersky.com",
  "hosts": ["kaspersky.com", "www.kaspersky.com", "xxx.kaspersky.com"],
  "status": 200,
  "message": "",
  "metadata": {
    "all_results_count": 349,
    "available_results_for_user": 300,
    "domain": "kaspersky.com",
    "last_scanned": 1626577921,
    "max_results_for_user": 300,
    "timestamp": 1634004387,
    "user_plan": "advanced"
  }
}

Response Fields

Field	Type	Description
domain	string	The queried domain
hosts	array	List of subdomain/host strings
status	integer	HTTP status code
message	string	Empty on success
metadata	object	Pagination and plan information (same as above)