Domain intelligence for ?domain=: registrar, creation/expiry dates and age (RDAP), live DNS (A/AAAA/NS/MX/CAA), SPF and DMARC email-auth posture, plus rule-based signals (new domain, expiring, mail without SPF/DMARC, registry hold). Deterministic, no AI. Data: RDAP registries and live DNS.