Guides
These guides are the documentation the MCP server gives AI assistants through
the datapulse_help tool, published here so you can read it too. Ask your
assistant to “check the DataPulse help on typosquatting” (or any other topic)
and it will read the same page.
| DataPulse Methodology and Data Coverage | Corpus methodology and coverage — PSL+1 unit of analysis, registry scope, discovery sources (zone files, realtime CT, proprietary), and the active-and-functioning quality gate |
| DataPulse Quick Reference | Cheat sheet for AI - tool selection, response patterns, common tasks |
| How names and URLs are normalized | How names and URLs are normalized — what every input goes through, which tools reduce to the registrable domain and which keep the hostname, single labels and underscores, submitted_domain, and how a bulk receipt accounts for every input |
| DNS Lookup Tools | DNS lookup with datapulse_live_dns — parameters, response format, DNSSEC |
| Domain Health Probe | Domain health probe with datapulse_live_domain_health — DNS, DNSSEC, delegation, nameserver audit, TLS, HTTP/HSTS, redirects, QUIC, mail posture, CAA, TLSA; reading ok / errors / warnings |
| Domain Health Report Fields | Domain health report fields — every key of the report with its type and meaning, the empty-versus-absent conventions, and the enumerations |
| Domain Label Search (searchlabels) | Domain label search - find typosquatting, impersonation, and lookalike domains |
| Domain Search (dpsearch) | Domain name search (deprecated — use searchlabels instead) |
| RDAP Registration Lookup Guide (Domains & IP Addresses) | Registration lookups for domains and IP addresses (datapulse_live_rdap), response format, status codes, GDPR |
| Registrant Lookup and Reverse WHOIS — What Is (and Isn't) Possible | Registrant lookup / reverse WHOIS — why owner contact data is GDPR-redacted, which queries are not possible, and what to do instead |
| Hosting and Nameserver History | Hosting / nameserver history with datapulse_dns_dphistory (a/c/d listing timeline) |
| RDAP History | Historical RDAP — registrar transfers and abuse-contact changes over time |
| Why Is a Domain Registered But Missing / Not Resolving? | Why a domain is registered but missing / not resolving — registered vs active, EPP holds, last_changed usage, diagnosis workflow |
| Domain Tech Similarity (datapulse_dns_dptechsim) | Infrastructure similarity search - find domains with similar DNS fingerprints |
| Registrar Lookup (datapulse_dns_registrar) | Registrar lookup - resolve IANA IDs to names, search registrars |
| DNS Neighborhood (datapulse_dns_neighborhood) | DNS cluster neighborhood - cluster membership, metadata, exemplar domains |
| Bulk Registration Clusters (datapulse_dns_regclusters) | Bulk registration clusters - summary → drill-in by registrar ID |
| Detecting Malicious Bulk Registrations | Detecting malicious bulk registrations - red flags, triage, investigation workflow |
| Web Scraping & Live Lookup Tools | Web scraping, entity extraction, and live DNS/RDAP lookup tools |
| Email Security Analysis | SPF, DKIM, DMARC analysis patterns |
| Domain Reconnaissance | Full domain intelligence gathering workflow |
| Shadow IT Investigation | Detecting possible shadow IT — use domain overview and tech similarity to find and validate candidate domains |
| Subdomain Cloaking | Investigating cloaked hostnames that hide attacker control behind trusted-looking subdomains |
| Link Wrappers, Rewriters and Shorteners | Link wrappers, rewriters and shorteners — recognizing the class by its shape, finding the destination, who inserted it, and why neither a wrapper nor its absence is a verdict |
| Typo-Squatting Detection | Detecting typo-squatting and defensive registrations |
| Brand-Adjacent Domains | Brand-adjacent domains — correctly-spelled brand+product names that pass the age, redirect, and MX checks; what resolves control instead |
| Phishing Simulation Domains | Phishing-simulation domains — sourced vendor domains (Cofense PhishMe, Microsoft Attack simulation training), the exact-match rule, lookalikes, and what to tell the user |
| DisputeDB — UDRP Legal Research | UDRP legal research — case law, policy, and guidance vector search |
| Authentication | OAuth 2.1 authentication details |
| ICANN 2026 Round Applicant Guidebook (agb) | ICANN 2026 Round Applicant Guidebook (V2-2026.04.24) — chapters, semantic search, eligibility, fees, evaluation |