---
title: "Domain Lookup"
method: GET
path: "/domain-lookup"
tags: ["Security and Networking"]
---

# Domain Lookup

`GET /domain-lookup`

Retrieve domain name details and detect potentially malicious or dangerous domains

## Query parameters

- `host` string, required
- `live` boolean

## Response `200`

OK

- DomainLookupResponse — Structure of domain-lookup
  - `domain` string, required — The primary domain name excluding any subdomains. This is also referred to as the second-level domain (SLD)
  - `is-malicious` boolean, required — Consider this domain malicious as it is currently listed on at least 1 blocklist
  - `blocklists` string[], required — An array of strings indicating which blocklist categories this domain is listed on. Current possible values are: <br> <ul> <li>phishing - Domain has recently been hosting phishing links or involved in the sending of phishing messages</li> <li>malware - Domain has recently been hosting malware or involved in the distribution of malware</li> <li>spam - Domain has recently been sending spam either directly or indirectly</li> <li>anonymizer - Domain is involved in anonymizer activity such as disposable email, hosting proxies or tor services</li> <li>nefarious - Domain is involved in nefarious or malicious activity such as hacking, fraud or other abusive behavior</li> </ul>
  - `sensors` BlocklistSensor[], required — An array of objects containing details on which specific blocklist sensors have detected this domain
    - `id` integer, required — The sensor ID. This is a permanent and unique ID for each sensor
    - `blocklist` string, required — The primary blocklist category this sensor belongs to
    - `description` string, required — Contains details about the sensor source and what type of malicious activity was detected
  - `valid` boolean, required — True if a valid domain was found. For a domain to be considered valid it must be registered and have valid DNS NS records
  - `fqdn` string, required — The fully qualified domain name (FQDN)
  - `is-subdomain` boolean, required — Is the FQDN a subdomain of the primary domain
  - `tld` string, required — The top-level domain (TLD)
  - `tld-cc` string, required — For a country code top-level domain (ccTLD) this will contain the associated ISO 2-letter country code
  - `rank` integer, required — The domains estimated global traffic rank with the highest rank being 1. A value of 0 indicates the domain is currently ranked outside of the top 1M of domains
  - `is-gov` boolean, required — Is this domain under a government or military TLD
  - `is-opennic` boolean, required — Is this domain under an OpenNIC TLD
  - `is-pending` boolean, required — True if this domain is unseen and is currently being processed in the background. This field only matters when the 'live' lookup setting has been explicitly disabled and indicates that not all domain data my be present yet
  - `is-adult` boolean, required — This domain is hosting adult content such as porn, webcams, escorts, etc
  - `registered-date` string, required — The ISO date this domain was registered or first seen on the internet. An empty value indicates we could not reliably determine the date
  - `age` integer, required — The number of days since the domain was registered. A domain age of under 90 days is generally considered to be potentially risky. A value of 0 indicates no registration date was found for this domain
  - `registrar-name` string, required — The name of the domain registrar owning this domain
  - `registrar-id` integer, required — The IANA registrar ID (0 if no registrar ID was found)
  - `dns-provider` string, required — The primary domain of the DNS provider for this domain
  - `mail-provider` string, required — The primary domain of the email provider for this domain. An empty value indicates the domain has no valid MX records
  - `expiry-date` string, required — The ISO date this domain is due to expire. An empty value indicates we could not reliably determine the date
  - `mail-status` string, required — The status of the domains mail configuration, possible values are: <br> <ul> <li>ok - the domain is in working order and can receive email</li> <li>invalid - the domain is not a conformant hostname. May contain invalid syntax or characters</li> <li>no-service - the domain owner has indicated there is no mail service on the domain (also known as the 'Null MX')</li> <li>no-mail - the domain has no valid MX records so cannot receive email</li> <li>mx-invalid - MX records contain invalid or non-conformant hostname values</li> <li>mx-bogon - MX records point to bogon IP addresses</li> <li>resolv-error - MX records do not resolve to any valid IP addresses</li> <li>unknown - mail status is currently unknown (the domain may still be pending processing)</li> </ul>
  - `website-status` string, required — The status of the domains website configuration, possible values are: <br> <ul> <li>ok - the domain has a valid and working website</li> <li>no-http - the domain has website records but the HTTP servers are unresponsive or dead</li> <li>no-ip - the domain has no valid A or AAAA website records</li> <li>bogon-ip - the domains website records point to bogon or invalid IP addresses</li> <li>parked - the domain has a working website but indicates it is currently parked or for sale</li> <li>unknown - website status is currently unknown (the domain may still be pending processing)</li> </ul>
  - `website-provider` string, required — The primary domain of the website hosting provider for this domain. An empty value indicates the domain has no active website provider

## Other responses

- `400` — Your API request has been rejected. Check error code for details
- `403` — You have failed to authenticate
- `500` — We messed up, sorry! Your request has caused a fatal exception
- `default` — We messed up, sorry! Your request has caused an error

---

[API](https://skmtc.net/neutrinoapi/apis/neutrino-api.md) · [All operations](https://skmtc.net/neutrinoapi/apis/neutrino-api/llms.txt) · [OpenAPI document](https://skmtc-service-staging.skmtc.workers.dev/v1/apis/neutrinoapi/neutrino-api/revisions/4ebd6b56de42/schema)