v1

latestSwagger 2.02026-07-132830204.5 KB

Security and Networking

Domain Lookup

Retrieve domain name details and detect potentially malicious or dangerous domains

get/domain-lookup

Query parameters

hoststring required

A domain name, hostname, FQDN, URL, HTML link or email address to lookup

liveboolean

For domains that we have never seen before then perform various live checks and realtime reconnaissance. <br> NOTE: this option may add additional non-deterministic delay to the request, if you require consistently fast API response times or just want to check our domain blocklists then you can disable this option

Response

domainstring required

The primary domain name excluding any subdomains. This is also referred to as the second-level domain (SLD)

is-maliciousboolean required

Consider this domain malicious as it is currently listed on at least 1 blocklist

blocklistsstring[] required

An array of strings indicating which blocklist categories this domain is listed on. Current possible values are: <br> <ul> <li>phishing - Domain has recently been hosting phishing links or involved in the sending of phishing messages</li> <li>malware - Domain has recently been hosting malware or involved in the distribution of malware</li> <li>spam - Domain has recently been sending spam either directly or indirectly</li> <li>anonymizer - Domain is involved in anonymizer activity such as disposable email, hosting proxies or tor services</li> <li>nefarious - Domain is involved in nefarious or malicious activity such as hacking, fraud or other abusive behavior</li> </ul>

validboolean required

True if a valid domain was found. For a domain to be considered valid it must be registered and have valid DNS NS records

fqdnstring required

The fully qualified domain name (FQDN)

is-subdomainboolean required

Is the FQDN a subdomain of the primary domain

tldstring required

The top-level domain (TLD)

tld-ccstring required

For a country code top-level domain (ccTLD) this will contain the associated ISO 2-letter country code

rankinteger required

The domains estimated global traffic rank with the highest rank being 1. A value of 0 indicates the domain is currently ranked outside of the top 1M of domains

is-govboolean required

Is this domain under a government or military TLD

is-opennicboolean required

Is this domain under an OpenNIC TLD

is-pendingboolean required

True if this domain is unseen and is currently being processed in the background. This field only matters when the 'live' lookup setting has been explicitly disabled and indicates that not all domain data my be present yet

is-adultboolean required

This domain is hosting adult content such as porn, webcams, escorts, etc

registered-datestring required

The ISO date this domain was registered or first seen on the internet. An empty value indicates we could not reliably determine the date

ageinteger required

The number of days since the domain was registered. A domain age of under 90 days is generally considered to be potentially risky. A value of 0 indicates no registration date was found for this domain

registrar-namestring required

The name of the domain registrar owning this domain

registrar-idinteger required

The IANA registrar ID (0 if no registrar ID was found)

dns-providerstring required

The primary domain of the DNS provider for this domain

mail-providerstring required

The primary domain of the email provider for this domain. An empty value indicates the domain has no valid MX records

expiry-datestring required

The ISO date this domain is due to expire. An empty value indicates we could not reliably determine the date

mail-statusstring required

The status of the domains mail configuration, possible values are: <br> <ul> <li>ok - the domain is in working order and can receive email</li> <li>invalid - the domain is not a conformant hostname. May contain invalid syntax or characters</li> <li>no-service - the domain owner has indicated there is no mail service on the domain (also known as the 'Null MX')</li> <li>no-mail - the domain has no valid MX records so cannot receive email</li> <li>mx-invalid - MX records contain invalid or non-conformant hostname values</li> <li>mx-bogon - MX records point to bogon IP addresses</li> <li>resolv-error - MX records do not resolve to any valid IP addresses</li> <li>unknown - mail status is currently unknown (the domain may still be pending processing)</li> </ul>

website-statusstring required

The status of the domains website configuration, possible values are: <br> <ul> <li>ok - the domain has a valid and working website</li> <li>no-http - the domain has website records but the HTTP servers are unresponsive or dead</li> <li>no-ip - the domain has no valid A or AAAA website records</li> <li>bogon-ip - the domains website records point to bogon or invalid IP addresses</li> <li>parked - the domain has a working website but indicates it is currently parked or for sale</li> <li>unknown - website status is currently unknown (the domain may still be pending processing)</li> </ul>

website-providerstring required

The primary domain of the website hosting provider for this domain. An empty value indicates the domain has no active website provider

Example response

{
  "age": 4447,
  "blocklists": [],
  "dns-provider": "constellix.com",
  "domain": "neutrinoapi.com",
  "expiry-date": "2031-09-15",
  "fqdn": "neutrinoapi.com",
  "is-adult": false,
  "is-gov": false,
  "is-malicious": false,
  "is-opennic": false,
  "is-pending": false,
  "is-subdomain": false,
  "mail-provider": "isx.net.nz",
  "mail-status": "ok",
  "rank": 746021,
  "registered-date": "2013-09-15",
  "registrar-id": 468,
  "registrar-name": "Amazon Registrar, Inc.",
  "sensors": [],
  "tld": "com",
  "tld-cc": "",
  "valid": true,
  "website-provider": "cloud.google.com",
  "website-status": "ok"
}