NetAPI

Is a domain name or IP address in the NetAPI compromised feed (malware, phishing, abuse)? Returns whether it was seen in the last 24 hours (listed_now), ever (listed_ever), first/last seen dates, the block reason and the registrar. Subdomains are matched against their parent domains too. Free, no account needed.

check_compromised

Number of domains using a DNS (nameserver) provider, its market share and rank, share change over 30 days and one year, one-year growth. Matches by alias ("cloudflare"), name or nameserver root ("awsdns"). The returned alias is what get_download_url takes as dns_alias for the list of all domains using the provider. Free.

dns_provider_info

Nameservers, hostname, server IP and country, registration and expiration dates and the registrar of one domain, from the NetAPI dataset. Needs a NetAPI account with an active plan (any plan).

lookup_domain

Size, rank and abuse figures of a domain registrar: number of domains, rank by size, compromised domains and abuse rate versus the overall rate, link to the registrar page. Matches by brand ("GoDaddy"), legal name or numeric id. The returned id is what get_download_url takes as registrar_id for the list of all domains of the registrar. Free.

registrar_info

A temporary link (valid 24 hours) to a NetAPI file. Source, exactly one of: zone_tld (the domains of a zone, or "all-zones"; filter active / new in the last 24 h / deleted in the last 24 h), dns_alias (all domains using a DNS provider, alias from dns_provider_info) or registrar_id (all domains of a registrar, id from registrar_info). Two file types, requested separately: "list" = domain names only (any plan), "dataset" = one row per domain with nameservers, hostname, hosting IP and its country, emails and phone numbers (registrar datasets: registration and expiry dates instead of nameservers and hostname; Plus or Pro plan). Gzip CSV by default. Download the file with the returned URL; do not try to read it through this server.

get_download_url

Every TLD NetAPI tracks (1,584 zones) with active domains, new and deleted domains in the last 24 hours, whether it is a ccTLD and whether it is updated daily. Filter by minimum size or ccTLD / gTLD. Free.

list_zones

The most popular domains of one TLD or country (a slice of the NetAPI Top 1M), e.g. the top websites of Germany (.de) or of .io, with their global rank. A country means its ccTLD: sites of that country on .com are not included. Available for the ~80 TLDs with at least 1,000 domains in the Top 1M. Up to 1,000 rows via offset/limit; the full slice is a free CSV linked in the answer. Pass tld or country. Free.

top_websites

A slice of the NetAPI Top 1 Million most popular domains, ordered by rank. The complete list is a free daily CSV (https://netapi.com/netapi_top1mln.csv, CC BY 4.0). Free.

top_1m

The NetAPI account connected to this server: plan, expiry date and the request limits that apply. Needs a token.

account_info

Position of a domain in the NetAPI Top 1 Million most popular domains (1 = most popular) and its rank inside its own TLD. Rebuilt daily from SEO / link-graph and traffic signals. Free.

domain_rank