Robtex Free API

Free REST API for DNS, IP, and AS number lookups. Rate limited to 10 requests per hour per IP.

Base URL: https://freeapi.robtex.com/

Machine-readable spec: /api-docs.json (OpenAPI 3.0)

Try it: RapidAPI · npm SDK · Postman · SwaggerHub · GitHub

Need higher limits? Get unlimited access via Robtex on RapidAPI.

Response Formats

All endpoints support multiple response formats via the ?format= query parameter:

Format	Content-Type	Example
`json` (default)	application/json	`?format=json`
`jsonp`	application/javascript	`?callback=myFunc`
`xml`	application/xml	`?format=xml`
`ndjson`	application/x-ndjson	`?format=ndjson`
`sse`	text/event-stream	`?format=sse`
`markdown`	text/markdown	`?format=markdown`
`csv`	text/csv	`?format=csv`
`yaml`	text/yaml	`?format=yaml`
`html`	text/html	`?format=html`

JSONP shorthand: ?callback=myFunc implies format=jsonp. PDNS endpoints default to NDJSON.

Endpoints

/ipquery/{ip} — IP info, GeoIP, DNS records
/asquery/{asn} — AS networks
/pdns/forward/{domain} — Forward passive DNS
/pdns/reverse/{value} — Reverse passive DNS
/pdns/reverse-historic/{value} — Historic reverse passive DNS
/latest_lightning_channels — Returns the most recently opened Lightning Network channels, sorted by open time descending
/ip_reputation?ip= — Check an IP address reputation against 100+ real-time blocklists (DNSBLs)
/lookup_dns?hostname= — Lookup DNS records (A, AAAA, MX, NS, TXT, CNAME, SOA) for a given hostname
/reverse_lookup_dns_records?value= — Find hostnames that use a specific DNS record value
/reverse_lookup_mx?mx_server= — Find hostnames that use a specific mail server
/reverse_lookup_ns?nameserver= — Find hostnames that use a specific nameserver
/reverse_lookup_ip?ip= — Find hostnames that point to a specific IP address (IPv4 or IPv6)
/historic_reverse_lookup_ns?nameserver= — Find hostnames that *previously* used a specific nameserver but no longer do
/historic_reverse_lookup_mx?mx_server= — Find hostnames that *previously* used a specific mail server but no longer do
/historic_reverse_lookup_ip?ip= — Find hostnames that *previously* pointed to a specific IP address but no longer do
/lookup_mac?mac_address= — Look up the manufacturer/vendor of a network device by its MAC address
/lookup_as_whois?asn= — Lookup WHOIS information for an Autonomous System (AS) number from the RADB routing database
/lookup_lightning_node?pubkey= — Lookup a Lightning Network node by public key
/lookup_lightning_channel?channel_id= — Lookup a Lightning channel by channel ID
/lookup_lightning_channels_per_node?node= — Lookup all Lightning Network channels for a given node by public key
/get_recommended_lightning_peers?pubkey= — Get recommended Lightning Network peers for a given node
/search_lightning_nodes_by_alias?alias= — Search for Lightning Network nodes by partial alias match
/ipquery?ip= — Returns network info, geolocation, and DNS records for an IP address
/asquery?asn= — Returns networks associated with an AS number
/pdns_forward?domain= — Returns passive DNS records for a domain (A, AAAA, MX, NS, CNAME)
/pdns_reverse?value= — Returns domains that reference a given value
/pdns_reverse_historic?value= — Returns domains that previously referenced a given value but no longer do
/domain_rdap?domain= — Queries the authoritative RDAP registry for a domain
/parse_hostname?hostname= — Parse a hostname into its constituent parts using the Mozilla Public Suffix List (9700+ entries)
/is_subdomain?hostname= — Check whether a hostname is a subdomain (has labels beyond the registered domain)
/registered_domain?hostname= — Extract the registered domain (eTLD+1) from a hostname
/tld_info?tld= — Get information about a top-level domain or effective TLD
/dns_a?hostname= — Look up A (IPv4 address) records for a hostname
/dns_aaaa?hostname= — Look up AAAA (IPv6 address) records for a hostname
/dns_mx?hostname= — Look up MX (mail exchange) records for a hostname
/dns_ns?hostname= — Look up NS (nameserver) records for a hostname
/dns_txt?hostname= — Look up TXT records for a hostname
/dns_cname?hostname= — Look up CNAME (canonical name / alias) records for a hostname
/dns_soa?hostname= — Look up SOA (Start of Authority) record for a hostname
/dns_ptr?ip= — Look up PTR (reverse DNS) record for an IP address
/reverse_lookup_cname?target= — Find hostnames that have a CNAME record pointing to the specified target
/historic_reverse_lookup_cname?target= — Find hostnames that previously had a CNAME record pointing to the specified target but no longer do
/ip_geolocation?ip= — Get geographic location data for an IP address: country, city, region, latitude, longitude, timezone
/ip_network?ip= — Get the containing network (BGP route), AS number, AS name, and route description for an IP address
/ip_to_asn?ip= — Lightweight lookup: get just the AS number and netblock for an IP address
/ip_blocklist_check?ip= — Check an IP address against IPsum, FireHOL, Tor exit node lists, C2 indicators, Roskomnadzor (Russia), and other threat intelligence feeds
/ip_threat_intel?ip= — Combined threat intelligence: DNSBL listings, IPsum score, FireHOL lists, bad ASN flag, Tor exit status
/as_info?asn= — Get the name, organization, country, and description for an Autonomous System number
/as_prefixes?asn= — Get all IPv4 and IPv6 network prefixes (netblocks) announced by an Autonomous System
/domain_reputation?hostname= — Get comprehensive domain reputation: Majestic rank, Tranco rank, HaGeZi blocklist status, Blackbook malware status, phishing database status, HSTS preload status, and disposable email detection
/domain_ranking?hostname= — Get domain popularity rankings from five independent sources: Majestic Million (backlinks), Tranco top 1M (aggregated traffic), Cloudflare Radar (1
/domain_blocklist_check?hostname= — Check a domain against HaGeZi DNS blocklists, Steven Black unified hosts, Blackbook malware list, phishing databases, Roskomnadzor (Russia), and Citizen Lab censorship lists
/domain_shared_ip?hostname= — Find other domains hosted on the same IP address(es) as the target domain
/domain_shared_ns?hostname= — Find other domains using the same nameserver(s) as the target domain
/domain_shared_mx?hostname= — Find other domains using the same mail server(s) as the target domain
/check_email?email= — Verify an email address by connecting to its mail server via SMTP
/ping — Check if the API is responding
/lookup_bitcoin_transaction?txid= — Returns full transaction details: inputs with addresses and values, outputs with spent status, fee, size/weight, SegWit flag, and Lightning Network channel correlation
/lookup_bitcoin_address?address= — Returns address balance, total received/sent, transaction counts, address type (P2PKH, P2SH, P2WPKH, P2TR), first/last seen block, and ransomware/abuse flags
/lookup_bitcoin_block?height= — Returns block header (hash, timestamp, version, merkle root, difficulty, nonce), transaction count, and list of transaction IDs
/bitcoin_address_transactions?address= — Returns a paginated list of transactions involving a Bitcoin address
/bitcoin_transaction_spends?txid= — For a given transaction, returns which subsequent transactions consumed its outputs
/bitcoin_blockchain_stats?metric= — Returns cumulative blockchain metrics over a configurable block range

/ipquery/{ip}

Returns forward and reverse DNS, geolocation, and network data for an IP address. Response is JSON.

Example: https://freeapi.robtex.com/ipquery/199.19.54.1

{
  "status": "ok",
  "city": "Toronto",
  "country": "Canada",
  "as": 12041,
  "asname": "AFILIAS-NST Afilias Limited",
  "whoisdesc": "Afilias Canada, Corp. (ACC-308)",
  "routedesc": "REACH (Customer Route)",
  "bgproute": "199.19.54.0/24",
  "act": [{"o": "b0.org.afilias-nst.org", "t": 1498717654}],
  "pas": [{"o": "b0.org.afilias-nst.org", "t": 1501358830}]
}

Fields

status: "ok" on success
city, country: GeoIP location
as, asname: AS number and name
bgproute: BGP route prefix
act: Active (forward) DNS — PTR records
pas: Passive (reverse) DNS — domains pointing to this IP

/asquery/{asn}

Returns networks in the global BGP table for an AS number. Response is JSON.

Example: https://freeapi.robtex.com/asquery/1234

{
  "status": "ok",
  "nets": [
    {"n": "132.171.0.0/16", "inbgp": 1},
    {"n": "193.110.32.0/21", "inbgp": 1}
  ]
}

/pdns/forward/{domain}

Forward passive DNS lookup. Returns DNS records observed for a domain. Response is NDJSON (one JSON object per line).

Example: https://freeapi.robtex.com/pdns/forward/a.iana-servers.net

{"rrname":"a.iana-servers.net","rrdata":"199.43.135.53","rrtype":"A","time_first":1460751956,"time_last":1501399246,"count":18}
{"rrname":"a.iana-servers.net","rrdata":"2001:500:8f::53","rrtype":"AAAA","time_first":1460751956,"time_last":1501399246,"count":18}

/pdns/reverse/{value}

Reverse passive DNS lookup. Returns domains that reference a given value. Response is NDJSON.

Use the ?type= query parameter to select the record type:

?type=a (default) — domains with A/AAAA records pointing to an IP
?type=ns — domains using a nameserver
?type=mx — domains using a mail server

Examples

IP reverse: https://freeapi.robtex.com/pdns/reverse/199.43.132.53

{"rrname":"a.iana-servers.net","rrdata":"199.43.132.53","rrtype":"A","time_first":1441242410,"time_last":1460542918,"count":18}

NS reverse: https://freeapi.robtex.com/pdns/reverse/ns1.google.com?type=ns

{"rrname":"google.com","rrdata":"ns1.google.com","rrtype":"NS","time_first":1441242410,"time_last":1501399246,"count":42}

MX reverse: https://freeapi.robtex.com/pdns/reverse/aspmx.l.google.com?type=mx

{"rrname":"google.com","rrdata":"aspmx.l.google.com","rrtype":"MX","time_first":1441242410,"time_last":1501399246,"count":42}

/pdns/reverse-historic/{value}

Historic reverse passive DNS lookup. Returns domains that previously referenced a given value but no longer do. Useful for tracking infrastructure migrations. Response is NDJSON.

Supports the same ?type= parameter as /pdns/reverse/:

?type=a (default) — domains that previously had A/AAAA records pointing to an IP
?type=ns — domains that previously used a nameserver
?type=mx — domains that previously used a mail server

Examples

Historic NS reverse: https://freeapi.robtex.com/pdns/reverse-historic/dns1.cscdns.net?type=ns

{"rrname":"arthur.com","rrdata":"dns1.cscdns.net","rrtype":"NS","time_first":1441242410,"time_last":1501399246,"count":1}

Historic IP reverse: https://freeapi.robtex.com/pdns/reverse-historic/8.8.8.8

/latest_lightning_channels

Returns the most recently opened Lightning Network channels, sorted by open time descending. Response is JSON.

Example: /latest_lightning_channels

Parameters

Name	Type	Description
`count`	integer (default: `10`)	Number of channels to return (1-1000)

/ip_reputation?ip=

Check an IP address reputation against 100+ real-time blocklists (DNSBLs). Returns listing status, threat categories, AS info, and blocklist details. Response is JSON.

Example: /ip_reputation?ip=8.8.8.8

Parameters

Name	Type	Description
`ip`	string (required)	IPv4 or IPv6 address to check (e.g., 8.8.8.8, 2001:4860:4860::8888)

/lookup_dns?hostname=

Lookup DNS records (A, AAAA, MX, NS, TXT, CNAME, SOA) for a given hostname. Also returns domain reputation info (Majestic, Tranco rankings, blocklist status). Response is JSON.

Example: /lookup_dns?hostname=google.com

Parameters

Name	Type	Description
`hostname`	string (required)	Hostname or domain to lookup (e.g., example.com, www.example.com)

/reverse_lookup_dns_records?value=

Find hostnames that use a specific DNS record value. Query which hostnames point to an IP address, use a particular nameserver, or reference any DNS value. For example: 'which hostnames point to 1.2.3.4?' or 'which hostnames use chris.ns.cloudflare.com as their nameserver?' Response is JSON.

Example: /reverse_lookup_dns_records?value=1.2.3.4

Parameters

Name	Type	Description
`value`	string (required)	The DNS record value to search for (e.g., IP address, nameserver hostname, mail server, CNAME target)
`record_type`	`A` \| `AAAA` \| `NS` \| `MX` \| `CNAME` \| `TXT` (default: `A`)	Type of DNS record to search (A, AAAA, NS, MX, CNAME, TXT)
`limit`	integer (default: `100`)	Maximum number of hostnames to return
`offset`	integer (default: `0`)	Offset for pagination

/reverse_lookup_mx?mx_server=

Find hostnames that use a specific mail server. For example: which hostnames use aspmx.l.google.com as their mail server? Response is JSON.

Example: /reverse_lookup_mx?mx_server=aspmx.l.google.com

Parameters

Name	Type	Description
`mx_server`	string (required)	The mail server hostname to search for (e.g., aspmx.l.google.com, mx1.example.com)
`limit`	integer (default: `100`)	Maximum number of hostnames to return
`offset`	integer (default: `0`)	Offset for pagination

/reverse_lookup_ns?nameserver=

Find hostnames that use a specific nameserver. For example: which hostnames use chris.ns.cloudflare.com as their nameserver? Response is JSON.

Example: /reverse_lookup_ns?nameserver=chris.ns.cloudflare.com

Parameters

Name	Type	Description
`nameserver`	string (required)	The nameserver hostname to search for (e.g., chris.ns.cloudflare.com, ns1.example.com)
`limit`	integer (default: `100`)	Maximum number of hostnames to return
`offset`	integer (default: `0`)	Offset for pagination

/reverse_lookup_ip?ip=

Find hostnames that point to a specific IP address (IPv4 or IPv6). Searches both A and AAAA records. For example: which hostnames point to 1.2.3.4? Response is JSON.

Example: /reverse_lookup_ip?ip=1.2.3.4

Parameters

Name	Type	Description
`ip`	string (required)	The IP address to search for (IPv4 or IPv6)
`limit`	integer (default: `100`)	Maximum number of hostnames to return
`offset`	integer (default: `0`)	Offset for pagination

/historic_reverse_lookup_ns?nameserver=

Find hostnames that *previously* used a specific nameserver but no longer do. Tracks infrastructure migrations and past delegation relationships. Response is JSON.

Example: /historic_reverse_lookup_ns?nameserver=chris.ns.cloudflare.com

Parameters

Name	Type	Description
`nameserver`	string (required)	The nameserver hostname to search for (e.g., chris.ns.cloudflare.com, ns1.example.com)
`limit`	integer (default: `100`)	Maximum number of hostnames to return
`offset`	integer (default: `0`)	Offset for pagination

/historic_reverse_lookup_mx?mx_server=

Find hostnames that *previously* used a specific mail server but no longer do. Tracks email provider migrations and past MX relationships. Response is JSON.

Example: /historic_reverse_lookup_mx?mx_server=aspmx.l.google.com

Parameters

Name	Type	Description
`mx_server`	string (required)	The mail server hostname to search for (e.g., aspmx.l.google.com, mx1.example.com)
`limit`	integer (default: `100`)	Maximum number of hostnames to return
`offset`	integer (default: `0`)	Offset for pagination

/historic_reverse_lookup_ip?ip=

Find hostnames that *previously* pointed to a specific IP address but no longer do. Tracks hosting migrations and past IP relationships. Searches both A and AAAA records. Response is JSON.

Example: /historic_reverse_lookup_ip?ip=1.2.3.4

Parameters

Name	Type	Description
`ip`	string (required)	The IP address to search for (IPv4 or IPv6)
`limit`	integer (default: `100`)	Maximum number of hostnames to return
`offset`	integer (default: `0`)	Offset for pagination

/lookup_mac?mac_address=

Look up the manufacturer/vendor of a network device by its MAC address. Uses the official IEEE OUI (Organizationally Unique Identifier) database with ~30K entries. Response is JSON.

Example: /lookup_mac?mac_address=D8:A3:5C:12:34:56

Parameters

Name	Type	Description
`mac_address`	string (required)	MAC address to look up (e.g., D8:A3:5C:12:34:56, D8-A3-5C-12-34-56, or D8A35C123456). Only the first 6 hex characters (OUI prefix) are used.

/lookup_as_whois?asn=

Lookup WHOIS information for an Autonomous System (AS) number from the RADB routing database. Returns routing policy, network information, and administrative contacts. Response is JSON.

Example: /lookup_as_whois?asn=AS15169

Parameters

Name	Type	Description
`asn`	string (required)	AS number to lookup (e.g., "AS15169" or "15169" for Google)

/lookup_lightning_node?pubkey=

Lookup a Lightning Network node by public key. Returns node alias, peer count, channel count, and centrality ranking. Response is JSON.

Example: /lookup_lightning_node?pubkey=03864ef025fde8fb587d989186ce6a4a186895ee44a926bfc370e2c366597a3f8f

Parameters

Name	Type	Description
`pubkey`	string (required)	Compressed secp256k1 public key (66 hex chars)

/lookup_lightning_channel?channel_id=

Lookup a Lightning channel by channel ID. Supports numeric, block x txn x vout, or block:txn:vout formats. Response is JSON.

Example: /lookup_lightning_channel?channel_id=936795x1154x0

Parameters

Name	Type	Description
`channel_id`	string (required)	Lightning channel ID (numeric, blockxtxnxvout, or block:txn:vout format)

/lookup_lightning_channels_per_node?node=

Lookup all Lightning Network channels for a given node by public key. Response is JSON.

Example: /lookup_lightning_channels_per_node?node=03864ef025fde8fb587d989186ce6a4a186895ee44a926bfc370e2c366597a3f8f

Parameters

Name	Type	Description
`node`	string (required)	Compressed secp256k1 public key (66 hex chars)
`limit`	integer (default: `100`)	Maximum number of channels to return
`offset`	integer (default: `0`)	Offset for pagination

/get_recommended_lightning_peers?pubkey=

Get recommended Lightning Network peers for a given node. Returns nodes that are NOT currently peered with the specified node but would improve its centrality score if connected. Response is JSON.

Example: /get_recommended_lightning_peers?pubkey=03864ef025fde8fb587d989186ce6a4a186895ee44a926bfc370e2c366597a3f8f

Parameters

Name	Type	Description
`pubkey`	string (required)	Compressed secp256k1 public key (66 hex chars)
`limit`	integer (default: `10`)	Maximum number of recommended peers to return
`offset`	integer (default: `0`)	Offset for pagination

/search_lightning_nodes_by_alias?alias=

Search for Lightning Network nodes by partial alias match. Returns nodes whose aliases contain the search term (case-insensitive). Response is JSON.

Example: /search_lightning_nodes_by_alias?alias=ACINQ

Parameters

Name	Type	Description
`alias`	string (required)	Search term to match against node aliases
`limit`	integer (default: `20`)	Maximum number of nodes to return
`offset`	integer (default: `0`)	Offset for pagination

/ipquery?ip=

Returns network info, geolocation, and DNS records for an IP address. Response is JSON.

Example: /ipquery?ip=8.8.8.8

Parameters

Name	Type	Description
`ip`	string (required)	IP address to query

/asquery?asn=

Returns networks associated with an AS number. Response is JSON.

Example: /asquery?asn=15169

Parameters

Name	Type	Description
`asn`	integer (required)	AS number to query

/pdns_forward?domain=

Returns passive DNS records for a domain (A, AAAA, MX, NS, CNAME). Response is JSON.

Example: /pdns_forward?domain=google.com

Parameters

Name	Type	Description
`domain`	string (required)	Domain to look up

/pdns_reverse?value=

Returns domains that reference a given value. Use type=a (default) for IP, type=ns for nameserver, type=mx for mail server. Response is JSON.

Example: /pdns_reverse?value=8.8.8.8

Parameters

Name	Type	Description
`value`	string (required)	IP address, nameserver, or mail server hostname
`type`	`a` \| `ns` \| `mx` (default: `a`)	Record type

/pdns_reverse_historic?value=

Returns domains that previously referenced a given value but no longer do. Use type=a (default) for IP, type=ns for nameserver, type=mx for mail server. Response is JSON.

Example: /pdns_reverse_historic?value=8.8.8.8

Parameters

Name	Type	Description
`value`	string (required)	IP address, nameserver, or mail server hostname
`type`	`a` \| `ns` \| `mx` (default: `a`)	Record type

/domain_rdap?domain=

Queries the authoritative RDAP registry for a domain. Returns availability status (HTTP 404 = available), and for registered domains: registrar name, registration/expiration dates, nameservers, DNSSEC status, and domain status flags. Uses IANA bootstrap to find the correct RDAP server per TLD. Covers 590+ TLDs. Response is JSON.

Example: /domain_rdap?domain=google.com

Parameters

Name	Type	Description
`domain`	string (required)	Domain name to look up (e.g., example.com)

/parse_hostname?hostname=

Parse a hostname into its constituent parts using the Mozilla Public Suffix List (9700+ entries). Returns eTLD (effective TLD), registered domain, subdomain, labels, and depth. Handles multi-level eTLDs (co.uk, co.jp, com.au) and platform suffixes (github.io, herokuapp.com). Response is JSON.

Example: /parse_hostname?hostname=www.mail.example.co.uk

Parameters

Name	Type	Description
`hostname`	string (required)	Hostname to parse (e.g. www.mail.example.co.uk)

/is_subdomain?hostname=

Check whether a hostname is a subdomain (has labels beyond the registered domain). Uses the Mozilla Public Suffix List for accurate eTLD detection. Response is JSON.

Example: /is_subdomain?hostname=www.example.com

Parameters

Name	Type	Description
`hostname`	string (required)	Hostname to check

/registered_domain?hostname=

Extract the registered domain (eTLD+1) from a hostname. For example, www.mail.example.co.uk returns example.co.uk. Response is JSON.

Example: /registered_domain?hostname=blog.shop.example.co.jp

Parameters

Name	Type	Description
`hostname`	string (required)	Hostname to extract registered domain from

/tld_info?tld=

Get information about a top-level domain or effective TLD. Returns whether it is in the Public Suffix List, how many sub-suffixes exist, and classification (ccTLD, gTLD, or infrastructure). Response is JSON.

Example: /tld_info?tld=co.uk

Parameters

Name	Type	Description
`tld`	string (required)	TLD or eTLD to look up (e.g. "uk", "co.uk", "github.io")

/dns_a?hostname=

Look up A (IPv4 address) records for a hostname. Response is JSON.

Example: /dns_a?hostname=google.com

Parameters

Name	Type	Description
`hostname`	string (required)	Hostname to look up

/dns_aaaa?hostname=

Look up AAAA (IPv6 address) records for a hostname. Response is JSON.

Example: /dns_aaaa?hostname=google.com

Parameters

Name	Type	Description
`hostname`	string (required)	Hostname to look up

/dns_mx?hostname=

Look up MX (mail exchange) records for a hostname. Returns mail servers and their priorities. Response is JSON.

Example: /dns_mx?hostname=google.com

Parameters

Name	Type	Description
`hostname`	string (required)	Hostname to look up

/dns_ns?hostname=

Look up NS (nameserver) records for a hostname. Response is JSON.

Example: /dns_ns?hostname=google.com

Parameters

Name	Type	Description
`hostname`	string (required)	Hostname to look up

/dns_txt?hostname=

Look up TXT records for a hostname. Includes SPF, DKIM, DMARC, domain verification, and other text records. Response is JSON.

Example: /dns_txt?hostname=google.com

Parameters

Name	Type	Description
`hostname`	string (required)	Hostname to look up

/dns_cname?hostname=

Look up CNAME (canonical name / alias) records for a hostname. Response is JSON.

Example: /dns_cname?hostname=www.github.com

Parameters

Name	Type	Description
`hostname`	string (required)	Hostname to look up

/dns_soa?hostname=

Look up SOA (Start of Authority) record for a hostname. Returns primary nameserver, admin email, serial number, and timing values. Response is JSON.

Example: /dns_soa?hostname=google.com

Parameters

Name	Type	Description
`hostname`	string (required)	Hostname to look up

/dns_ptr?ip=

Look up PTR (reverse DNS) record for an IP address. Returns the hostname associated with the IP. Response is JSON.

Example: /dns_ptr?ip=8.8.8.8

Parameters

Name	Type	Description
`ip`	string (required)	IPv4 or IPv6 address

/reverse_lookup_cname?target=

Find hostnames that have a CNAME record pointing to the specified target. Useful for CDN and load balancer investigations. Response is JSON.

Example: /reverse_lookup_cname?target=cdn.cloudflare.net

Parameters

Name	Type	Description
`target`	string (required)	CNAME target hostname (e.g. cdn.cloudflare.net)
`limit`	integer (default: `100`)	Max results
`offset`	integer (default: `0`)	Offset for pagination

/historic_reverse_lookup_cname?target=

Find hostnames that previously had a CNAME record pointing to the specified target but no longer do. Tracks CDN and infrastructure migrations. Response is JSON.

Example: /historic_reverse_lookup_cname?target=cdn.cloudflare.net

Parameters

Name	Type	Description
`target`	string (required)	CNAME target hostname
`limit`	integer (default: `100`)	Max results
`offset`	integer (default: `0`)	Offset for pagination

/ip_geolocation?ip=

Get geographic location data for an IP address: country, city, region, latitude, longitude, timezone. Response is JSON.

Example: /ip_geolocation?ip=8.8.8.8

Parameters

Name	Type	Description
`ip`	string (required)	IPv4 or IPv6 address

/ip_network?ip=

Get the containing network (BGP route), AS number, AS name, and route description for an IP address. Response is JSON.

Example: /ip_network?ip=8.8.8.8

Parameters

Name	Type	Description
`ip`	string (required)	IPv4 or IPv6 address

/ip_to_asn?ip=

Lightweight lookup: get just the AS number and netblock for an IP address. Fastest way to map IP to ASN. Response is JSON.

Example: /ip_to_asn?ip=1.1.1.1

Parameters

Name	Type	Description
`ip`	string (required)	IPv4 or IPv6 address

/ip_blocklist_check?ip=

Check an IP address against IPsum, FireHOL, Tor exit node lists, C2 indicators, Roskomnadzor (Russia), and other threat intelligence feeds. Returns which lists the IP appears on and threat scores. Response is JSON.

Example: /ip_blocklist_check?ip=185.220.101.1

Parameters

Name	Type	Description
`ip`	string (required)	IPv4 or IPv6 address to check

/ip_threat_intel?ip=

Combined threat intelligence: DNSBL listings, IPsum score, FireHOL lists, bad ASN flag, Tor exit status. Comprehensive threat assessment for an IP address. Response is JSON.

Example: /ip_threat_intel?ip=185.220.101.1

Parameters

Name	Type	Description
`ip`	string (required)	IPv4 or IPv6 address

/as_info?asn=

Get the name, organization, country, and description for an Autonomous System number. Lightweight version of as_whois. Response is JSON.

Example: /as_info?asn=AS15169

Parameters

Name	Type	Description
`asn`	string (required)	AS number (e.g. "AS15169" or "15169")

/as_prefixes?asn=

Get all IPv4 and IPv6 network prefixes (netblocks) announced by an Autonomous System. Returns BGP-visible routes. Response is JSON.

Example: /as_prefixes?asn=AS13335

Parameters

Name	Type	Description
`asn`	string (required)	AS number (e.g. "AS15169" or "15169")

/domain_reputation?hostname=

Get comprehensive domain reputation: Majestic rank, Tranco rank, HaGeZi blocklist status, Blackbook malware status, phishing database status, HSTS preload status, and disposable email detection. Response is JSON.

Example: /domain_reputation?hostname=google.com

Parameters

Name	Type	Description
`hostname`	string (required)	Domain to check

/domain_ranking?hostname=

Get domain popularity rankings from five independent sources: Majestic Million (backlinks), Tranco top 1M (aggregated traffic), Cloudflare Radar (1.1.1.1 DNS query popularity), Cisco Umbrella (OpenDNS query popularity), and Chrome UX Report (real Chrome user traffic). Response is JSON.

Example: /domain_ranking?hostname=github.com

Parameters

Name	Type	Description
`hostname`	string (required)	Domain to check

/domain_blocklist_check?hostname=

Check a domain against HaGeZi DNS blocklists, Steven Black unified hosts, Blackbook malware list, phishing databases, Roskomnadzor (Russia), and Citizen Lab censorship lists. Returns which lists the domain appears on. Response is JSON.

Example: /domain_blocklist_check?hostname=example.com

Parameters

Name	Type	Description
`hostname`	string (required)	Domain to check

/domain_shared_ip?hostname=

Find other domains hosted on the same IP address(es) as the target domain. Resolves the domain's A records, then performs reverse IP lookups for each. Response is JSON.

Example: /domain_shared_ip?hostname=example.com

Parameters

Name	Type	Description
`hostname`	string (required)	Domain to check
`limit`	integer (default: `100`)	Max results per IP

/domain_shared_ns?hostname=

Find other domains using the same nameserver(s) as the target domain. Resolves the domain's NS records, then performs reverse NS lookups for each. Response is JSON.

Example: /domain_shared_ns?hostname=example.com

Parameters

Name	Type	Description
`hostname`	string (required)	Domain to check
`limit`	integer (default: `100`)	Max results per NS

/domain_shared_mx?hostname=

Find other domains using the same mail server(s) as the target domain. Resolves the domain's MX records, then performs reverse MX lookups for each. Response is JSON.

Example: /domain_shared_mx?hostname=example.com

Parameters

Name	Type	Description
`hostname`	string (required)	Domain to check
`limit`	integer (default: `100`)	Max results per MX

/check_email?email=

Verify an email address by connecting to its mail server via SMTP. Checks MX records, tests if the address is accepted (RCPT TO), detects catch-all domains, and reports TLS support. Results are RAM-cached for 1 hour. Response is JSON.

Example: /check_email?email=user@gmail.com

Parameters

Name	Type	Description
`email`	string (required)	Email address to verify (e.g., user@example.com)

/ping

Check if the API is responding. Returns status and server timestamp. Response is JSON.

Example: /ping

/lookup_bitcoin_transaction?txid=

Returns full transaction details: inputs with addresses and values, outputs with spent status, fee, size/weight, SegWit flag, and Lightning Network channel correlation. Supports both confirmed and mempool transactions. Response is JSON.

Example: /lookup_bitcoin_transaction?txid=4a5e1e4baab89f3a32518a88c31bc87f618f76673e2cc77ab2127b7afdeda33b

Parameters

Name	Type	Description
`txid`	string (required)	Transaction ID (64 hex characters)

/lookup_bitcoin_address?address=

Returns address balance, total received/sent, transaction counts, address type (P2PKH, P2SH, P2WPKH, P2TR), first/last seen block, and ransomware/abuse flags. Supports all Bitcoin address formats. Response is JSON.

Example: /lookup_bitcoin_address?address=1A1zP1eP5QGefi2DMPTfTL5SLmv7DivfNa

Parameters

Name	Type	Description
`address`	string (required)	Bitcoin address (P2PKH, P2SH, Bech32, Bech32m)

/lookup_bitcoin_block?height=

Returns block header (hash, timestamp, version, merkle root, difficulty, nonce), transaction count, and list of transaction IDs. Supports lookup by block height. Response is JSON.

Example: /lookup_bitcoin_block?height=800000

Parameters

Name	Type	Description
`height`	integer (required)	Block height (0 = genesis block)

/bitcoin_address_transactions?address=

Returns a paginated list of transactions involving a Bitcoin address. Filter by direction: received (incoming funds), sent (outgoing funds), or all. Returns up to 100 transactions per call, sorted by block height descending (most recent first). Response is JSON.

Example: /bitcoin_address_transactions?address=1A1zP1eP5QGefi2DMPTfTL5SLmv7DivfNa

Parameters

Name	Type	Description
`address`	string (required)	Bitcoin address
`direction`	`received` \| `sent` \| `all` (default: `all`)	Transaction direction filter

/bitcoin_transaction_spends?txid=

For a given transaction, returns which subsequent transactions consumed its outputs. Useful for UTXO tracking and chain analysis. Shows the spending txid for each output. Response is JSON.

Example: /bitcoin_transaction_spends?txid=4a5e1e4baab89f3a32518a88c31bc87f618f76673e2cc77ab2127b7afdeda33b

Parameters

Name	Type	Description
`txid`	string (required)	Transaction ID (64 hex characters)

/bitcoin_blockchain_stats?metric=

Returns cumulative blockchain metrics over a configurable block range. Available metrics include: txs, fees, segwittx, inputs, outputs, insats, outsats, btcusd, volusd, unspentoutputs, fullyspent, unspentsats, addresses, satoshiblocks, clnopen, clnclose, satlnopen, satlnclose, basereward, blockreward, batched, rbf, version2tx, lowestfee, and more. Returns sampled data points suitable for charting. Response is JSON.

Example: /bitcoin_blockchain_stats?metric=txs

Parameters

Name	Type	Description
`metric`	string (required)	Metric name (e.g., txs, fees, segwittx, btcusd, clnopen)
`startBlock`	integer (default: `0`)	Start block height
`endBlock`	integer	End block height (defaults to latest)
`samples`	integer (default: `200`)	Number of data points to return (evenly spaced across range)

Rate Limiting

The free API uses a token bucket: 10 requests per hour per IP, with slots regenerating gradually (1 every 6 minutes) instead of resetting all at once. This allows a burst of up to 10 requests, then a sustained rate of ~1 request per 6 minutes. Exceeding the limit returns HTTP 429:

{"status": "ratelimited", "ip": "your.ip.here", "message": "Rate limit exceeded (10 req/hr). Get higher limits via RapidAPI.", "upgrade": "https://rapidapi.com/robtex/api/robtex"}

Need Higher Limits?

Get higher rate limits via Robtex on RapidAPI. All 50 endpoints, single API key.

Plan	Price	Requests/mo
Basic	Free	500
Pro	$19/mo	50,000
Ultra	$49/mo	250,000
Mega	$99/mo	1,000,000

Unauthorized usage will be detected and blocked. The API is provided as-is on a best-effort basis. Specifications can change without prior notice.