# Domains ## Get Domain Details `intel.domains.get(DomainGetParams**kwargs) -> Domain` **get** `/accounts/{account_id}/intel/domain` Gets security details and statistics about a domain. ### Parameters - `account_id: str` Identifier. - `domain: Optional[str]` - `skip_dns: Optional[bool]` Skip DNS resolution lookups for faster response. - `skip_ranking: Optional[bool]` Skip the domain ranking lookup for faster responses. Defaults to `false` (ranking is included). Set to `true` to opt out — primarily used by callers like Cloudflare Radar that need to avoid a circular dependency when building the domain details page. Note: the bulk endpoint (`/intel/domain/bulk`) uses opposite defaults — see `include_ranking` there. ### Returns - `class Domain: …` - `additional_information: Optional[AdditionalInformation]` Additional information related to the host name. - `suspected_malware_family: Optional[str]` Suspected DGA malware family. - `application: Optional[Application]` Application that the hostname belongs to. - `id: Optional[int]` - `name: Optional[str]` - `content_categories: Optional[List[ContentCategory]]` - `id: Optional[int]` - `name: Optional[str]` - `super_category_id: Optional[int]` - `domain: Optional[str]` - `inherited_content_categories: Optional[List[InheritedContentCategory]]` - `id: Optional[int]` - `name: Optional[str]` - `super_category_id: Optional[int]` - `inherited_from: Optional[str]` Domain from which `inherited_content_categories` and `inherited_risk_types` are inherited, if applicable. - `inherited_risk_types: Optional[List[InheritedRiskType]]` - `id: Optional[int]` - `name: Optional[str]` - `super_category_id: Optional[int]` - `popularity_rank: Optional[int]` Global Cloudflare 100k ranking for the last 30 days, if available for the hostname. The top ranked domain is 1, the lowest ranked domain is 100,000. - `resolves_to_refs: Optional[List[ResolvesToRef]]` Specifies a list of references to one or more IP addresses or domain names that the domain name currently resolves to. - `id: Optional[str]` STIX 2.1 identifier: https://docs.oasis-open.org/cti/stix/v2.1/cs02/stix-v2.1-cs02.html#_64yvzeku5a5c. - `value: Optional[str]` IP address or domain name. - `risk_score: Optional[float]` Hostname risk score, which is a value between 0 (lowest risk) to 1 (highest risk). - `risk_types: Optional[List[RiskType]]` - `id: Optional[int]` - `name: Optional[str]` - `super_category_id: Optional[int]` ### Example ```python import os from cloudflare import Cloudflare client = Cloudflare( api_token=os.environ.get("CLOUDFLARE_API_TOKEN"), # This is the default and can be omitted ) domain = client.intel.domains.get( account_id="023e105f4ecef8ad9ca31a8372d0c353", ) print(domain.additional_information) ``` #### Response ```json { "errors": [ { "code": 1000, "message": "message", "documentation_url": "documentation_url", "source": { "pointer": "pointer" } } ], "messages": [ { "code": 1000, "message": "message", "documentation_url": "documentation_url", "source": { "pointer": "pointer" } } ], "success": true, "result": { "additional_information": { "suspected_malware_family": "" }, "application": { "id": 0, "name": "CLOUDFLARE" }, "content_categories": [ { "id": 155, "name": "Technology", "super_category_id": 26 } ], "domain": "cloudflare.com", "inherited_content_categories": [ { "id": 0, "name": "name", "super_category_id": 0 } ], "inherited_from": "inherited_from", "inherited_risk_types": [ { "id": 0, "name": "name", "super_category_id": 0 } ], "popularity_rank": 0, "resolves_to_refs": [ { "id": "ipv4-addr--baa568ec-6efe-5902-be55-0663833db537", "value": "192.0.2.0" } ], "risk_score": 0, "risk_types": [ { "id": 0, "name": "name", "super_category_id": 0 } ] } } ``` ## Domain Types ### Domain - `class Domain: …` - `additional_information: Optional[AdditionalInformation]` Additional information related to the host name. - `suspected_malware_family: Optional[str]` Suspected DGA malware family. - `application: Optional[Application]` Application that the hostname belongs to. - `id: Optional[int]` - `name: Optional[str]` - `content_categories: Optional[List[ContentCategory]]` - `id: Optional[int]` - `name: Optional[str]` - `super_category_id: Optional[int]` - `domain: Optional[str]` - `inherited_content_categories: Optional[List[InheritedContentCategory]]` - `id: Optional[int]` - `name: Optional[str]` - `super_category_id: Optional[int]` - `inherited_from: Optional[str]` Domain from which `inherited_content_categories` and `inherited_risk_types` are inherited, if applicable. - `inherited_risk_types: Optional[List[InheritedRiskType]]` - `id: Optional[int]` - `name: Optional[str]` - `super_category_id: Optional[int]` - `popularity_rank: Optional[int]` Global Cloudflare 100k ranking for the last 30 days, if available for the hostname. The top ranked domain is 1, the lowest ranked domain is 100,000. - `resolves_to_refs: Optional[List[ResolvesToRef]]` Specifies a list of references to one or more IP addresses or domain names that the domain name currently resolves to. - `id: Optional[str]` STIX 2.1 identifier: https://docs.oasis-open.org/cti/stix/v2.1/cs02/stix-v2.1-cs02.html#_64yvzeku5a5c. - `value: Optional[str]` IP address or domain name. - `risk_score: Optional[float]` Hostname risk score, which is a value between 0 (lowest risk) to 1 (highest risk). - `risk_types: Optional[List[RiskType]]` - `id: Optional[int]` - `name: Optional[str]` - `super_category_id: Optional[int]` # Bulks ## Get Multiple Domain Details `intel.domains.bulks.get(BulkGetParams**kwargs) -> BulkGetResponse` **get** `/accounts/{account_id}/intel/domain/bulk` Returns security details and statistics about multiple domains in a single request. **Behavior change — domain ranking is becoming opt-in.** This endpoint previously included domain ranking data in every response and accepted a `skip_ranking=true` query parameter to opt out. That parameter is being deprecated and ranking will no longer be returned by default. Callers that want ranking data must pass `include_ranking=true`. The `skip_ranking` parameter will be silently ignored once the change ships. ### Parameters - `account_id: str` Identifier. - `domain: Optional[Sequence[str]]` Accepts multiple values like `?domain=cloudflare.com&domain=example.com`. - `include_ranking: Optional[bool]` Whether to include domain ranking data in the response. Defaults to `false` — ranking lookups are expensive at bulk scale and most callers do not need them. Set to `true` to opt in. This parameter replaces the deprecated `skip_ranking` (see below). - `skip_ranking: Optional[bool]` **Deprecated.** Previously controlled whether the ranking lookup was skipped (defaulted to `false`, meaning ranking ran). The endpoint's default behavior is being flipped — ranking is now opt-in via `include_ranking=true` — and this parameter will be silently ignored. Remove it from your callers and use `include_ranking` instead. ### Returns - `Optional[List[BulkGetResponseItem]]` - `additional_information: Optional[BulkGetResponseItemAdditionalInformation]` Additional information related to the host name. - `suspected_malware_family: Optional[str]` Suspected DGA malware family. - `application: Optional[BulkGetResponseItemApplication]` Application that the hostname belongs to. - `id: Optional[int]` - `name: Optional[str]` - `content_categories: Optional[List[BulkGetResponseItemContentCategory]]` - `id: Optional[int]` - `name: Optional[str]` - `super_category_id: Optional[int]` - `domain: Optional[str]` - `inherited_content_categories: Optional[List[BulkGetResponseItemInheritedContentCategory]]` - `id: Optional[int]` - `name: Optional[str]` - `super_category_id: Optional[int]` - `inherited_from: Optional[str]` Domain from which `inherited_content_categories` and `inherited_risk_types` are inherited, if applicable. - `inherited_risk_types: Optional[List[BulkGetResponseItemInheritedRiskType]]` - `id: Optional[int]` - `name: Optional[str]` - `super_category_id: Optional[int]` - `popularity_rank: Optional[int]` Global Cloudflare 100k ranking for the last 30 days, if available for the hostname. The top ranked domain is 1, the lowest ranked domain is 100,000. - `risk_score: Optional[float]` Hostname risk score, which is a value between 0 (lowest risk) to 1 (highest risk). - `risk_types: Optional[List[BulkGetResponseItemRiskType]]` - `id: Optional[int]` - `name: Optional[str]` - `super_category_id: Optional[int]` ### Example ```python import os from cloudflare import Cloudflare client = Cloudflare( api_token=os.environ.get("CLOUDFLARE_API_TOKEN"), # This is the default and can be omitted ) bulks = client.intel.domains.bulks.get( account_id="023e105f4ecef8ad9ca31a8372d0c353", ) print(bulks) ``` #### Response ```json { "errors": [ { "code": 1000, "message": "message", "documentation_url": "documentation_url", "source": { "pointer": "pointer" } } ], "messages": [ { "code": 1000, "message": "message", "documentation_url": "documentation_url", "source": { "pointer": "pointer" } } ], "result": [ { "additional_information": { "suspected_malware_family": "" }, "application": { "id": 0, "name": "CLOUDFLARE" }, "content_categories": [ { "id": 155, "name": "Technology", "super_category_id": 26 } ], "domain": "cloudflare.com", "inherited_content_categories": [ { "id": 0, "name": "name", "super_category_id": 0 } ], "inherited_from": "inherited_from", "inherited_risk_types": [ { "id": 0, "name": "name", "super_category_id": 0 } ], "popularity_rank": 0, "risk_score": 0, "risk_types": [ { "id": 0, "name": "name", "super_category_id": 0 } ] } ], "success": true, "result_info": { "count": 1, "page": 1, "per_page": 20, "total_count": 2000 } } ``` ## Domain Types ### Bulk Get Response - `Optional[List[BulkGetResponseItem]]` - `additional_information: Optional[BulkGetResponseItemAdditionalInformation]` Additional information related to the host name. - `suspected_malware_family: Optional[str]` Suspected DGA malware family. - `application: Optional[BulkGetResponseItemApplication]` Application that the hostname belongs to. - `id: Optional[int]` - `name: Optional[str]` - `content_categories: Optional[List[BulkGetResponseItemContentCategory]]` - `id: Optional[int]` - `name: Optional[str]` - `super_category_id: Optional[int]` - `domain: Optional[str]` - `inherited_content_categories: Optional[List[BulkGetResponseItemInheritedContentCategory]]` - `id: Optional[int]` - `name: Optional[str]` - `super_category_id: Optional[int]` - `inherited_from: Optional[str]` Domain from which `inherited_content_categories` and `inherited_risk_types` are inherited, if applicable. - `inherited_risk_types: Optional[List[BulkGetResponseItemInheritedRiskType]]` - `id: Optional[int]` - `name: Optional[str]` - `super_category_id: Optional[int]` - `popularity_rank: Optional[int]` Global Cloudflare 100k ranking for the last 30 days, if available for the hostname. The top ranked domain is 1, the lowest ranked domain is 100,000. - `risk_score: Optional[float]` Hostname risk score, which is a value between 0 (lowest risk) to 1 (highest risk). - `risk_types: Optional[List[BulkGetResponseItemRiskType]]` - `id: Optional[int]` - `name: Optional[str]` - `super_category_id: Optional[int]`