{"type":"api","title":"Get Top Most Seen Domains","meta":{"id":"/apps/pubhub/media/legacy-umbrella-api/bf58de618cbb72dda8f39b0414ce94c0a15cd467/f963d12c-70c5-3340-bb7c-d5cff60c643a","info":{"title":"Investigate API","description":"Umbrella Investigate API","version":"1.1.4","contact":{"name":"Cloud Security Developer Community"}},"security":[{"bearerAuth":[]}],"tags":[{"name":"Domain Status and Categorization"},{"name":"Domain Volume"},{"name":"Co-occurrences for a Domain"},{"name":"Passive DNS"},{"name":"Tagging Timeline"},{"name":"Subdomains for a Domain"},{"name":"Related Domains for a Domain"},{"name":"Security Information for a Domain"},{"name":"AS Information for a Domain"},{"name":"WHOIS Information for a Domain"},{"name":"Umbrella Popularity List-Top Million Domains"},{"name":"Search Domain"},{"name":"Cisco Secure Malware Analytics Integration"}],"x-parser-conf":{"overview":{"markdownPath":"investigate/investigate-explorer-overview.md"}},"openapi":"3.0.0","servers":[{"url":"https://investigate.api.umbrella.com"}],"securitySchemes":{"bearerAuth":{"type":"http","scheme":"bearer"}}},"spec":{"summary":"Get Top Most Seen Domains","operationId":"getTopmillion","tags":["Umbrella Popularity List-Top Million Domains"],"description":"List the most seen domains in Umbrella. You can download the data in a zip file,\nor use the Investigate API to stream the data into a SIEM.\nThe popularity list contains our most queried domains based on passive DNS usage across\nour Umbrella global network of more than 180 billion requests per day with many tens of millions\nof unique active users, in more than 165 countries.\nThe metric does not only consist of browser-based http requests from users but also takes\nin to account the number of unique client IPs invoking this domain relative to the sum of all requests\nto all domains.\nOur popularity ranking reflects the domain's relative internet activity agnostic\nto the invocation protocols and applications where as site ranking models (such as Alexa) focus\non the web activity over port 80 (primarily from browsers).\nIn addition, the Umbrella popularity algorithm also applies data normalization techniques\nto smooth potential biases that may occur due to sampling of DNS usage data.\n","parameters":[{"name":"limit","in":"query","required":false,"description":"The maximum number of domains to return in the list.\nIf you do not set a limit, Umbrella returns up to one million results.","schema":{"type":"integer"}}],"responses":{"200":{"description":"Everything worked as expected.","content":{"application/json":{"schema":{"type":"array","items":{"type":"string"}},"example":["google.com","netflix.com","api-global.netflix.com","microsoft.com","www.google.com","facebook.com","doubleclick.net","g.doubleclick.net","googleads.g.doubleclick.net","hola.org"]}}},"400":{"description":"Invalid request","content":{"application/json":{"schema":{"type":"object","properties":{"message":{"type":"string"}}}}},"$$ref":"#/components/responses/400Error"},"401":{"description":"Unauthorized request","content":{"application/json":{"schema":{"type":"object","properties":{"message":{"type":"string"}}}}},"$$ref":"#/components/responses/401Error"},"403":{"description":"Forbidden","content":{"application/json":{"schema":{"type":"object","properties":{"message":{"type":"string"}}}}},"$$ref":"#/components/responses/403Error"},"404":{"description":"Not Found","content":{"application/json":{"schema":{"type":"object","properties":{"message":{"type":"string"}}}}},"$$ref":"#/components/responses/404Error"},"500":{"description":"Server error","content":{"application/json":{"schema":{"type":"object","properties":{"message":{"type":"string"}}}}},"$$ref":"#/components/responses/500Error"}},"__originalOperationId":"getTopmillion","security":[{"bearerAuth":[]}],"method":"get","path":"/topmillion"}}