Domain Reputation API

API reference

Domain Reputation HTTP endpoints on api.syndaq.com.

All Domain Reputation endpoints are served from https://api.syndaq.com/v1/domainrep/.

Authenticated requests require a valid Domain Reputation key. Lookup routes require your dr_sec_ secret key.

Endpoints overview

Method	Path	Auth	Purpose
GET	`/v1/domainrep/lookup`	Secret key	Lookup by `?domain=` query parameter
GET	`/v1/domainrep/lookup/{domain}`	Secret key	Lookup by domain in the URL path
GET	`/v1/domainrep/status`	Public or secret key	Plan limits and quota snapshot

Response headers

Successful and error responses may include:

Header	Description
`X-Request-Id`	Unique ID for support and log correlation
`X-RateLimit-Limit`	Plan requests per minute for this key
`X-RateLimit-Remaining`	Requests left in the current minute window
`X-RateLimit-Reset`	Unix timestamp when the minute window resets
`X-Quota-Limit`	Monthly quota for the subscription
`X-Quota-Remaining`	Lookups left this calendar month (UTC)
`X-Quota-Period`	Current quota month (`YYYY-MM`)
`Retry-After`	Seconds to wait after HTTP 429

GET /v1/domainrep/lookup

Scores a domain for risk using Syndaq domain reputation signals.

Request

Pass the target domain using one of these forms:

GET /v1/domainrep/lookup/example.com
GET /v1/domainrep/lookup?domain=example.com

Headers:

Authorization: Bearer dr_sec_YOUR_SECRET_KEY

v1 scope

v1 returns a composite risk score and weighted signals. Higher scores mean more risk. Level thresholds:

Level	Score range
`low`	below 30
`medium`	30–69
`high`	70–100

Success response (200)

{
  "success": true,
  "domain": "example.com",
  "cached": true,
  "score": 18,
  "level": "low",
  "signals": [
    {
      "code": "domain_age",
      "detail": "Domain older than one year",
      "weight": 0
    },
    {
      "code": "email_auth",
      "detail": "Mail authentication readiness is strong",
      "weight": 0
    }
  ],
  "request_id": "e6d04020be9b57b1e1069d6e483c0443"
}

Response fields

Field	Type	Description
`domain`	string	Normalized domain that was scored
`cached`	boolean	`true` when Syndaq already holds a recent result for this lookup
`score`	integer	Risk score from 0–100 (higher = more risky)
`level`	string	`low`, `medium`, or `high`
`signals`	array	Contributing factors (`code`, `detail`, `weight`)

GET /v1/domainrep/status

Returns key status, plan limits, and quota usage without performing a lookup.

Request

GET /v1/domainrep/status
Authorization: Bearer dr_sec_YOUR_SECRET_KEY

The public key (dr_pub_) is accepted on this route.

Success response (200)

{
  "success": true,
  "status": "active",
  "product": "domainrep",
  "plan": "starter",
  "rate_limit_per_minute": 60,
  "monthly_quota": 5000,
  "quota_unlimited": false,
  "quota_remaining": 4877,
  "quota_period": "2026-07"
}

Errors

Failed requests return JSON with success: false, error, error_code, and usually request_id.

HTTP	error_code	Typical cause
400	`invalid_domain`	Missing or malformed domain
401	`missing_credentials`	No API key provided
401	`invalid_api_key`	Unknown, inactive, or revoked key
401	`wrong_key_type`	Public key used on a lookup endpoint
403	`ip_not_allowed`	Caller IP not on the key allowlist
429	`rate_limit_exceeded`	Per-minute limit exceeded
429	`quota_exceeded`	Monthly quota exhausted
502	`lookup_failed`	Temporary reputation lookup failure
500	`internal_error`	Unexpected server error

Handle non-200 responses in your application and retry transient errors with exponential backoff.