Domain Reputation API
Getting started
Subscribe, copy your secret key, and score your first domain.
The Syndaq Domain Reputation API returns a 0–100 risk-style score, a level (low / medium / high), and weighted signals for a domain.
v1 scope: composite domain risk signals such as registration age, mail authentication readiness, and related abuse indicators. Individual components may soft-fail; a score is still returned when possible.
What you need
- A Domain Reputation plan from the Syndaq API catalog.
- A secret key (
dr_sec_) from the Syndaq client area after your order is provisioned.
Domain reputation lookups are server-side only. Send your secret key from your backend or trusted worker. Do not embed it in client-side code, mobile apps, or public repositories.
Base URL
All Domain Reputation endpoints are served from:
https://api.syndaq.com/v1/domainrep/
Quick start
Replace dr_sec_YOUR_SECRET_KEY with the secret shown in Services for your Domain Reputation subscription.
curl -sS "https://api.syndaq.com/v1/domainrep/lookup/example.com" \
-H "Authorization: Bearer dr_sec_YOUR_SECRET_KEY"
You can also pass the domain as a query parameter:
curl -sS "https://api.syndaq.com/v1/domainrep/lookup?domain=example.com" \
-H "Authorization: Bearer dr_sec_YOUR_SECRET_KEY"
A successful response includes score, level, and a signals array.
How lookups work
| Step | What happens |
|---|---|
| 1 | Authenticate with your secret key. |
| 2 | Send a domain lookup request to the API. |
| 3 | Receive JSON with score, level, and signals (including a cached flag when Syndaq already holds a recent result). |
Higher scores mean higher risk. Treat low as allow, medium as challenge, and high as block or escalate.
Manage your subscription
Sign in to the Syndaq client area and open Services. Select your Domain Reputation service to:
- View usage and remaining monthly quota
- Copy or rotate your secret key
- Configure optional IP allowlists for API access
Next steps
- Authentication and limits: keys, rate limits, quotas, and IP restrictions
- API reference: endpoints, response fields, and error codes