Lookup

Look up honeypot intelligence for a domain

Return honeypot intelligence for a domain: aggregate stats, a daily time series, unique-IP block, top ASN/subdomains/ports, geo distribution, an hour×day-of-week activity heatmap, derived activity stats, and the most recent events. Costs one credit. Rate-limited to 20 per minute per team.

get/lookup/domain/{domain}

Request

  • Base URL: https://api.synthient.com/api/v4
  • URL: https://api.synthient.com/api/v4/lookup/domain/{domain}
  • Auth: API key in header X-Api-Key

Path parameters

domainstring required
Example:google.com

Domain name to look up. Encode internationalised names as Punycode (xn--…).

Query parameters

limitinteger

Maximum number of recent_events rows to return. Defaults to 50; values above 1000 are clamped server-side.

Response

Domain intelligence result

domainstring required
status'active' | 'inactive' required

active when the domain had events in the last 24 hours. A domain never observed returns 200 with inactive and zeroed stats, not 404.

Changes

No recorded changes to this operation across all 1 revision of this API.