Check Domain Details GET

Checks the supplied domain against our database and returns the details we have.

Request

What you send to the API.

Authentication

🔒 API Key: Required
🔑 API Permission Required: API.READ

Provide your API key in the Authorization header when making requests.

Example

"Authorization": "Bearer 04eff65e-309c-1a2b-cde3-4567f8901gh"

The URL for this endpoint is:

https://api.phisherman.gg/v2/domains/info/<domain>/details

<domain> is to be replaced with the domain you want to check.

Example: https://api.phisherman.gg/v2/domains/info/suspicious.test.phisherman.gg

Examples

CURL

curl -L -X GET "https://api.phisherman.gg/v2/domains/info/suspicious.test.phisherman.gg" \
-H "Content-Type: application/json" \
-H "Authorization: Bearer <API-KEY>"

JavaScript

const response = await fetch("https://api.phisherman.gg/v2/domains/info/suspicious.test.phisherman.gg", {
	headers: {
		"Content-Type": "application/json",
		Authorization: "Bearer <API-KEY>",
	},
});

const data = response.ok ? await response.json() : "Domain was not found or an error occurred.";

Python

import http.client

conn = http.client.HTTPSConnection("api.phisherman.gg")
payload = ''
headers = {
	'Content-Type': 'application/json',
	'Authorization': 'Bearer <API-KEY>'
}
conn.request("GET", "/v2/domains/info/suspicious.test.phisherman.gg", payload, headers)
res = conn.getresponse()
data = res.read()
print(data.decode("utf-8"))

Response

What you get back from the API.

Example responses

HTTP 200

{
    "suspicious.test.phisherman.gg": {
        "status": "OFFLINE",
        "created": "2021-12-29T21:42:29.000Z",
        "updated": "2023-11-20T22:44:26.000Z",
        "lastChecked": "2021-12-29T21:42:36.000Z",
        "verifiedPhish": false,
        "classification": "SUSPICIOUS",
        "targetedBrand": "Other",
        "phishCaught": 0,
        "details": {
            "ip_address": null,
            "asn": {},
            "country": {}
        }
    }
}

HTTP 200 (Safe Domains)

{
    "discord.com": {
        "classification": "safe",
        "verifiedPhish": false
    }
}

HTTP 200

{
    "message": "Invalid domain.",
    "error": [
        {
            "code": "custom",
            "message": "'invalid-domain..com' is not a valid domain.",
            "path": []
        }
    ]
}

HTTP 404

{
    "invalid-domain.com": {
        "classification": "unknown",
        "verifiedPhish": false
    }
}

TIP

Please see the Domain Classifications page for information on each classification.