Domain age & risk API

Resolves a domain's creation and expiry dates via RDAP (keyless) and derives age in days/years, days-until-expiry, and a young-domain risk bucket (newly-registered domains are a classic phishing signal). Answers 'How old is this domain?', 'When was this domain registered?', 'Is this a newly registered (suspicious) domain?'.

Price$0.01per request

MethodPOST

Route/v1/security/domain-age

StatusLive

MIME typeapplication/json

Rate limit60/minute

Cache3600s public

securitydomain-agerdapwhoisdomain-riskphishingregistration-dateosint

API URLhttps://x402.hexl.dev/v1/security/domain-age

Integration docs

Example request

{
  "domain": "example.com"
}

Example response

{
  "domain": "example.com",
  "registered": true,
  "createdAt": "1995-08-14T04:00:00.000Z",
  "expiresAt": "2025-08-13T04:00:00.000Z",
  "ageDays": 11069,
  "ageYears": 30.31,
  "daysUntilExpiry": 71,
  "expired": false,
  "riskBucket": "low",
  "interpretation": "Domain is 30.31 year(s) old — low young-domain risk."
}

Input schema

{
  "type": "object",
  "required": [
    "domain"
  ],
  "properties": {
    "domain": {
      "type": "string",
      "examples": [
        "example.com"
      ]
    }
  }
}

Output schema

{
  "type": "object",
  "additionalProperties": true
}