Domain Validation

Endpoint

GET /domain/{domain}

Validates a domain and returns comprehensive information including disposability status, MX records, reputation data, and more.

Parameters

string

required

The domain to validate (e.g., example.com)

Request Example

curl -X GET "https://api.fraudiant.com/domain/example.com" \
  -H "Authorization: Bearer YOUR_API_KEY"

const response = await fetch('https://api.fraudiant.com/domain/example.com', {
  headers: {
    'Authorization': 'Bearer YOUR_API_KEY'
  }
});

const data = await response.json();
console.log(data);

import requests

headers = {'Authorization': 'Bearer YOUR_API_KEY'}
response = requests.get(
    'https://api.fraudiant.com/domain/example.com',
    headers=headers
)

data = response.json()
print(data)

<?php
$ch = curl_init();
curl_setopt($ch, CURLOPT_URL, 'https://api.fraudiant.com/domain/example.com');
curl_setopt($ch, CURLOPT_RETURNTRANSFER, true);
curl_setopt($ch, CURLOPT_HTTPHEADER, [
    'Authorization: Bearer YOUR_API_KEY'
]);

$response = curl_exec($ch);
$data = json_decode($response, true);
curl_close($ch);
?>

require 'net/http'
require 'json'

uri = URI('https://api.fraudiant.com/domain/example.com')
request = Net::HTTP::Get.new(uri)
request['Authorization'] = 'Bearer YOUR_API_KEY'

response = Net::HTTP.start(uri.hostname, uri.port, use_ssl: true) do |http|
  http.request(request)
end

data = JSON.parse(response.body)

Response Fields

integer

HTTP status code indicating the result of the request

200: Success
400: Invalid domain
429: Rate limit exceeded

string

The normalized form of the input domain

integer | null

Number of days since the domain was registered. Returns null if the age is unknown.

boolean

Indicates whether the domain has valid MX (Mail Exchange) records configured for email delivery

array

List of MX records for the domain. Empty array if mx is false.

boolean

Key Field: Indicates whether the domain is from a temporary or disposable email provider

string | null

The provider domain name if disposable, otherwise null

boolean

Indicates whether the domain is a public email service like Gmail, Yahoo, or Outlook

boolean

Indicates whether the domain is used for email forwarding services

string | null

Suggested correction if there’s a likely typo in the domain name

boolean

Indicates whether the domain is on your account’s custom blocklist (Pro feature only)

boolean

Indicates whether the domain is associated with spam or abusive activities

Response Examples

Success Response (Valid Domain)

{
  "status": 200,
  "domain": "example.com",
  "domain_age_in_days": 1234,
  "mx": true,
  "mx_records": ["mail.example.com", "mail2.example.com"],
  "disposable": false,
  "disposable_provider": null,
  "public_domain": false,
  "relay_domain": false,
  "did_you_mean": null,
  "blocklisted": false,
  "spam": false
}

Disposable Domain Detected

{
  "status": 200,
  "domain": "tempmail.com",
  "domain_age_in_days": 456,
  "mx": true,
  "mx_records": ["mx1.tempmail.com"],
  "disposable": true,
  "disposable_provider": "tempmail.com",
  "public_domain": false,
  "relay_domain": false,
  "did_you_mean": null,
  "blocklisted": false,
  "spam": true
}

When disposable: true, you should typically block or flag this domain to prevent fraud.

Public Email Provider

{
  "status": 200,
  "domain": "gmail.com",
  "domain_age_in_days": 7500,
  "mx": true,
  "mx_records": ["gmail-smtp-in.l.google.com"],
  "disposable": false,
  "disposable_provider": null,
  "public_domain": true,
  "relay_domain": false,
  "did_you_mean": null,
  "blocklisted": false,
  "spam": false
}

public_domain: true indicates a well-known email provider. These are generally legitimate but don’t identify the organization.

Error Responses

Invalid Domain (400)

{
  "status": 400,
  "error": "The domain is invalid."
}

Rate Limit Exceeded (429)

{
  "status": 429,
  "error": "Too many requests"
}

Learn About Rate Limits

View rate limit details and upgrade options

Common Use Cases

Block domains without MX records

const response = await fetch(`https://api.fraudiant.com/domain/${domain}`, {
  headers: { 'Authorization': 'Bearer YOUR_API_KEY' }
});

const data = await response.json();

if (!data.mx || data.mx_records.length === 0) {
  return { error: 'Domain cannot receive emails' };
}

Detect newly registered domains

// Flag domains less than 30 days old as potentially suspicious
if (data.domain_age_in_days !== null && data.domain_age_in_days < 30) {
  console.warn('Domain is less than 30 days old');
  // Apply additional verification
}

Identify corporate vs personal emails

if (data.public_domain) {
  console.log('Personal email address (Gmail, Yahoo, etc.)');
} else {
  console.log('Corporate or private domain email');
}

Bulk domain validation

const domains = ['example.com', 'test.com', 'sample.org'];

const results = await Promise.all(
  domains.map(domain =>
    fetch(`https://api.fraudiant.com/domain/${domain}`, {
      headers: { 'Authorization': 'Bearer YOUR_API_KEY' }
    }).then(r => r.json())
  )
);

const disposableDomains = results.filter(r => r.disposable);

Domain vs Email Endpoint

When to use Domain Validation vs Email Validation:

Use Domain Endpoint

Validating domain-level blocklists
Checking company email policies
Bulk domain reputation checks
Pre-filtering allowed domains

Use Email Endpoint

Validating specific user emails
Detecting typos in email addresses
Checking role-based accounts
Full email-level validation

Best Practices

Combine with email endpoint for complete validation

Use the domain endpoint for initial filtering, then validate specific emails with the email endpoint for comprehensive checks.

Cache domain results

Domain reputation doesn’t change frequently. Cache results for 24-48 hours to reduce API calls.

Monitor domain age

Newly registered domains (< 30 days old) are often used for spam or fraud. Consider additional verification for young domains.

Handle null values

Some fields like domain_age_in_days may return null if data is unavailable. Always handle null values gracefully in your code.

Introduction

Endpoints

Endpoint

Parameters

Request Example

Response Fields

Response Examples

Success Response (Valid Domain)

Disposable Domain Detected

Public Email Provider

Error Responses

Invalid Domain (400)

Rate Limit Exceeded (429)

Learn About Rate Limits

Common Use Cases

Domain vs Email Endpoint

Use Domain Endpoint

Use Email Endpoint

Best Practices

​Endpoint

​Parameters

​Request Example

​Response Fields

​Response Examples

​Success Response (Valid Domain)

​Disposable Domain Detected

​Public Email Provider

​Error Responses

​Invalid Domain (400)

​Rate Limit Exceeded (429)

Learn About Rate Limits

​Common Use Cases

​Domain vs Email Endpoint

Use Domain Endpoint

Use Email Endpoint

​Best Practices

Endpoint

Parameters

Request Example

Response Fields

Response Examples

Success Response (Valid Domain)

Disposable Domain Detected

Public Email Provider

Error Responses

Invalid Domain (400)

Rate Limit Exceeded (429)

Common Use Cases

Domain vs Email Endpoint

Best Practices