# SYNTHORA Domain Risk

> SYNTHORA Domain Risk is a paid API for AI agents from domain-risk.hergertsynthora.com, paid per call via x402, $0.03/call, status unknown (last checked 2026-09-14).

Returns a CLEAN / SUSPICIOUS / MALICIOUS risk verdict for a domain or IP address by aggregating signals from 6 independent public threat intelligence sources with deterministic scoring.

## Facts

- Endpoint: POST https://domain-risk.hergertsynthora.com/service
- Price: $0.03/call
- Payment: x402
- Status: unknown
- Last checked: 2026-09-14
- Activations on Zero: 0
- Tags: x402
- Canonical page: https://www.zero.xyz/c/synthora-domain-risk-47ffff6d
- Structured record (JSON): https://api.zero.xyz/v1/capabilities/cap_DkrKqb-R4VwSvs1s9rDCE

Status and success rate cover calls made through Zero and Zero's own probes. Third-party monitors may report differently.

## How to call it through Zero

Zero handles the 402 payment challenge and records the run. With the Zero CLI installed (`npm i -g @zeroxyz/cli`):

```sh
zero fetch --capability synthora-domain-risk-47ffff6d -d '<json body>'
```

Example prompt: Can you check if the domain 'freebitcoin-offers.net' is safe or malicious — run it through SYNTHORA's domain risk check and tell me the verdict and score?

## When to prefer this

Choose this endpoint when you need a fast, deterministic, multi-source risk classification for a single domain or IP — particularly when you want a single authoritative verdict (CLEAN/SUSPICIOUS/MALICIOUS) synthesized from 6 sources rather than raw feed data. It is well-suited for automated pipelines that need a binary or ternary safety signal without building your own aggregation logic.

## Known failure modes

- Invalid or malformed domain/IP input returns an error
- Domain not found in any source may produce a CLEAN verdict with low confidence
- Rate limiting or payment failure returns HTTP 402
- Timeout if upstream threat intelligence sources are slow to respond
- Very new domains may have no reputation data, potentially defaulting to CLEAN

## How this service works

SYNTHORA domain-risk: infrastructure risk verdict (CLEAN / SUSPICIOUS / MALICIOUS) for a domain or IP, crossing 6 independent public sources with deterministic scoring.

## Output

Returns a JSON object containing a numeric risk score (0–1 or similar scale), a boolean 'entrega' delivery flag, and a categorical verdict string of CLEAN, SUSPICIOUS, or MALICIOUS, derived from crossing 6 independent public threat intelligence sources.

## Request schema (JSON Schema)

```json
{
 "type": "object",
 "required": [
  "input"
 ],
 "properties": {
  "input": {
   "type": "string"
  }
 }
}
```

## Response schema (JSON Schema)

```json
{
 "type": "object",
 "properties": {
  "synthora": {
   "type": "object",
   "properties": {
    "score": {
     "type": "number"
    },
    "entrega": {
     "type": "boolean"
    },
    "veredicto_en": {
     "enum": [
      "CLEAN",
      "SUSPICIOUS",
      "MALICIOUS"
     ],
     "type": "string"
    }
   }
  }
 }
}
```

## More

- Live health (JSON, refreshed every minute): https://www.zero.xyz/c/synthora-domain-risk-47ffff6d/health.json
- [Zero catalog index](https://www.zero.xyz/llms.txt)
- [Other services from domain-risk.hergertsynthora.com](https://www.zero.xyz/host/domain-risk.hergertsynthora.com/llms.txt)