Domain details

The domain details endpoint allows you to get information about a specific domain and its subdomains.

GET /domain/:domain

Parameters

name	placement	comment
accept	header	Must be set to `application/json`
api-key	header	Your API key
domain	url path	Must contain the domain

Curl example

1curl -H 'accept: application/json' "https://leakix.net/domain/leakix.net"

Successful response

Receiving 200 means the request was successful.

The response will contain two field, Services and Leaks both being an array of l9events.

They can be null if no information was found.

  1{
  2  "Services": [
  3    {
  4      "event_type": "service",
  5      "event_source": "HttpPlugin",
  6      "event_pipeline": [
  7        "CertStream",
  8        "l9scan",
  9        "tcpid",
 10        "HttpPlugin"
 11      ],
 12      "event_fingerprint": "6d1f2e7ca5e9923a7028676ebb61f31f953e09cfa2883d1a5560acfc769e213c",
 13      "ip": "157.90.211.37",
 14      "host": "leakix.org",
 15      "reverse": "",
 16      "port": "443",
 17      "mac": "",
 18      "vendor": "",
 19      "transport": [
 20        "tcp",
 21        "tls",
 22        "http"
 23      ],
 24      "protocol": "https",
 25      "http": {
 26        "root": "",
 27        "url": "",
 28        "status": 0,
 29        "length": 0,
 30        "header": {
 31          "content-length": "169",
 32          "location": "https://leakix.net/",
 33          "server": "nginx/1.19.0"
 34        },
 35        "title": "301 Moved Permanently",
 36        "favicon_hash": ""
 37      },
 38      "summary": "Content-Length: 169\r\nContent-Type: text/html\r\nDate: Fri, 20 Jan 2023 11:25:44 GMT\r\nLocation: https://leakix.net/\r\nServer: nginx/1.19.0\r\nConnection: close\r\n\nPage title: 301 Moved Permanently\n\n<html>\r\n<head><title>301 Moved Permanently</title></head>\r\n<body>\r\n<center><h1>301 Moved Permanently</h1></center>\r\n<hr><center>nginx/1.19.0</center>\r\n</body>\r\n</html>\r\n",
 39      "time": "2023-01-20T11:25:41.135469289Z",
 40      "ssl": {
 41        "detected": false,
 42        "enabled": true,
 43        "jarm": "3fd21b20d3fd3fd21c3fd21b21b3fd02f2ce530964392ff49a9ba1e4931ee9",
 44        "cypher_suite": "TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256",
 45        "version": "TLSv1.2",
 46        "certificate": {
 47          "cn": "www.leakix.net",
 48          "domain": [
 49            "leakix.com",
 50            "leakix.org",
 51            "leaks.nobody.run",
 52            "www.leakix.com",
 53            "www.leakix.net",
 54            "www.leakix.org"
 55          ],
 56          "fingerprint": "408f41c899c9a75c6f71b70fec08f1d19f0c230ad55cb1ff8b69bf6bf1e7465d",
 57          "key_algo": "RSA",
 58          "key_size": 4096,
 59          "issuer_name": "R3",
 60          "not_before": "2023-01-20T10:23:55Z",
 61          "not_after": "2023-04-20T10:23:54Z",
 62          "valid": true
 63        }
 64      },
 65      "ssh": {
 66        "fingerprint": "",
 67        "version": 0,
 68        "banner": "",
 69        "motd": ""
 70      },
 71      "service": {
 72        "credentials": {
 73          "noauth": false,
 74          "username": "",
 75          "password": "",
 76          "key": "",
 77          "raw": null
 78        },
 79        "software": {
 80          "name": "nginx",
 81          "version": "1.19.0",
 82          "os": "",
 83          "modules": null,
 84          "fingerprint": ""
 85        }
 86      },
 87      "leak": {
 88        "stage": "",
 89        "type": "",
 90        "severity": "",
 91        "dataset": {
 92          "rows": 0,
 93          "files": 0,
 94          "size": 0,
 95          "collections": 0,
 96          "infected": false,
 97          "ransom_notes": null
 98        }
 99      },
100      "tags": [],
101      "geoip": {
102        "continent_name": "Europe",
103        "region_iso_code": "",
104        "city_name": "",
105        "country_iso_code": "DE",
106        "country_name": "Germany",
107        "region_name": "",
108        "location": {
109          "lat": 51.2993,
110          "lon": 9.491
111        }
112      },
113      "network": {
114        "organization_name": "Hetzner Online GmbH",
115        "asn": 24940,
116        "network": "157.90.0.0/16"
117      }
118    }
119  ],
120  "Leaks": null
121}

Rate limiting

All requests to LeakIX.net's API are limited at ~1 request per second.

If the limit is reached, the API will return a 429 http status code and a x-limited-for header.

The client MUST wait for the duration of x-limited-for before the next request.

1HTTP/1.1 429 Rate-limited
2Date: Mon, 27 Jul 2009 12:28:53 GMT
3x-limited-for: 344.24ms