🚀 Experience the new and improved APIVoid! Check out what's new

Domain Reputation API: Detect phishing and risky domains

A JSON API to detect potentially malicious domains related to phishing, malware and fraudulent activities. Use this API to quickly check if a domain is blocklisted among 30+ blocklists, and which blocklist detects it.

Get started now
Live demo

Consumes 1 credit per API call

# Example Curl request from the command line:
                          
curl -X POST "https://api.apivoid.com/v2/domain-reputation" \
     -H "Content-Type: application/json" \
     -H "X-API-Key: YOUR_API_KEY_HERE" \
     -d '{"host": "google.com"}'

# Example JSON output for a 200 HTTP status code:

{
    "host": "google.com",
    "blacklists": {
        "engines": {
            "0": {
                "name": "ANJ Blocked Sites",
                "detected": false,
                "reference": "https://anj.fr/",
                "confidence": "high",
                "elapsed_ms": 0
            },
            "1": {
                "name": "AntiSocial Blacklist",
                "detected": false,
                "reference": "https://theantisocialengineer.com/",
                "confidence": "high",
                "elapsed_ms": 0
            },
            "2": {
                "name": "APVA",
                "detected": false,
                "reference": "https://www.antiphish.org/",
                "confidence": "high",
                "elapsed_ms": 0
            },
            "3": {
                "name": "Artists Against 419",
                "detected": false,
                "reference": "https://wiki.aa419.org/index.php/Main_Page",
                "confidence": "high",
                "elapsed_ms": 0
            },
            "4": {
                "name": "AZORult Tracker",
                "detected": false,
                "reference": "https://azorult-tracker.net/",
                "confidence": "high",
                "elapsed_ms": 0
            },
            "5": {
                "name": "Badbitcoin",
                "detected": false,
                "reference": "https://badbitcoin.org/",
                "confidence": "high",
                "elapsed_ms": 0
            },
            "6": {
                "name": "Bambenek Consulting",
                "detected": false,
                "reference": "https://www.bambenekconsulting.com/",
                "confidence": "high",
                "elapsed_ms": 0
            },
            "7": {
                "name": "CERT Polska",
                "detected": false,
                "reference": "https://www.cert.pl/",
                "confidence": "high",
                "elapsed_ms": 0
            },
            "8": {
                "name": "COI CZ",
                "detected": false,
                "reference": "https://coi.gov.cz/",
                "confidence": "high",
                "elapsed_ms": 0
            },
            "9": {
                "name": "CryptoScamDB",
                "detected": false,
                "reference": "https://cryptoscamdb.org/",
                "confidence": "high",
                "elapsed_ms": 0
            },
            "10": {
                "name": "EtherAddressLookup",
                "detected": false,
                "reference": "https://github.com/409H/EtherAddressLookup/",
                "confidence": "high",
                "elapsed_ms": 0
            },
            ...
        },
        "detections": 0,
        "engines_count": 42,
        "detection_rate": "0%",
        "scan_time_ms": 139
    },
    "server_details": {
        "ip": "192.178.219.139",
        "reverse_dns": "ux-in-f139.1e100.net",
        "continent_code": "NA",
        "continent_name": "North America",
        "country_code": "US",
        "country_name": "United States of America",
        "region_name": "California",
        "city_name": "Mountain View",
        "latitude": 37.38605,
        "longitude": -122.08385,
        "isp": "Google LLC",
        "asn": "AS15169"
    },
    "category": {
        "is_free_hosting": false,
        "is_anonymizer": false,
        "is_url_shortener": false,
        "is_free_dynamic_dns": false,
        "is_code_sandbox": false,
        "is_form_builder": false,
        "is_free_file_sharing": false,
        "is_pastebin": false
    },
    "security_checks": {
        "is_most_abused_tld": false,
        "is_domain_ipv4_assigned": true,
        "is_domain_ipv4_private": false,
        "is_domain_ipv4_loopback": false,
        "is_domain_ipv4_reserved": false,
        "is_domain_ipv4_valid": true,
        "is_domain_blacklisted": false,
        "detections_count": 0,
        "is_uncommon_host_length": false,
        "is_uncommon_dash_char_count": false,
        "is_uncommon_dot_char_count": false,
        "is_suspicious_homoglyph": false,
        "is_possible_typosquatting": false,
        "website_popularity": "high",
        "is_uncommon_clickable_domain": false,
        "is_risky_category": false
    },
    "domain_parts": {
        "root_domain": "google.com",
        "subdomain": "",
        "tld": "com"
    },
    "risk_score": {
        "result": 0
    },
    "elapsed_ms": 140
}

Domain: ver1fy-password(.)top

Checking reputation...

Domain: facebook(.)com

Checking reputation...

Domain: sellaaggiornamentoconto(.)com

Checking reputation...

IP Address: benefitaprobado(.)click

Checking reputation...

Domain: leroymerlin-oficial(.)com

Checking reputation...

Domain: com-v5-connect-wallet(.)com

Checking reputation...

Domain: gbdeliveros(.)top

Checking reputation...

Key Features

Check the safety reputation of domains (e.g google.com)

Businesses use this Domain Reputation API to check if a domain is blocklisted and by which blocklist service, if the domain is related to risky categories (URL shorteners, free hosting, etc).

30+ Scanning Engines

We support 30+ domain blocklist services, including some of our in-house phishing detection engines.

Domain Risky Categories

Identify risky categories like URL shorteners (e.g bit.ly), dynamic DNS (e.g hopto.org), pastebin.

Domain Risk Score

Based on blocklist scan report and other smart security checks, the API provides a domain risk score.

Domain Blocklist Details

Find out which blocklist service(s) detect your domain name, this can help to fix eventual false positives.

Common Use Cases

Take a look at some real-world use cases of this API service

Our API can be used in many ways, from cybersecurity tasks to other business-specific tasks. Here we showcase the most popular use cases according to our customers usage:

Enrich SIEM Data

Using a SIEM platform? Add context to security incidents, convert events into valuable insights.

Validate IoCs

If you have some indicators of compromise (IoC) of a domain, you can verify them with our API.

Better Risk Assessment

Whether you need to get domain reputation, phishing detection or risk score, our API has it all.

Customer Verification

Before allowing a customer, supplier or user to register, you can verify the safety of the domain name.

Use cases

EVERYTHING YOU GET

Do it all with one reputation lookup

One request returns the full domain reputation profile: blacklist results from 40+ engines, site category, typosquatting and homoglyph checks, and a single risk score.

Reputation and blacklists

  • 40+ blacklist and abuse engines
  • Per-engine detected result
  • Reference URL for every engine
  • Confidence level per engine
  • Total detections and detection rate
  • Exclude engines by name

Hosting and geolocation

  • Resolved IP address
  • Reverse DNS of the host
  • Continent, country and region
  • City, latitude and longitude
  • ISP and hosting provider
  • ASN of the network

Domain category

  • Free hosting providers
  • Anonymizer and proxy services
  • URL shorteners
  • Free dynamic DNS providers
  • Code sandboxes and pastebins
  • Free file sharing services

Typosquatting and pattern checks

  • Suspicious homoglyph detection
  • Possible typosquatting detection
  • Most-abused TLD flag
  • Uncommon host length
  • Uncommon dash and dot counts
  • Risky category flag

IP checks and domain age

  • Domain resolves to an assigned IPv4
  • Private, loopback and reserved detection
  • Invalid IPv4 detection
  • Blacklisted domain flag with count
  • Optional domain age as a risk factor
  • Recently created domain detection

Built for developers

  • Plain JSON over HTTPS
  • 0–100 risk score in a single field
  • Ready-to-use result verdict
  • Root domain, subdomain and TLD split
  • Website popularity signal
  • Simple integration

USAGE EXAMPLE

Learn how seamless it is to add and use Domain Reputation API anywhere you want

All it takes is a HTTPS POST request with JSON payload to our endpoint, and you’ll receive the response within seconds, usually within 1-3 seconds. Here are a few code examples to use the API:

$domain = 'google.com';

$apiUrl = 'https://api.apivoid.com/v2/domain-reputation';
$apiKey = 'your_api_key_here';

$ch = curl_init($apiUrl);
curl_setopt($ch, CURLOPT_RETURNTRANSFER, true);
curl_setopt($ch, CURLOPT_HTTPHEADER, ['Content-Type: application/json', 'X-API-Key: ' . $apiKey]);
curl_setopt($ch, CURLOPT_POST, true);
curl_setopt($ch, CURLOPT_POSTFIELDS, json_encode(['host' => $domain]));
$response = curl_exec($ch);
$httpCode = curl_getinfo($ch, CURLINFO_HTTP_CODE);
curl_close($ch);

if ($httpCode === 200) {
    $responseData = json_decode($response, true);

    print_r($responseData);

    // Block domain if it is detected by 1 or more blacklists
    if (($responseData['blacklists']['detections'] ?? 0) >= 1) {
        echo "The domain is detect by " . intval($responseData['blacklists']['detections']) . " blacklists.";
        exit;
    }
    
    // Block domain if it has a risky TLD
    if ($responseData['security_checks']['is_most_abused_tld'] ?? false) {
        echo "Domains with a risky TLD (e.g .top or .xyz) are banned.";
        exit;
    }
    
    // Block URL shortening domains such as bit.ly
    if ($responseData['category']['is_url_shortener'] ?? false) {
        echo "URL shortening domains are banned.";
        exit;
    }
} else {
    print_r('An error occurred: '.$response);
}

Start using our API services, it takes just a few minutes

Create your account, pick a subscription plan, and make your first API call instantly with your API key, simple as that!

Get started now