Domain Reputation API

{
  "input": {
    "domain": "apple.com"
  },
  "assessed_at": "2026-09-08T08:36:23.820181075Z",
  "version": "1.0.0",
  "processing_time_ms": 1739,
  "risk_category": {
    "verdict": "safe",
    "confidence": 0.8,
    "primary_threat": null,
    "severity": "none",
    "threat_types": [],
    "sources": [],
    "pivot_matches": []
  },
  "dga_score": {
    "score": 0,
    "is_dga": false,
    "model": "deterministic_features_v1",
    "features": {
      "domain_length": 5,
      "vowel_consonant_ratio": 0.6666666666666666,
      "ngram_perplexity": -8.83,
      "shannon_entropy": 1.9219280948873623,
      "digit_letter_ratio": 0,
      "consonant_streak_max": 3,
      "tld_in_known_dga_set": false
    },
    "interpretation": "human_readable"
  },
  "trust_signals": {
    "trust_score": 72,
    "trust_band": "high",
    "signals": {
      "positive": [
        {
          "code": "spf_configured",
          "weight": 5,
          "polarity": "positive",
          "category": "email_security",
          "evidence": "SPF record found",
          "confidence": 1
        },
        {
          "code": "dmarc_present",
          "weight": 5,
          "polarity": "positive",
          "category": "email_security",
          "evidence": "DMARC record present",
          "confidence": 1
        },
        {
          "code": "established_domain",
          "weight": 10,
          "polarity": "positive",
          "category": "domain_age",
          "evidence": "Domain age > 2 years",
          "confidence": 1
        },
        {
          "code": "mature_domain",
          "weight": 5,
          "polarity": "positive",
          "category": "domain_age",
          "evidence": "Domain age > 5 years",
          "confidence": 1
        },
        {
          "code": "paid_ssl",
          "weight": 5,
          "polarity": "positive",
          "category": "ssl_certificate",
          "evidence": "Uses paid SSL certificate",
          "confidence": 0.9
        },
        {
          "code": "valid_ssl",
          "weight": 3,
          "polarity": "positive",
          "category": "ssl_certificate",
          "evidence": "Valid SSL certificate",
          "confidence": 1
        }
      ],
      "negative": [
        {
          "code": "privacy_whois",
          "weight": 1,
          "polarity": "negative",
          "category": "whois_privacy",
          "evidence": "WHOIS information is privacy-protected",
          "confidence": 0.9
        },
        {
          "code": "external_redirect",
          "weight": 10,
          "polarity": "negative",
          "category": "content_analysis",
          "evidence": "Site redirects visitors to an external domain",
          "confidence": 0.8
        }
      ],
      "neutral": []
    },
    "indicators": {
      "is_newly_registered": false,
      "uses_free_extension": false,
      "uses_free_ssl": false,
      "has_privacy_whois": true,
      "ssl_age_days": 26,
      "has_dmarc": true,
      "has_spf": true,
      "redirects_externally": true,
      "javascript_obfuscated": false,
      "domain_age_days": 14446,
      "registrar": "NOM-IQ Ltd dba Com Laude"
    }
  },
  "email_deliverability": {
    "score": 95,
    "grade": "excellent",
    "can_receive_email": true,
    "authentication": {
      "spf": {
        "present": true,
        "policy": "~all",
        "record": "v=spf1 include:_spf.apple.com include:_spf-txn.apple.com ~all"
      },
      "dkim": {
        "found": true,
        "selectors_found": [
          "selector1",
          "selector2"
        ],
        "providers_detected": [],
        "note": "Only common selectors are probed; a domain may use a custom selector"
      },
      "dmarc": {
        "present": true,
        "policy": "quarantine",
        "reporting_configured": true
      }
    },
    "infrastructure": {
      "mx_count": 6,
      "mx_records": [
        "mx-in-ma.apple.com.",
        "mx-in.g.apple.com.",
        "mx-in-rn.apple.com.",
        "mx-in-sg.apple.com.",
        "mx-in-hfd.apple.com.",
        "mx-in-vib.apple.com."
      ],
      "mx_provider": "self_hosted",
      "null_mx": false
    },
    "reputation": {
      "spam_blacklisted": false,
      "newly_registered": false,
      "domain_age_days": 14446
    },
    "issues": [
      {
        "code": "spf_softfail",
        "severity": "low",
        "message": "The SPF policy '~all' only soft-fails unauthorized senders",
        "recommendation": "Move to '-all' once all legitimate sending sources are listed"
      }
    ]
  },
  "intelligence": {
    "ioc_type": "domain",
    "ioc_value": "apple.com",
    "related_iocs": [
      {
        "type": "ipv4",
        "value": "17.253.144.10",
        "confidence": 0.9
      },
      {
        "type": "ipv6",
        "value": "2620:149:af0:0:0:0:0:10",
        "confidence": 0.9
      }
    ],
    "feed_tags": [
      "verdict:safe",
      "severity:none",
      "ns:d.ns.apple.com.",
      "ns:b.ns.apple.com.",
      "ns:c.ns.apple.com.",
      "ns:a.ns.apple.com.",
      "mx:mx-in-ma.apple.com.",
      "mx:mx-in.g.apple.com.",
      "mx:mx-in-rn.apple.com.",
      "mx:mx-in-sg.apple.com.",
      "mx:mx-in-hfd.apple.com.",
      "mx:mx-in-vib.apple.com."
    ],
    "stix_pattern": "[domain-name:value = 'apple.com' OR ipv4-addr:value = '17.253.144.10' OR ipv6-addr:value = '2620:149:af0:0:0:0:0:10']",
    "recommended_action": "allow",
    "first_seen": null,
    "last_seen": null
  },
  "evidence_summary": {
    "why_flagged": []
  },
  "errors": []
}