Loading
Loading
Assess any domain and get a synthesized risk verdict, a weighted trust score, DGA detection, threat intelligence matches, and a full email deliverability check in one call. Every score carries the evidence behind it, and partial data is called out in errors rather than silently dropped.
Pass the domain to assess in the domainName query parameter. A successful request returns a 200 OK with the full assessment object described below.
Authorize every request with your API key, passed either as a header or as a query parameter:
X-apiKeyapiKeyThis is version v1.0 of the API.
The following parameters can be used in your API requests. All parameters are passed as query string parameters.
domainNamerequiredStringdefault: apple.comThe domain name to assess (e.g. example.com). Must contain at least one dot and be at most 253 characters. Automatically lowercased.
A successful request returns a 200 OK response with a JSON object containing the full domain assessment. See the response preview on the right for the complete JSON structure, including the nested risk_category, dga_score, trust_signals, email_deliverability, and intelligence objects.
Input object containing the analyzed domain.
assessed_atTimestamp when the assessment was performed (YYYY-MM-DDTHH:mm:ssZ).
versionAPI / response schema version.
processing_time_msTime taken to process the request, in milliseconds.
Overall risk assessment for the domain.
Domain Generation Algorithm (DGA) detection results.
Trust scoring and supporting signals for the domain.
Assessment of the domain's ability to send and receive email reliably.
Threat intelligence details for the indicator of compromise (IOC).
Summary of reasons behind the risk assessment.
errorsList of errors encountered during processing, if any (e.g. "WHOIS lookup failed"). An empty array means every signal resolved.
Besides the response body, every response carries custom headers you can use to track credit usage, and concurrency usage on endpoints that enforce a concurrency limit. See the Custom Response Headers documentation and the endpoints with concurrency limits for more details.
X-Concurrent-Threadsheaderconcurrency-limited endpointsSpecifies the maximum number of concurrent requests allowed.
X-Concurrent-Threads-Activeheaderconcurrency-limited endpointsIndicates the number of active concurrent requests being processed.
X-AF-Credits-Costheaderall responsesSpecifies the number of credits consumed by the current request.
See the HTTP Status Codes documentation for a complete reference of common API errors and HTTP status codes.
Please provide a valid domain name in the "domainName" parameter.