Domain Reputation API

POSTv1

Authentication

All API requests require an API key to be included in the x-authkey header.

How to get your API Key

Visit your API Keys page in the dashboard.
Locate the active subscription for the API product you wish to use.
Copy the key from the API Key field.

Note: You must have an active subscription to use an API key.

// Example Header
x-authkey: YOUR_API_KEY

Endpoint

POST /domain-reputation

Parameters

Name	Type	Required
domain	STRING	Required

Code Examples

Sample Response

{
  "data": {
    "domain": "thedataclouds.com",
    "queried_at": "2025-12-19T20:58:43.133342Z",
    "categorization": {
      "popularity_rank": "Low/Unranked",
      "is_risky_category": false,
      "content_categories": [
        "Uncategorized"
      ]
    },
    "infrastructure": {
      "ip": "172.67.162.160",
      "asn": "AS13335 Cloudflare, Inc.",
      "isp": "Cloudflare, Inc.",
      "org": "Cloudflare, Inc.",
      "country": "Canada",
      "reverse_dns": null,
      "country_code": "CA"
    },
    "domain_identity": {
      "age_days": 96,
      "registrar": "WEBCC",
      "creation_date": "2025-09-14T00:00:00Z",
      "expiration_date": "2026-09-14T07:00:26+00:00",
      "is_newly_registered": false
    },
    "global_security_analysis": {
      "trust_score": 100,
      "risk_verdict": "Clean",
      "flags_detected": 0,
      "scanners_analyzed": 95,
      "last_analysis_date": "2025-12-11T03:49:51Z"
    }
  },
  "status": "success"
}

Global Security Analysis

This section provides the overall verdict on the domain's safety.

We aggregate data from multiple virus scanners and threat intelligence feeds to calculate a trust score. You can test these results manually using our Domain Reputation Tool.

Key Name	Type	Description
trust_score	Integer	A score from 0 (Malicious) to 100 (Safe). See the Score Guide below.
risk_verdict	String	A text summary of the risk: 'Clean', 'Suspicious', 'Malicious', or 'Unknown'.
flags_detected	Integer	The number of security vendors that flagged this domain as malicious.
scanners_analyzed	Integer	The total number of security engines checked during this scan.
last_analysis_date	String	ISO 8601 timestamp of when the threat data was last updated.

Domain Identity & Age

Fraudsters often use 'fresh' domains (registered < 30 days ago). Use these fields to verify how established the domain is.

Domain age is a primary factor in the Global Security Analysis.

Key Name	Type	Description
age_days	Integer	The number of days since the domain was created.
is_newly_registered	Boolean	Returns `true` if the domain is less than 30 days old (High Risk signal).
creation_date	String	ISO 8601 date when the domain was first registered.
expiration_date	String	ISO 8601 date when the domain registration expires.
registrar	String	The company managing the domain name (e.g., GoDaddy, Namecheap).

Infrastructure & Geolocation

Technical details about where the domain is hosted. Useful for geo-blocking or identifying 'bulletproof' hosting providers.

Infrastructure data helps determine if a domain belongs to a risky category.

Key Name	Type	Description
ip	String	The resolved IPv4 address of the domain.
country	String	The physical country where the server is located.
country_code	String	Two-letter ISO country code (e.g., US, DE, CN).
isp	String	The Internet Service Provider hosting the domain.
org	String	The specific organization owning the IP block.
asn	String	Autonomous System Number. Useful for blocking entire bad networks.
reverse_dns	String	The hostname associated with the IP address (PTR record).

Content Categorization

Understanding what the domain is used for (e.g., Business, Gambling, Adult).

Domains in 'High Risk' categories often receive a lower Trust Score.

Key Name	Type	Description
content_categories	Array	A list of tags describing the website content (e.g., 'Technology', 'Adult', 'Phishing').
is_risky_category	Boolean	Returns `true` if the category is sensitive (Gambling, Adult, Hacking).
popularity_rank	String	The domain's global traffic ranking (e.g., 'Top 1000') or 'Low/Unranked'.

Trust Score Interpretation

How to interpret the `trust_score` found in the Global Security Analysis section.

For high-volume automated scanning, refer to the Domain Reputation API documentation.

Score	Verdict	Recommended Action
100	✅ Clean	Safe. No security vendors flagged this domain.
80 - 99	⚠️ Low Risk	Generally safe, but may have 1 minor flag or insufficient history.
1 - 79	⛔ Suspicious	Multiple security vendors flagged this domain. Treat with caution.
0	❌ Malicious	Confirmed malware, phishing, or botnet domain. Block immediately.