What is a domain reputation API?
A domain reputation API returns vendor, community, blocklist, behavior, infrastructure, or observed-threat signals associated with a domain. Scores and categories reflect a provider's evidence model and should retain an unknown or review path.
Best Domain Reputation APIs - Top 8
VirusTotal
Our Pick Free Tier- Rich multi-source domain objects, detections, categories, resolutions, and community context.
Spamhaus Intelligence API
Runner Up- Specialist domain and IP reputation data for abuse and threat-screening workflows.
DomainTools
- Domain risk and reputation lookups with documented score interpretation and domain context.
Google Web Risk
- Useful threat-list and submission APIs for checking URLs against Google-managed risk signals.
Pangea Domain Reputation
- API-oriented domain reputation and detailed intelligence for application decisions.
IPQualityScore
- Practical URL and domain risk signals for fraud, abuse, and moderation workflows.
urlscan.io
Free Tier- Observed page, request, resource, and scan evidence helps analysts investigate suspicious domains.
DomScan
Free Tier- Transparent best-effort enrichment with explicit unknown states and evidence-oriented fields.
Detailed Reviews
VirusTotal Review
Rich multi-source domain objects, detections, categories, resolutions, and community context.
Pros
- Rich multi-source domain objects, detections, categories, resolutions, and community context.
Cons
- Community and vendor detections are evidence, not one authoritative verdict.
Our Verdict
Rich multi-source domain objects, detections, categories, resolutions, and community context.
Spamhaus Intelligence API Review
Specialist domain and IP reputation data for abuse and threat-screening workflows.
Pros
- Specialist domain and IP reputation data for abuse and threat-screening workflows.
Cons
- Returned IP reputation may not strictly represent the queried domain's sender reputation.
Our Verdict
Specialist domain and IP reputation data for abuse and threat-screening workflows.
DomainTools Review
Domain risk and reputation lookups with documented score interpretation and domain context.
Pros
- Domain risk and reputation lookups with documented score interpretation and domain context.
Cons
- Scores require contextual interpretation and do not prove malicious intent.
Our Verdict
Domain risk and reputation lookups with documented score interpretation and domain context.
Google Web Risk Review
Useful threat-list and submission APIs for checking URLs against Google-managed risk signals.
Pros
- Useful threat-list and submission APIs for checking URLs against Google-managed risk signals.
Cons
- A missing match is not proof that a domain or URL is safe.
Our Verdict
Useful threat-list and submission APIs for checking URLs against Google-managed risk signals.
Pangea Domain Reputation Review
API-oriented domain reputation and detailed intelligence for application decisions.
Pros
- API-oriented domain reputation and detailed intelligence for application decisions.
Cons
- Automated decisions need an unknown or review path instead of treating every low score as malicious.
Our Verdict
API-oriented domain reputation and detailed intelligence for application decisions.
IPQualityScore Review
Practical URL and domain risk signals for fraud, abuse, and moderation workflows.
Pros
- Practical URL and domain risk signals for fraud, abuse, and moderation workflows.
Cons
- Risk scoring is probabilistic and should be validated against the decision being automated.
Our Verdict
Practical URL and domain risk signals for fraud, abuse, and moderation workflows.
urlscan.io Review
Observed page, request, resource, and scan evidence helps analysts investigate suspicious domains.
Pros
- Observed page, request, resource, and scan evidence helps analysts investigate suspicious domains.
Cons
- A scan observation is not a universal reputation verdict or proof of current behavior.
Our Verdict
Observed page, request, resource, and scan evidence helps analysts investigate suspicious domains.
DomScan Review
Transparent best-effort enrichment with explicit unknown states and evidence-oriented fields.
Pros
- Transparent best-effort enrichment with explicit unknown states and evidence-oriented fields.
Cons
- Use it as one screening signal, not a definitive malware, phishing, or registration-safety decision.
Our Verdict
DomScan is our top pick for developers building domain-related applications in 2026. The combination of wide TLD coverage, generous free tier, and modern API design makes it the clear choice for most use cases.
How We Rank
We compare evidence provenance, category semantics, score explainability, domain versus IP scope, freshness, API stability, false-positive handling, unknown and rate-limited states, and whether a score is community-derived, vendor-derived, or based on observed indicators.
Last updated: