Detección de Typosquatting | Documentación de la API de DomScan

GET /v1/typos

Parámetros de consulta

Parámetro	Tipo	Descripción
domain obligatorio	string	Dominio a comprobar para variantes de typosquatting
limit opcional	number	Maximo de permutaciones a comprobar (por defecto: 50)
check_registered opcional	boolean token Valores permitidos `1true` Predeterminado `false`	Comprueba qué permutaciones ya están registradas, hasta 50 dominios. Desactivado de forma predeterminada porque añade búsquedas en fuentes externas.

Respuesta de ejemplo

{
                "domain": "google.com",
                "permutations_generated": 50,
                "registered_typos": [
                {
                "domain": "gooogle.com",
                "type": "repetition",
                "risk": "high",
                "registered": true
                },
                {
                "domain": "googIe.com",
                "type": "homoglyph",
                "risk": "critical",
                "registered": true
                }
                ],
                "threat_level": "critical",
                "risk_summary": {
                "critical": 2,
                "high": 5,
                "medium": 10,
                "low": 8
                }
                }

Campos de respuesta

Campo	Tipo
`domain`	string
`name`	string
`tld`	string
`permutations_generated`	integer
`permutations_checked`	integer
`registered_typos[]`	object[]
`registered_typos[]`	object
`registered_typos[].domain`	string
`registered_typos[].type`	string
`registered_typos[].risk`	string
`registered_typos[].registered`	boolean
`registered_typos[].checked_at`	string
`available_typos`	integer
`unknown_typos`	integer
`risk_summary`	object
`risk_summary.critical`	integer
`risk_summary.high`	integer
`risk_summary.medium`	integer
`risk_summary.low`	integer
`threat_level`	string
`family_summary`	object
`family_summary.generated_by_type`	object
`family_summary.generated_by_risk`	object
`family_summary.registered_by_type`	object
`family_summary.registered_by_risk`	object
`family_summary.top_generated_family`	string \| null
`family_summary.top_registered_family`	string \| null
`family_summary.critical_or_high_generated_count`	integer
`family_summary.critical_or_high_registered_count`	integer
`family_summary.coverage_ratio`	number
`family_summary.checked_count`	integer
`family_summary.available_count`	integer
`family_summary.unknown_count`	integer
`family_summary.omitted_count`	integer
`family_summary.include_tld_swap`	boolean
`family_summary.requested_limit`	integer
`checked_at`	string

GET /v1/typos/threats

Parámetros de consulta

Parámetro	Tipo	obligatorio
domain	string	obligatorio
limit	integer Predeterminado `200`	opcional
include_tld_swap	boolean Predeterminado `true`	opcional

Campos de respuesta

Campo	Tipo
`domain`	string
`name`	string
`tld`	string
`scan_summary`	object
`scan_summary.permutations_generated`	integer
`scan_summary.permutations_checked`	integer
`scan_summary.permutations_submitted`	integer
`scan_summary.definitive_results`	integer
`scan_summary.unknown_results`	integer
`scan_summary.omitted_results`	integer
`scan_summary.registered_count`	integer
`scan_summary.active_threats`	integer
`scan_summary.available_for_defensive`	integer
`scan_summary.check_limit`	integer
`scan_summary.coverage_truncated`	boolean
`threat_level`	string
`protection_score`	object
`threats[]`	object[]
`threats[]`	object
`threats[].domain`	string
`threats[].type`	string
`threats[].risk`	string
`threats[].description`	string
`threats[].dns_active`	boolean
`threats[].has_website`	boolean
`threats[].has_mx`	boolean
`threats[].infrastructure`	object
`threats[].threat_indicators[]`	string[]
`threats[].threat_score`	integer
`defensive_opportunities[]`	object[]
`defensive_opportunities[]`	object
`defensive_opportunities[].domain`	string
`defensive_opportunities[].type`	string
`defensive_opportunities[].risk`	string
`defensive_opportunities[].registered`	boolean
`defensive_opportunities[].checked_at`	string
`risk_breakdown`	object
`recommendations[]`	string[]
`checked_at`	string
`scan_duration_ms`	integer
`meta`	object

Solicitud de ejemplo

curl -H "X-API-Key: $DOMSCAN_API_KEY" "https://domscan.net/v1/typos/threats?domain=example.com&limit=25&include_tld_swap=true"

Respuesta de ejemplo

{
  "domain": "example.com",
  "scan_summary": {
    "permutations_generated": 1,
    "permutations_checked": 1,
    "registered_count": 1,
    "active_threats": 1,
    "available_for_defensive": 1,
    "permutations_submitted": 1,
    "definitive_results": 1,
    "unknown_results": 1,
    "omitted_results": 1,
    "check_limit": 1,
    "coverage_truncated": false
  },
  "threat_level": "none",
  "threats": [
    {
      "domain": "example.com",
      "type": "domain",
      "risk": "critical",
      "dns_active": true,
      "has_website": false,
      "threat_indicators": [
        "example"
      ],
      "threat_score": 85,
      "description": "example",
      "has_mx": false,
      "infrastructure": {}
    }
  ],
  "checked_at": "2026-08-27T12:00:00Z",
  "name": "example",
  "tld": "com",
  "protection_score": {},
  "defensive_opportunities": [
    {
      "domain": "example.com",
      "type": "domain",
      "risk": "critical",
      "registered": false,
      "checked_at": "2026-08-27T12:00:00Z"
    }
  ],
  "risk_breakdown": {},
  "recommendations": [
    "example"
  ],
  "scan_duration_ms": 1,
  "meta": {}
}

GET /v1/typos/report

Parámetros de consulta

Parámetro	Tipo	obligatorio
domain	string	obligatorio

Campos de respuesta

Campo	Tipo
`domain`	string
`generated_at`	string
`executive_summary`	object
`executive_summary.threat_level`	string
`executive_summary.protection_grade`	string
`executive_summary.active_threats`	integer
`executive_summary.registered_typos`	integer
`executive_summary.immediate_action_required`	boolean
`threat_analysis`	object
`threat_analysis.domain`	string
`threat_analysis.name`	string
`threat_analysis.tld`	string
`threat_analysis.scan_summary`	object
`threat_analysis.scan_summary.permutations_generated`	integer
`threat_analysis.scan_summary.permutations_checked`	integer
`threat_analysis.scan_summary.permutations_submitted`	integer
`threat_analysis.scan_summary.definitive_results`	integer
`threat_analysis.scan_summary.unknown_results`	integer
`threat_analysis.scan_summary.omitted_results`	integer
`threat_analysis.scan_summary.registered_count`	integer
`threat_analysis.scan_summary.active_threats`	integer
`threat_analysis.scan_summary.available_for_defensive`	integer
`threat_analysis.scan_summary.check_limit`	integer
`threat_analysis.scan_summary.coverage_truncated`	boolean
`threat_analysis.threat_level`	string
`threat_analysis.protection_score`	object
`threat_analysis.threats[]`	object[]
`threat_analysis.threats[]`	object
`threat_analysis.threats[].domain`	string
`threat_analysis.threats[].type`	string
`threat_analysis.threats[].risk`	string
`threat_analysis.threats[].description`	string
`threat_analysis.threats[].dns_active`	boolean
`threat_analysis.threats[].has_website`	boolean
`threat_analysis.threats[].has_mx`	boolean
`threat_analysis.threats[].infrastructure`	object
`threat_analysis.threats[].threat_indicators[]`	string[]
`threat_analysis.threats[].threat_score`	integer
`threat_analysis.defensive_opportunities[]`	object[]
`threat_analysis.defensive_opportunities[]`	object
`threat_analysis.defensive_opportunities[].domain`	string
`threat_analysis.defensive_opportunities[].type`	string
`threat_analysis.defensive_opportunities[].risk`	string
`threat_analysis.defensive_opportunities[].registered`	boolean
`threat_analysis.defensive_opportunities[].checked_at`	string
`threat_analysis.risk_breakdown`	object
`threat_analysis.recommendations[]`	string[]
`threat_analysis.checked_at`	string
`threat_analysis.scan_duration_ms`	integer
`threat_analysis.meta`	object
`defensive_registration_priority`	object
`monitoring_recommendations[]`	string[]
`estimated_risk_exposure`	string
`meta`	object

Solicitud de ejemplo

curl -H "X-API-Key: $DOMSCAN_API_KEY" "https://domscan.net/v1/typos/report?domain=example.com"

Respuesta de ejemplo

{
  "domain": "example.com",
  "generated_at": "2026-08-27T12:00:00Z",
  "executive_summary": {
    "threat_level": "example",
    "protection_grade": "example",
    "active_threats": 1,
    "registered_typos": 1,
    "immediate_action_required": false
  },
  "threat_analysis": {
    "domain": "example.com",
    "scan_summary": {
      "permutations_generated": 1,
      "permutations_checked": 1,
      "registered_count": 1,
      "active_threats": 1,
      "available_for_defensive": 1,
      "permutations_submitted": 1,
      "definitive_results": 1,
      "unknown_results": 1,
      "omitted_results": 1,
      "check_limit": 1,
      "coverage_truncated": false
    },
    "threat_level": "none",
    "threats": [
      {
        "domain": "example.com",
        "type": "domain",
        "risk": "critical",
        "dns_active": true,
        "has_website": false,
        "threat_indicators": [
          "example"
        ],
        "threat_score": 85,
        "description": "example",
        "has_mx": false,
        "infrastructure": {}
      }
    ],
    "checked_at": "2026-08-27T12:00:00Z",
    "name": "example",
    "tld": "com",
    "protection_score": {},
    "defensive_opportunities": [
      {
        "domain": "example.com",
        "type": "domain",
        "risk": "critical",
        "registered": false,
        "checked_at": "2026-08-27T12:00:00Z"
      }
    ],
    "risk_breakdown": {},
    "recommendations": [
      "example"
    ],
    "scan_duration_ms": 1,
    "meta": {}
  },
  "estimated_risk_exposure": "minimal",
  "defensive_registration_priority": {},
  "monitoring_recommendations": [
    "example"
  ],
  "meta": {}
}

GET /v1/typos/quick

Parámetros de consulta

Parámetro	Tipo	obligatorio
domain	string	obligatorio
limit	integer Predeterminado `100`	opcional

Campos de respuesta

Campo	Tipo
`domain`	string
`registered_typos[]`	object[]
`registered_typos[]`	object
`registered_typos[].domain`	string
`registered_typos[].type`	string
`registered_typos[].risk`	string
`registered_typos[].description`	string
`count`	integer
`threat_level`	string
`coverage`	object
`coverage.requested`	integer
`coverage.definitive`	integer
`coverage.unknown`	integer
`coverage.omitted`	integer
`checked_at`	string
`scan_duration_ms`	integer
`meta`	object

Solicitud de ejemplo

curl -H "X-API-Key: $DOMSCAN_API_KEY" "https://domscan.net/v1/typos/quick?domain=example.com&limit=25"

Respuesta de ejemplo

{
  "domain": "example.com",
  "registered_typos": [
    {
      "domain": "example.com",
      "type": "domain",
      "risk": "critical",
      "description": "example"
    }
  ],
  "count": 1,
  "threat_level": "none",
  "checked_at": "2026-08-27T12:00:00Z",
  "coverage": {
    "requested": 1,
    "definitive": 1,
    "unknown": 1,
    "omitted": 1
  },
  "scan_duration_ms": 1,
  "meta": {}
}