For security, trust, abuse, and brand-protection teams
Use bounded passive checks to enrich triage and investigation, not to replace authorized testing or human review.
Security and Trust
Turn public risk signals into a review queue
Find suspicious naming patterns, inspect trust and email controls, and prioritize evidence without treating a clean check as proof of safety.
Separate discovery from validation
Generate or compare suspicious names, establish whether they are registered, then inspect certificate, reputation, email, and website evidence.
Inputs
DomainCertificateURLDNS nameEmail address
Outcomes
CompareAssessProtectDiscoverVerify
Choose evidence for the risk you are reviewing
Use similarity and typosquatting for names, certificate and reputation products for trust context, email products for mail posture, and vulnerability intelligence for passive public-response findings.
Domain Similarity
Find domains similar to a given domain based on name patterns and keywords.
Choose this when: Choose this for name, text, keyboard, and homoglyph similarity. It does not compare website meaning or visual design.
- Inputs
- Domain
- Outcomes
- Compare, Assess, Protect
- Credits
- 2
SynchronousRESTMCPSDK
Typosquatting Detection
Detect typosquatting threats and similar domains that could be used for phishing or brand abuse.
Choose this when: Choose this to generate likely lookalike variants and check their domain status without treating unknown as safe.
- Inputs
- Domain
- Outcomes
- Discover, Assess, Protect
- Credits
- 2-18
SynchronousRESTMCPSDKInteractive tool
SSL Certificates
Get SSL certificate information including issuer, validity, and security grade.
Choose this when: Choose this to inspect public TLS certificate evidence, validity, names, and chain-related signals where available.
- Inputs
- Domain, Certificate
- Outcomes
- Discover, Verify, Assess
- Credits
- 1-10
SynchronousBulkRESTMCPSDKInteractive tool
Website Vulnerability Scanner
Find exposed software, risky configurations, and known affected versions across a public website. Every result explains what was checked, why it matched, and how strong the evidence is.
Choose this when: Choose this for passive exposed-version and configuration evidence. It does not exploit the target or prove the site is vulnerability-free.
- Inputs
- URL, Domain
- Outcomes
- Assess, Protect
- Credits
- 8-12
SynchronousRESTMCPSDKInteractive tool
Domain Reputation
Check domain reputation across multiple threat intelligence sources.
Choose this when: Choose this for a combined reputation view with evidence, coverage, and unknown results kept visible.
- Inputs
- Domain
- Outcomes
- Assess, Verify
- Credits
- 3
SynchronousRESTMCPSDKInteractive tool
Email Authentication
Analyze email authentication records including SPF, DKIM, and DMARC.
Choose this when: Choose this to inspect SPF, DKIM, DMARC, and related email-authentication posture for a domain.
- Inputs
- Domain, DNS name
- Outcomes
- Verify, Assess, Protect
- Credits
- 1-3
SynchronousBulkRESTMCPSDKInteractive tool
Email Compliance
Analyze email authentication records including SPF, DKIM, and DMARC.
Choose this when: Choose this for a policy-oriented review of public email controls and published compliance signals.
- Inputs
- Domain
- Outcomes
- Verify, Assess
- Credits
- 6
SynchronousRESTMCPSDK
Email Blacklist
Check if a domain or IP is listed on email blacklists.
Choose this when: Choose this to check supported blacklist evidence at a point in time. A clean result is not a universal reputation guarantee.
- Inputs
- Email address
- Outcomes
- Verify, Assess
- Credits
- 0-1
SynchronousBulkRESTMCPSDKInteractive tool
Workflows
Start from the reported domain, compare it with the protected name, then add registration, DNS, certificate, reputation, and website evidence.
Phishing and impersonation triage
Start from the reported domain, compare it with the protected name, then add registration, DNS, certificate, reputation, and website evidence.
Website exposure review
Detect exposed technologies, correlate exact versions with public advisories, and keep partial or unavailable checks explicit.
Triage a possible brand lookalike
Compare a suspicious domain with the protected name, check its registration status, then request trust evidence for registered findings.
Example Request
curl -H "X-API-Key: $DOMSCAN_API_KEY" "https://domscan.net/v1/reputation?domain=example.com"Example Response
{
"domain": "example.com",
"reputation_score": 92,
"grade": "A",
"risk_level": "low",
"recommendations": []
}Use focused checks or a threat-assessment recipe
Call individual products for known indicators, batch supported GET requests, or use a documented recipe when the investigation spans several suites.
SynchronousBulkRESTMCPSDKInteractive tool
No passive check proves safety or malicious intent
Findings reflect completed public checks. Blocked, incomplete, unsupported, and inconclusive evidence remains unknown.
Related solutions
Find and prioritize domains that could be mistaken for your brand
Combine similarity, typosquatting generation, domain status, trust evidence, and monitoring into a repeatable review path.
Investigate whether a suspicious domain is presenting as your brand
Move from a reported indicator to connected public evidence without treating any single signal as proof.
Review DNS posture before and after a change
Combine current records, security-control evidence, resolver comparisons, certificates, and email authentication into an operational review.
Assess whether digital identity inputs are consistent enough for the next step
Combine input validation, public-domain context, social classification, company evidence, and website-declared relationships for risk-aware routing.
Assess email risk and sending-domain posture before you act
Combine address-level signals with domain-level mail authentication, compliance, DNS, and blacklist evidence.
Follow a domain into the public infrastructure around it
Start with one domain or host, collect current resolution evidence, and pivot through observed relationships that matter to the investigation.
Investigate the evidence behind the alert
Choose a focused security product or follow the threat-assessment workflow across related signals.