Threat analysis18 credits

Threat Assessment

Typosquatting and brand threat analysis for security teams.

Enter your domain to find typosquatting threats

Threat summary

Active threats

Recommendations

    Interactive intelligence tool

    Run the check, then ship the workflow

    Use the browser tool for a fast answer, then move the same logic into scripts, monitoring, or product flows when it becomes repeatable.

    1
    Start with the live form

    Enter a domain, URL, IP, email, or record and get a focused result without setup.

    2
    Review decision-ready signals

    Outputs highlight statuses, risks, records, and next actions instead of raw provider noise.

    3
    Automate the workflow that works

    Use the request and response examples to turn a one-off check into an API call or recipe.

    Used by people at these companies

    InstantOutseerMongoDBRespondentSage Expense ManagementInstantlyD.R. HortonWhatConvertsAdobeLLM Pulse

    What this tool helps you decide

    Each page is shaped around a practical operational question, not just a raw lookup.

    Signal

    See the current DNS, registration, security, pricing, or reputation evidence.

    Context

    Compare the result with related checks so the next move is easier to trust.

    Action

    Copy examples, open linked tools, or move into API documentation when you need scale.

    Trust signals before you integrate

    Transparent docs, authenticated requests, and visible reliability details make it easier to evaluate DomScan before you ship.

    Live Service status

    Check live service health and documented failure responses before you integrate.

    OpenAPI API artifacts

    OpenAPI, Swagger, Postman, CLI, SDK, and MCP links are one click away.

    API keys Protected access

    Authenticated endpoints use API keys with clear credit costs before you call them.

    10,000 Free allowance

    Start with 10,000 monthly credits and upgrade only when usage grows.

    Key Features

    Threat summary

    Risk scoring and prioritization

    Variants generated

    Typosquatting domain detection

    Active threats

    Active threat identification

    Recommendations

    Remediation recommendations

    Example request

    Example request bash
    curl -s "https://domscan.net/v1/recipes/threat-assessment?domain=example.com"   -H "X-API-Key: $DOMSCAN_API_KEY"

    Example response

    Example response json
    {
      "success": true,
      "data": {
        "summary": {
          "risk_level": "medium",
          "overall_score": 63,
          "total_variants_generated": 42,
          "variants_registered": 6,
          "active_threats": 2,
          "suspicious_activity": 1
        },
        "threats": [
          {
            "domain": "examp1e.com",
            "threat_type": "homoglyph",
            "risk_level": "high",
            "indicators": {
              "has_website": true
            }
          }
        ],
        "recommendations": [
          "Investigate high-risk lookalike domains first."
        ]
      },
      "meta": {
        "recipe_name": "threat-assessment",
        "credits_used": 18,
        "credits_saved": 22,
        "duration_ms": 1188
      },
      "errors": []
    }

    Built on the same API

    The browser experience previews DomScan's structured endpoints, so teams can validate a use case before writing code.

    Related tools and resources