Domain Reputation API Docs

Domain Reputation API

ASK AI

The WhoisFreaks Domain Reputation API is a real-time domain threat assessment service. Given any domain name, it returns a comprehensive risk verdict, trust score, DGA (Domain Generation Algorithm) analysis, threat intelligence matches, and actionable security signals — all in a single API call.

Authorization

You can make authorized requests to our API by passing API key as a query parameter. To get your API key, login to our billing dashboard and get your API key! If your API key has been compromised, you can change it by clicking on reset button in billing dashboard.

Important References

For details on request limits and handling rate limiting, refer here
For a complete overview of API credit consumption and usage, refer here

Query Parameters

Required

apiKey
Retrieve your API key from the billing dashboard.
domainName
The domain name to assess (e.g., `example.com`). Must contain at least one dot, max 253 characters. Automatically lowercased.

Request

SHELL

Loading request...

Response

Loading response...

Fields Description

Fields

Details

Example

input

Input object containing the analyzed domain

domain

Domain name being analyzed

example.com

assessed_at

Timestamp when the assessment was performed

2026-07-08T08:12:29Z

version

API/response schema version

1.0.0

processing_time_ms

Time taken to process the request, in milliseconds

742

risk_category

Overall risk assessment for the domain

verdict

Final verdict of the risk assessment

suspicious

confidence

Confidence score for the verdict

0.94

primary_threat

Main threat type identified

phishing

severity

Severity level of the risk

high

threat_types

List of threat types associated with the domain

["phishing", "spam"]

sources

Threat intelligence sources that flagged the domain

source

Name of the threat intelligence source

Spamhaus

indicator

Indicator matched by this source

example.com

threat_type

Threat type reported by this source

phishing

confidence

Confidence score from this source

0.97

first_seen

First time this indicator was seen by the source

2026-07-01T10:22:00Z

last_seen

Last time this indicator was seen by the source

2026-07-08T05:00:00Z

pivot_matches

Related pivots (NS, email, etc.) linked to known threats

pivot

Pivot value (e.g. nameserver or email)

ns1.exampledns.com

pivot_type

Type of pivot

ns

total_related_threats

Total number of threats related to this pivot

34

confidence

Confidence score for the pivot match

0.92

dga_score

Domain Generation Algorithm (DGA) detection results

score

DGA likelihood score

0.81

is_dga

Indicates whether the domain is likely DGA-generated

true

model

Model used to compute the DGA score

deterministic_features_v1

features

Underlying lexical/statistical features used in DGA detection

domain_length

Length of the domain name

17

vowel_consonant_ratio

Ratio of vowels to consonants in the domain

0.18

ngram_perplexity

N-gram perplexity score of the domain string

3.91

shannon_entropy

Shannon entropy of the domain string

4.72

digit_letter_ratio

Ratio of digits to letters in the domain

0.23

consonant_streak_max

Maximum consecutive consonant streak in the domain

6

tld_in_known_dga_set

Indicates if the TLD belongs to a known DGA set

false

interpretation

Human-readable interpretation of the DGA score

likely_dga

trust_signals

Trust scoring and supporting signals for the domain

trust_score

Overall trust score

12

trust_band

Trust score band/category

low

signals

Signals contributing to the trust score

positive

Signals that positively affect trust score

code

Signal code identifier

valid_ssl

weight

Weight assigned to the signal

8

polarity

Polarity of the signal

positive

Domain Reputation API Documentation