Scam intelligence for every domain, in one request
The data behind every websurely.com report — Scam Score, risk level, domain age, SSL, hosting network, DNS, technologies and threat-feed hits — as clean JSON for your own checks.
Call packs from 10 € · calls never expire · 404s and errors are free
Send a real request
This calls the production endpoint GET /v1/domain/{domain} with our public demo key (25 lookups per day). What you see is exactly what your integration gets.
Press “Send request” to call the API.curl -s https://websurely.com/v1/domain/cryptol.online \
-H "x-api-key: wsk_demo_0000000000000000000000000000000000000000"Replace the demo key with your own wsk_live_… key. Unknown domains answer 404 and are free — queue them with POST /v1/scan.
Everything our report pages know
One JSON document per domain, refreshed at least every 30 days and on demand.
Scam Score & risk level
A 0–100 score (BETA) from 30+ weighted signals, the risk level (Low · Uncertain · Suspicious · High), a plain-language verdict and recommendation.
Domain age & registrar
Registration, update and expiry dates from RDAP/WHOIS, the registrar and the age in days — the strongest single fraud signal.
SSL certificate
Validity, DV/OV/EV type, issuer, expiry and whether a free CA issued it.
Hosting network
IP address, ASN, network owner and server country.
DNS & technologies
A, AAAA, CNAME, MX, NS and TXT records plus detected technologies (CMS, shop system, CDN).
Threat intelligence
Hits on phishing and malware feeds, popularity rank, manual-review and confirmed-scam flags, Verified Business status.
Built for teams that fight fraud
Trust & safety
Score links in user messages, listings and profiles before they reach your community. Auto-hide high-risk domains, queue uncertain ones for moderators.
Payment risk
Check the merchant website at onboarding and at payout. Brand-new domains, missing imprints and copied shops are classic fraud patterns.
Ad networks
Screen landing pages before campaigns go live and re-check them later — scam shops love paid traffic.
Browser security
Warn users in your extension, mail client or secure browser — the same data that powers our own extension.
Three endpoints. That's it.
| Endpoint | What it does | Cost |
|---|---|---|
GET /v1/domain/{domain} | Stored intelligence of a domain. 404 if we never scanned it. | 1 call (404 free) |
POST /v1/scan | Queue a scan of {"url":"example.com"} — 202 initiated, or 200 fresh with the report if it is recent. | 1 call |
GET /v1/usage | Your plan, calls used and calls left. | free |
Auth: x-api-key header · 60 requests/minute per key (429 + Retry-After) · errors are always {"error":{"code":…,"message":…}} · 4xx and 500 never cost a call.
Pay per call. No subscription.
Buy a pack, use it whenever you like — calls never expire. Top up any time.
Starter
2,000 API calls
- 0.5 ct per call
- Calls never expire
- 60 requests / minute
- 404s and errors are free
Growth
10,000 API calls
- 0.25 ct per call
- Calls never expire
- 60 requests / minute
- 404s and errors are free
Scale
30,000 API calls
- 0.17 ct per call
- Calls never expire
- 60 requests / minute
- 404s and errors are free
Prices incl. VAT where applicable. Need more than 30,000 calls or an invoice in advance? Tell us.
API questions
What does a call cost?
Is there a rate limit?
Do calls expire?
Ready to integrate?
The OpenAPI 3.1 reference has every field, header and error with examples — import it into Postman, Insomnia or your code generator.