The Alertoscan API
Bring our scam-detection engine into your own product: trust scores, regulator warnings and scam-network intelligence, through one simple API.
What you can build with
The same intelligence that powers alertoscan.io, exposed for your systems.
Scan & scoring
Trust score, verdict and category for any URL or domain in seconds.
Blacklists & reputation
Google Safe Browsing, Cloudflare and community blocklist verdicts. (VirusTotal not included.)
Regulator warnings
Financial-watchdog alerts worldwide, matched to a domain.
Threat graph & clusters
Connected domains, shared infrastructure and named scam networks.
Screenshots & assets
Rendered page screenshots, favicons, logos and brand assets.
Infrastructure
WHOIS, SSL, DNS, hosting, geolocation, security headers and tech stack.
Uptime monitoring
Daily availability history and status transitions per domain.
Reports API
Read community scam reports, or submit your own via POST.
Everything in a scan
A single scan returns dozens of signals, the same ones you see on a report page, structured for machines.
Scoring & classification
- Trust score (0 to 100)
- Verdict: safe to dangerous
- Category & sub-categories
- Confidence
Blacklists & reputation
- Google Safe Browsing (direct)
- Cloudflare phishing protection
- Community crypto & phishing feeds
- Phishing / malware flags
Regulatory
- Financial-regulator warnings
- Regulator, country, date & source URL
- Warning type
Threat graph
- Connected scam domains
- Named clusters & networks
- Shared IP / ASN / registrar / nameserver
- Template signatures
Infrastructure
- WHOIS: registrar, created / updated / expires, DNSSEC
- SSL: issuer, validity, protocol, SAN
- Hosting, ASN & IP geolocation
- Security headers
- Detected technologies
- DNS & redirect chain
Visual & brand
- Rendered page screenshot
- Favicons & icons
- Logo, OG & brand assets
- Brand / company name
Indicators (IOC)
- Emails, phones & addresses
- Telegram handles
- Crypto wallet addresses
Performance & network
- Page timing: DNS, TLS, TTFB, load
- Network stats: requests, bytes, HTTPS %
- HTTP transactions
- Cookies
Monitoring & reports
- Uptime history & status
- Community reports (read)
- Submit a report (POST)
- Exports: STIX 2.1, CSV, JSON
VirusTotal data is not included. Under VirusTotal's licensing terms we do not redistribute their antivirus-engine results through our API. If you need VirusTotal verdicts, use your own VirusTotal API key alongside ours.
A single request
GET https://api.alertoscan.io/v1/scan?url=example-broker.com Authorization: Bearer <your-api-key>
{
"domain": "example-broker.com",
"trust_score": 12,
"verdict": "dangerous",
"category": "cryptocurrency",
"flags": {
"regulators": 2,
"blacklists": 3
},
"network": { "connected_domains": 41 },
"last_scanned": "2026-07-14"
}Illustrative. The full field reference is shared with your API key.
How to get started
Request access
Tell us about your use case. We grant API keys on a per-project basis.
Get your key
Receive a scoped API key and the endpoint reference for your project.
Start querying
Call the API from your backend and act on the trust score in your product.
Who it's for
Fintech & brokers
Block fraudulent counterparties before onboarding a user or partner.
Marketplaces
Vet seller and merchant links to keep scams off your platform.
Wallets & exchanges
Warn users in-app before they interact with a flagged crypto site.
Compliance & KYB
Enrich due-diligence workflows with live threat intelligence.
Access is granted on request
We provision API keys per project so we can tailor rate limits and data scope to your use case. Tell us what you're building and we'll get you set up.