The Alertoscan API

Bring our scam-detection engine into your own product: trust scores, regulator warnings and scam-network intelligence, through one simple API.

What you can build with

The same intelligence that powers alertoscan.io, exposed for your systems.

Scan & scoring

Trust score, verdict and category for any URL or domain in seconds.

Blacklists & reputation

Google Safe Browsing, Cloudflare and community blocklist verdicts. (VirusTotal not included.)

Regulator warnings

Financial-watchdog alerts worldwide, matched to a domain.

Threat graph & clusters

Connected domains, shared infrastructure and named scam networks.

Screenshots & assets

Rendered page screenshots, favicons, logos and brand assets.

Infrastructure

WHOIS, SSL, DNS, hosting, geolocation, security headers and tech stack.

Uptime monitoring

Daily availability history and status transitions per domain.

Reports API

Read community scam reports, or submit your own via POST.

Everything in a scan

A single scan returns dozens of signals, the same ones you see on a report page, structured for machines.

Scoring & classification

  • Trust score (0 to 100)
  • Verdict: safe to dangerous
  • Category & sub-categories
  • Confidence

Blacklists & reputation

  • Google Safe Browsing (direct)
  • Cloudflare phishing protection
  • Community crypto & phishing feeds
  • Phishing / malware flags

Regulatory

  • Financial-regulator warnings
  • Regulator, country, date & source URL
  • Warning type

Threat graph

  • Connected scam domains
  • Named clusters & networks
  • Shared IP / ASN / registrar / nameserver
  • Template signatures

Infrastructure

  • WHOIS: registrar, created / updated / expires, DNSSEC
  • SSL: issuer, validity, protocol, SAN
  • Hosting, ASN & IP geolocation
  • Security headers
  • Detected technologies
  • DNS & redirect chain

Visual & brand

  • Rendered page screenshot
  • Favicons & icons
  • Logo, OG & brand assets
  • Brand / company name

Indicators (IOC)

  • Emails, phones & addresses
  • Telegram handles
  • Crypto wallet addresses

Performance & network

  • Page timing: DNS, TLS, TTFB, load
  • Network stats: requests, bytes, HTTPS %
  • HTTP transactions
  • Cookies

Monitoring & reports

  • Uptime history & status
  • Community reports (read)
  • Submit a report (POST)
  • Exports: STIX 2.1, CSV, JSON

VirusTotal data is not included. Under VirusTotal's licensing terms we do not redistribute their antivirus-engine results through our API. If you need VirusTotal verdicts, use your own VirusTotal API key alongside ours.

A single request

Request
GET https://api.alertoscan.io/v1/scan?url=example-broker.com
Authorization: Bearer <your-api-key>
Response
{
  "domain": "example-broker.com",
  "trust_score": 12,
  "verdict": "dangerous",
  "category": "cryptocurrency",
  "flags": {
    "regulators": 2,
    "blacklists": 3
  },
  "network": { "connected_domains": 41 },
  "last_scanned": "2026-07-14"
}

Illustrative. The full field reference is shared with your API key.

How to get started

01

Request access

Tell us about your use case. We grant API keys on a per-project basis.

02

Get your key

Receive a scoped API key and the endpoint reference for your project.

03

Start querying

Call the API from your backend and act on the trust score in your product.

Who it's for

Fintech & brokers

Block fraudulent counterparties before onboarding a user or partner.

Marketplaces

Vet seller and merchant links to keep scams off your platform.

Wallets & exchanges

Warn users in-app before they interact with a flagged crypto site.

Compliance & KYB

Enrich due-diligence workflows with live threat intelligence.

Access is granted on request

We provision API keys per project so we can tailor rate limits and data scope to your use case. Tell us what you're building and we'll get you set up.