Threat intelligence APIs
for security products and research.
Domain, URL, file and email analysis for security researchers,
antivirus vendors and cybersecurity companies.
More search examples
Monthly domain
assessment records.
Explore the monthly domain records
behind Inspector’s assessments.
— with a detection
Loading monthly data…
Records by recorded date, not new discoveries · current month in progress.
Detections include threat and suspicious verdicts.
View the figures
| Month | Domain records | With a detection |
|---|
APIs, data feeds
and MCP integration.
Domain reputation
and threat categories.
Enrich an alert with a threat category, reputation score and analysis date. Use the structured response in your application.
Explore the Domain API{
"verdict": "Phishing",
"category": 7,
"score": 5,
"data_available": true
}Illustrative response excerpt
Domain datasets
for local matching.
Download hourly domain snapshots and match them locally against your events, traffic or indicators. Keep the category and context with every match.
Full domain dataset, refreshed hourly
Your DNS logs, events or indicators
Classification + recommended action + report
Domain and URL analysis
through MCP.
Run domain checks and URL scans from Claude, Codex, Cursor and other MCP clients during an investigation.
“Investigate this URL and summarize the evidence.”
Extract the domain and check its reputation.
Return the assessment. Scan the URL for page-level evidence.
Review the findings in the conversation.
Gridinsoft assessments combine website content and behavior with domain history and infrastructure. Use the classification and supporting context in research, alert enrichment and your own security policies.
Evaluate the APIs
with your own data.
100 free API credits every month. No card required.