Reported phishing
Add URL evidence and domain context to links reported by employees, customers or abuse teams.
PHISHING DETECTION
Phishing analysis
Phishing analysis
for security teams.
Build phishing investigations with URL Analysis and Domain Intelligence. Connect the page, destination and domain assessment to the evidence your team needs to act.
Email & help desk triageSOAR & SIEM enrichment
One investigation, connected evidence
1
The submitted link
Keep the full URL from the report, message or alert.
2
The page behind it
URL Analysis adds destination, page metadata and captured evidence.
3
The domain assessment
Domain Intelligence adds the host’s verdict, reputation and assessment date.
4
Your next action
Prioritize the alert, enrich the case and apply your policy.
Powered by the existing Inspector APIs. Choose the level of analysis your workflow needs.
CHOOSE THE INPUT YOU HAVETwo APIs.
Two APIs.
One phishing workflow.
Phishing detection is a use case, not a separate endpoint or subscription. Use the same Inspector API key for both operations.
URL Analysis API
For a suspicious login link, a redirect or a specific page. Inspect the effective destination and page metadata alongside returned security context.
POST /api/v1/url/scan
curl -X POST 'https://inspector.gridinsoft.com/api/v1/url/scan' \
-H 'Content-Type: application/json' \
-d '{
"apikey": "YOUR_PRIVATE_APIKEY",
"url": "https://login-check.example/session"
}'Domain Intelligence API
For a domain or hostname from an alert. Retrieve its existing assessment: verdict, category, reputation, analysis date and report link.
POST /api/v1/domain/check
curl -X POST 'https://inspector.gridinsoft.com/api/v1/domain/check' \
-H 'Content-Type: application/json' \
-d '{
"apikey": "YOUR_PRIVATE_APIKEY",
"domain": "login-check.example"
}'INTEGRATE WHERE REPORTS ARRIVEEnrich phishing reports
Enrich phishing reports
and security alerts.
Add domain assessments and URL analysis to your existing investigation tools.
Security automation
Enrich a SOAR case or SIEM alert with structured fields. Route phishing findings to the right response playbook.
Trust & safety review
Investigate suspicious links in profiles, messages and user submissions before deciding what action to take.
API usage and licensing.
Is there a separate Phishing Detection API?
No. This workflow uses URL Analysis at /api/v1/url/scan and Domain Intelligence at /api/v1/domain/check. Choose either or combine them using one Inspector account.
Does a domain lookup run a new page scan?
Domain Intelligence retrieves an existing domain assessment. Use URL Analysis to submit a full URL for page analysis. On this site, Search explores existing records; it does not launch a scan.
What if I need to match domains locally?
Use Data Feeds to download regularly refreshed domain datasets and match them against your own events. Feed licensing is separate from API subscriptions.