Developer documentation

    Build with Fraudpol

    Check domains against confirmed abuse for free, or connect your security workflow to managed takedowns and brand protection. Pick the API that fits, grab a key and make your first request in minutes.

    Threat API

    Free · no key needed to start

    Look up confirmed malicious domains, check up to 100 domains per request, download active feeds and keep a local copy in sync.

    Company API

    Starter, Pro, Enterprise

    Submit cases with evidence, follow them from Accepted to Resolved, manage your watchlist and read Brand Shield findings and takedowns.

    Webhooks

    Pro, Enterprise

    Get a JSON POST the moment a case changes, a takedown completes or Brand Shield finds a new lookalike domain.

    Try it now: no account needed

    The Threat API answers up to 20 lookups per hour without a key. Replace the domain with the one you want to check.

    curl "https://ugapgzpffrykyglevlhz.supabase.co/functions/v1/threat-api/v1/domains/suspicious-site.example"

    A listed domain returns "listed": true with its category and status. Next: follow the quickstart to get a free key with 1,000 lookups per day.

    Free and paid access

    Everything below is enforced by the API itself. Paid limits are loaded live from the plan configuration.

    CapabilityNo keyFree keyStarterProEnterprise
    PriceFreeFree account$99/mo$269/moCustom
    Threat API lookups20 / hour per IP1,000 / day · 60 / min– / day– / day– / day
    Threat feeds & change sync24 feed downloads / day
    Company API: read cases, findings, takedowns– requests / day– requests / day– requests / day
    Submit reports & manage watchlist via API–––
    Brand Shield findings–––
    Webhooks for case updates–––
    SIEM export (CSV, CEF, JSON)–––
    Key typenonefp_live_…fp_co_…fp_co_…fp_co_…

    Company plans add a burst limit of 60 requests per minute per key. Not sure yet? Request a 14-day demo with Pro features, or compare plans on the pricing page.

    Tutorials