Every API, one clean contract.

Full risk report for one domain: a 0-100 risk score + human reasons + risk_level, synthesising age, expiry, parked/for-sale, CT-cert presence, structural flags, brand-impersonation, and mail/DNSSEC legitimacy. The flagship action.

{
  "domain": "google.com",
  "check_parked": false
}

Domain age + expiry-risk band + renewal status (lifecycle synthesis from RDAP dates — NOT a raw whois dump; use domain-intel.whois for that).

{
  "domain": "github.com"
}

Parked / for-sale / sale-redirect detection, confidence-scored. Combines parking-nameserver signals + a root-page probe (multi-word for-sale phrases + marketplace redirect host). Honest 'unknown' when the site returns an anti-bot challenge.

{
  "domain": "google.com"
}

Generate a brand's lookalike domains across 16 permutation families (meets/exceeds dnstwist; incl IDN homoglyph/homograph) then report which are ACTUALLY REGISTERED + their risk — the brand-protection product.

{
  "domain": "paypal.com",
  "families": "homoglyph,replacement,omission"
}

Registrar / nameserver / age / mail-hygiene (SPF·DMARC·DNSSEC) trust signals → a 0-100 reputation_score + trust_level. Reputation is a positive-trust lens (vs assess's risk lens).

{
  "domain": "github.com"
}

Risk-assess many domains in one call (fast path: RDAP+DNS+mail score, no per-domain HTTP parked probe). Returns a verdict each + the high-risk list.

{
  "domains": "google.com,g00gle.com"
}