← is-real-biz

Phishing domain detection API

is-real-biz acts as a lightweight phishing-domain detection layer. By scoring WHOIS recency, SSL issuer reputation, contact-page completeness, and social-footprint depth, it flags brand-new lookalike domains that lack the operating signals of legitimate businesses. Verdicts are returned as structured JSON with explainable signals so security tooling can incorporate them into rules.

Try it now

curl 'https://is-real-biz.is-real-biz.workers.dev/check?domain=stripe.com'

Run a live check Read the docs

Step-by-step

  1. Wire into your gateway. On any inbound link or merchant onboarding, call /check?domain=<extracted_domain>.
  2. Set thresholds. Block verdict=fake, hold verdict=likely_fake, allow verdict ∈ {real, likely_real}.
  3. Audit periodically. Use /check_batch to nightly re-score the top 500 domains your platform interacts with.

Frequently asked

Does this replace URL-blocklist services?

No, it complements them. Blocklists catch known-bad URLs; is-real-biz catches lookalike-business domains that are too new to be on a blocklist.

How fresh is the data?

WHOIS, SSL, and homepage are fetched live per request. Edge caching is sub-minute for repeated hot domains.

Related