Live · No sign-up needed

Fraud & risk scoring API
for domains, emails & IPs

One API call runs 30 risk signals and returns a 0–100 score with a plain-English reason. Integrate in 5 minutes.

POST /risk-score
$ curl -X POST https://overisk.ai/risk-score \
  -H "x-api-key: YOUR_KEY" \
  -H "Content-Type: application/json" \
  -d '{"type":"domain","value":"paypa1-secure.com"}'

// Response
{
  "entity":        "paypa1-secure.com",
  "risk_score":     87,
  "severity":       "high",
  "signals":        ["brand_spoof_paypal","domain_age_3d","no_spf_record"],
  "ai_explanation": "This domain spoofs PayPal and was registered 3 days ago...",
  "usage":          {"requests_used": 1, "remaining_requests": 9999}
}
14,557 threats analyzed today
Domain Email IP

3 free checks per day — no account required

Need more? Go Pro → 10,000 checks/mo for just €29

You've used all 3 free checks today
Come back tomorrow or upgrade to Pro for unlimited checks.
Running 30 security checks...
Trusted by businesses worldwide
No credit card required
Results in milliseconds
How it works

From suspicious link to clear answer in milliseconds.

No technical knowledge needed. Just paste and check.

01

Paste what you're not sure about

Drop in any email, domain, or IP. No account needed to start.

02

We run 30 checks instantly

Age, reputation, SSL, blacklists, look-alikes — all in milliseconds.

03

Get a clear verdict

A 0–100 risk score plus a plain-English summary of every red flag.

What we check

30 signals. One clear answer.

Click any card to try it live in the demo above.

🕒

How old is this website?

Brand new websites registered days ago are a major red flag — scammers don't keep sites for long.

domain "netflix-login-x.com" created "2 days ago" verdict SUSPICIOUS
12
Risk score

A single 0–100 number you can act on.

🔒

Is the connection secure?

Validates SSL certificate. No cert = unencrypted data.

📋

Can this email be faked?

Checks SPF, DKIM, DMARC for impersonation risk.

🎲

Does the name look auto-generated?

Catches bot-made random domains like xk9rb2m4qp7z.info.

🔤

Is this a look-alike domain?

Spots paypal.com with a Cyrillic "a" and similar tricks.

🛡️

Is this site built to protect you?

Missing security headers = a hastily built or malicious site.

🔁

Does this link hide where it goes?

Scam links bounce through redirects — we trace the full path.

💌

Is this a throwaway email?

Temporary inboxes like Temp Mail are created to bypass verification and disappear after use. We block 500+ disposable providers.

🌍

Hiding behind a VPN?

VPNs, proxies, Tor exits — we detect them all.

🏢

Who owns this IP?

Datacenter IPs from suspicious hosts are red flags.

⚠️

Has this IP been reported? Pro

Checks a global database of reported malicious IPs — if others have flagged it, you'll know.

🔍

Is Google blocking this? Pro

Cross-references Google's live database of phishing and malware sites.

💀

Has this email been breached?

Checks if the address appears in known data breach databases — stolen credentials are traded in bulk.

🚫

Is it on spam blacklists?

Queries Spamhaus and 5 DNS blacklists — the industry standard for spam and malware blocking.

🦠

Malware database

Checks URLhaus for active malware hosted on this domain or IP.

🎣

Phishing reports

Searches phishing databases for reports linked to this domain.

📡

Reverse DNS

Verifies the IP has a valid reverse DNS record — absence is common in spam infrastructure.

📧

Mail server check

Checks if the domain has a working mail server configured.

🅿️

Parked domain detection

Detects if a domain is parked, abandoned or for sale — not an active business.

🔒

TLS security version

Checks if the site uses modern TLS 1.3 or is still running deprecated versions.

↪️

Open redirect test

Tests if the site can be abused to redirect users to phishing pages.

📜

Certificate activity

Monitors unusual certificate issuance patterns over the last 90 days.

Pricing

Simple pricing.
No hidden fees.

Start for free. Upgrade only when you need more.

Free
0

Forever

  • 3 checks per day
  • Domains, emails & IPs
  • Plain-English results
  • Abuse reputation database
  • Google Safe Browsing
FAQ

Frequently asked questions

How do I get started?
Just paste a domain, email or IP in the input above and click Analyze. No account needed for your first 3 daily checks.
Can I use this to protect my business?
Absolutely. Businesses use Overisk AI to vet new contacts, verify supplier emails, check unfamiliar websites before clicking, and screen leads before replying. No technical setup required.
What counts as one check?
One check = one analysis of one entity (domain, email or IP). All 30 signals run in that single check — it's not billed per signal.
Do you store what I check?
We only store your usage count. The emails, domains, and IPs you check are looked up in real time and never saved to our servers.
How reliable are the results?
Results are based on live data — real website lookups, registration records, security certificates, and global threat databases. We combine 30 signals so no single factor makes or breaks the verdict.
Can I cancel at any time?
Yes — cancel from Stripe's billing portal whenever you like. Pro access stays active until the end of the billing period.
When does my monthly allowance reset?
Your 10,000 checks reset exactly 30 days after each payment — the same date each month.
Is there an API?
Yes — the API is the core of Overisk. The paste-and-check on this site is a live demo of exactly what the API returns. Get a free key with 100 calls/month, upgrade to Pro for 10,000.

Know before you trust.

Start checking suspicious domains, emails and IPs in milliseconds — completely free, no signup.

See pricing