Domain Reputation

Score a domain's reputation from 0 to 100 from its DNS, HTTPS and security setup: SPF, DMARC, HSTS, suspicious TLDs and domain patterns.

Pay by wallet (x402) domain-reputation

Example

Example answer
{
  "grade": "D",
  "checks": {
    "has_mx": false,
    "has_spf": false,
    "mx_count": 0,
    "resolves": false,
    "has_dmarc": false,
    "https_works": false
  },
  "domain": "this-domain-does-not-exist-abc123xyz.com",
  "issues": [
    "Domain does not resolve to any IP address",
    "HTTPS connection failed",
    "Unusually long domain name",
    "Domain contains many hyphens"
  ],
  "issue_count": 4,
  "reputation_score": 40
}

Inputs

FieldTypeRequiredWhat it is
domainstringYes—

Output fields

How reliably each field appears in a successful answer.

FieldTypeAppears
gradestringAlways (present in every successful answer)
checksobjectAlways (present in every successful answer)
domainstringAlways (present in every successful answer)
issuesarrayAlways (present in every successful answer)
reputation_scoreintegerAlways (present in every successful answer)

How to call it

The same tool through each route. MCP clients reach it through Strale’s server at https://api.strale.io/mcp; the call below is what the agent sends.

# Needs an API key. max_price_cents caps what this call may cost.
curl -X POST https://api.strale.io/v1/do \
  -H "Authorization: Bearer $STRALE_API_KEY" \
  -H 'Content-Type: application/json' \
  -d '{
    "capability_slug": "domain-reputation",
    "inputs": {
      "domain": "google.com"
    },
    "max_price_cents": 5
  }'

Limitations

  • A single blocklist appearance may not indicate actual malicious activity

    Reputation scores aggregate multiple blocklists — a single listing may not indicate actual malicious activity

    What to do instead: Check which specific blocklist flagged the domain in the response details and verify the listing reason before blocking

  • Blocklist data refreshes daily, so resolved issues may still show negative reputation for 24-48 hours

    Blocklist data refreshed daily — recently resolved issues may still show negative reputation for 24-48 hours

    What to do instead: If a domain was recently cleaned, re-check after 48 hours and use the trend direction to assess improvement

Bundled checks that include it

Related tools