Abuse Signals API — Documentation

Deterministic, signals-only abuse indicators. No advice. No guarantees. No interpretation.

OpenAPI (fixed contract): openapi.yaml (download)

Endpoints

GET /abuse-signals
GET /usage

Query parameters

Exactly one of email or domain must be provided.

Example (curl)

    curl "https://abusesignalsapi.analyses-web.com/abuse-signals?domain=fake-buy-info-product-example.shop" \
    -H "X-API-Key: YOUR_API_KEY"

Response

{
  "input": {
    "email": null,
    "domain": "fake-buy-info-product-example.shop"
  },
  "abuseScore": 75,
  "abuseLevel": "high",
  "signals": [
    "disposable_domain_pattern",
    "low_domain_age",
    "many_hyphens_or_digits",
    "lookup_failed_rdap"
  ],
  "version": "v1",
  "meta": {
    "cached": true,
    "processingMs": 0,
    "requestId": "0HNIGUL0CKSAC:00000001",
    "cacheHours": 24,
    "scoringPolicy": "2026-01"
  }
}

Explanations (optional)

    curl "https://abusesignalsapi.analyses-web.com/abuse-signals?domain=fake-buy-info-product-example.shop&explain=1" \
    -H "X-API-Key: YOUR_API_KEY"

{
  "input": {
    "email": null,
    "domain": "fake-buy-info-product-example.shop"
  },
  "abuseScore": 75,
  "abuseLevel": "high",
  "signals": [
    "disposable_domain_pattern",
    "low_domain_age",
    "many_hyphens_or_digits",
    "lookup_failed_rdap"
  ],
  "version": "v1",
  "meta": {
    "cached": false,
    "processingMs": 944,
    "requestId": "0HNIGUL0CKSAB:00000001",
    "cacheHours": 24,
    "scoringPolicy": "2026-01"
  },
  "explanations": [
    {
      "signal": "disposable_domain_pattern",
      "severity": "high",
      "category": "risk",
      "note": "The domain matches patterns commonly associated with disposable or temporary email services."
    },
    {
      "signal": "low_domain_age",
      "severity": "medium",
      "category": "risk",
      "note": "The domain appears recently registered or has limited historical stability (when determinable)."
    },
    {
      "signal": "many_hyphens_or_digits",
      "severity": "low",
      "category": "risk",
      "note": "The domain contains an unusually high number of hyphens or digits."
    },
    {
      "signal": "lookup_failed_rdap",
      "severity": "info",
      "category": "warning",
      "note": "RDAP/WHOIS lookup failed or timed out; registration-age related signals may be incomplete. (No score impact)"
    }
  ]
}

Abuse score

The abuseScore is a numeric value between 0 and 100. Higher values indicate a higher concentration of detected abuse-related signals. The score is deterministic and reflects signal presence only. It is not a probability, verdict, or recommendation.

Abuse level

The abuseLevel is a descriptive band derived from abuseScore. It is deterministic and does not represent advice or a recommendation. Bands: 0–19 low, 20–49 medium, 50–79 high, 80–100 critical.

Signals

Signals are indicators, not verdicts.

Explain mode details

If explain is set to 1 or true, the response includes an explanations array. Each item includes a deterministic severity, a category (risk or warning), and a short note. Warning signals (lookup failures) have no score impact.

Usage

The /usage endpoint returns the current monthly quota usage for the authenticated API key.

    curl "https://abusesignalsapi.analyses-web.com/usage" \
    -H "X-API-Key: YOUR_API_KEY"

{
  "plan": "starter",
  "monthlyQuota": 10000,
  "used": 57,
  "remaining": 9943,
  "periodStartUtc": "2026-01-01T00:00:00.0000000Z",
  "periodEndUtc": "2026-02-01T00:00:00.0000000Z",
  "isEnabled": true
}

Rate limiting

Each API key is limited to 60 requests per minute. Requests exceeding this limit are temporarily rejected with HTTP 429. Rate limit headers may be returned on responses: X-RateLimit-Limit, X-RateLimit-Remaining, X-RateLimit-Reset.

Monthly quota

Each API key has a monthly request quota. Requests exceeding this quota are rejected with HTTP 429. Quota headers may be returned on responses: X-Quota-Limit, X-Quota-Used, X-Quota-Remaining, X-Quota-Reset.

Errors

Error responses use the format: { "error": "...", "message": "..." }.

The message field provides additional details and may vary depending on the exact failure.

Disclaimer

This API provides automated indicators based on infrastructure signals only. It does not provide legal, financial, or security advice. Accuracy is not guaranteed.

Pricing • Prod checklist