API reference
Domain reputation
Check whether a domain hands out disposable mailboxes or appears in our phishing dataset. One unauthenticated GET, no API key, risk level included.
GET
/public/domain/{domain}no keyCheck a domain, no keycurl https://api.ffraud.com/public/domain/mailinator.com| Field | Meaning |
|---|---|
| is_disposable | Domain serves temporary / throwaway mailboxes. |
| is_phishing | Domain appears in our phishing feed. |
| risk_level | low, medium, high, or critical, combining both signals. |
Established providers (gmail.com, outlook.com, yahoo.com, and dozens more worldwide) always return is_disposable: false. They sit on a hard allowlist, so no data source can push them onto the disposable list and you never block a real mailbox. Each domain also has a public page at /email/{domain} explaining its verdict.