---------- Analyzer ---------- AnalyzeDomainRandomness computes multiple heuristics and a combined randomness score. The thresholds and weights are ha

--- Core analyzer ---

AnalyzeURLHandler runs a full safety analysis on the given URL. @Summary Full URL analysis @Tags Analysis @Produce json @Param url query s

BearerAuth validates the Authorization: Bearer <token> header. Tokens are issued by AdminLoginHandler and signed with ADMIN_JWT_SECRET.

CheckHSTSHandler checks whether the URL's host enforces HSTS. @Summary HSTS check @Tags Security @Produce json @Param url query string tru

CheckHTTPCombined performs a single HTTP request to gather redirect chain, status code, and HSTS header information. Uses HEAD first, falls back to GE

CheckIfUsesIPHandler checks whether the URL uses a raw IP address instead of a domain. @Summary IP address detection @Tags URL @Produce json

CheckPunycodeHandler detects punycode (IDN) characters in the URL. @Summary Punycode detection @Tags URL @Produce json @Param url query st

CheckRedirectsHandler follows the URL's redirect chain and reports findings. @Summary Redirect chain analysis @Tags Security @Produce json @P

CheckRiskyTLDHandler checks whether the URL uses a high-risk TLD. @Summary Risky TLD check @Tags URL @Produce json @Param url query string

CheckStatusCodeHandler fetches the URL and returns its HTTP status code. @Summary HTTP status code check @Tags Security @Produce json @Param

CheckTLSCombined performs a single TLS connection to extract both TLS info and SSL certificate details

CheckTrustedTLDHandler checks whether the URL uses a trusted (gov/edu) TLD. @Summary Trusted TLD check @Tags URL @Produce json @Param url q

CheckTyposquatting returns a TyposquatResult for the given domain. It detects: - Levenshtein typosquatting (edit distance 1-2 from a brand SLD) - Comb

CheckUrlDepthHandler checks whether the URL path is suspiciously deep. @Summary URL depth check @Tags URL @Produce json @Param url query s

CheckUrlLengthHandler checks whether the URL exceeds the safe length threshold. @Summary URL length check @Tags URL @Produce json @Param ur

CheckUrlShortenerHandler checks whether the URL belongs to a known URL-shortener service. @Summary URL shortener detection @Tags URL @Produce

Close shuts down the browser allocator

--------------------------------------------------------------------------- Public API ---------------------------------------------------------------

DeleteCacheKeyHandler godoc @Summary Delete a single cache key @Tags admin @Param key path string true "Cache key" @Success

DomainInfoHandler returns WHOIS / RDAP registration data for the URL's domain. @Summary Domain WHOIS / RDAP info @Tags DNS @Produce json @Par

Fatal logs at Error level then exits. Mirrors log.Fatal behaviour.

FlushCacheHandler godoc @Summary Flush all cache keys @Tags admin @Success 200 {object} map[string]any @Router /admin/cache

GetDomainRankHandler returns the global popularity rank of the URL's domain. @Summary Domain popularity rank @Tags DNS @Produce json @Param

GetJSON retrieves a JSON value from cache and unmarshals it into the provided pointer

GetPageFormInfo fetches the page (with timeout), parses HTML and returns info.

GetTopEntries returns the loaded top-domain slice (read-only).

HealthHandler returns the service liveness status. @Summary Health check @Tags Utility @Produce json @Success 200 {object} map[string]string

--------------------------------------------------------------------------- Init ---------------------------------------------------------------------

Issue creates a signed token that expires after ttl.

ListCacheHandler godoc @Summary List all cache keys and values @Tags admin @Produce json @Success 200 {object} map[string]any

LoadTopDomains reads the Tranco CSV (rank,domain — no header) and populates the in-memory list used by CheckTyposquatting. Call once at startup.

Lookup tries RDAP first, falls back to WHOIS if RDAP fails. Uses context for timeout/cancellation support.

Preload eagerly loads the signing secret so a missing ADMIN_JWT_SECRET causes a startup panic rather than a panic on the first login request.

PrometheusMiddleware records per-request latency and request counts.

RateLimiter returns a Gin middleware that limits requests per IP

ResolveIPHandler resolves the domain in the URL to its IP addresses. @Summary DNS IP resolution @Tags DNS @Produce json @Param url query s