Documentation

Docs

Site Usage

Welcome to Monids! This site helps you discover newly registered domains for your keywords of interest and issue alerts for signaling potential phishing or domain impersonation. Once detected, we help you request takedowns of the infringing website with registrars and initiate law enforcement complaints.

Searching Domains

Use the search function to enter a keyword and discover domain registrations related to it.

Setting Up Alerts

Under My alerts enter your primary keyword, choose the match type, and optionally add additional include/exclude keywords. Click "Create Alert" to receive notifications when matching domains are registered. See Interfaces for a list of available alert types.

Domain Extensions

We provide information on domains across 1,570 domain extensions (TLDs), including the most widely used such as .com, .org, .net, .edu, .gov, and .io. You can explore the complete list here. If a new domain extension or zone is introduced, we typically add it to our database within a few days.

Alert Types & Keyword Logic

Full vs Fuzzy Match

Full – triggers when the keyword appears exactly within a new domain name.
Fuzzy – covers near-miss variants using typo-squatting detection (Damerau-Levenshtein, Jaro-Winkler, Jaccard).

Additional Keywords

Use additional_keywords to refine results:

  • mode:"include" – domain must contain at least one extra keyword beyond the main term.
  • mode:"exclude" – omit domains containing that term (e.g., 'sandbox').

Interfaces

Monids can integrate with your existing workflows via Splunk, Slack, or Email to deliver alerts where you need them. Configure destinations using the Alert Preferences tab

Splunk Integration

Send domain event data to Splunk for centralized logging, advanced search, and custom dashboards—ideal for security teams requiring historical analysis and correlation with other security logs.

Slack Notifications

Configure a Slack webhook to get instant notifications in your channels. Great for DevOps and incident response teams to stay informed and discuss suspicious registrations in real time.

Email Notifications

Receive domain alerts via email. Suitable for stakeholders who prefer summaries in their inbox or for integrating with traditional ticketing systems.

REST API

Programmatically manage your alerts and retrieve event data via our REST API. All endpoints live under https://monids.com/alerts/api/, authenticated by personal token from your Preferences.

List My Alerts

curl -H "Authorization: Token <YOUR_TOKEN>" \
  https://monids.com/alerts/api/user-alerts/

Read a Single Alert

curl -H "Authorization: Token <YOUR_TOKEN>" \
  https://monids.com/alerts/api/user-alerts/<ALERT_ID>/

Create a New Alert

The request body accepts:

  • keyword (string) – term to monitor.
  • match_type – "full" or "fuzzy".
  • additional_keywords (optional) – list of {"value":...,"mode":...}.
curl -X POST \
  -H "Authorization: Token <YOUR_TOKEN>" \
  -H "Content-Type: application/json" \
  -d '{"keyword":"paypal","match_type":"fuzzy",
       "additional_keywords":[
         {"value":"invoice","mode":"include"},
         {"value":"sandbox","mode":"exclude"}
       ]}' \
  https://monids.com/alerts/api/user-alerts/

Update/Delete Alert

# Update
curl -X PUT \
  -H "Authorization: Token <YOUR_TOKEN>" \
  -H "Content-Type: application/json" \
  -d '{"match_type":"full"}' \
  https://monids.com/alerts/api/user-alerts/<ALERT_ID>/

# Delete
curl -X DELETE \
  -H "Authorization: Token <YOUR_TOKEN>" \
  https://monids.com/alerts/api/user-alerts/<ALERT_ID>/

List My Events

curl -H "Authorization: Token <YOUR_TOKEN>" \
  https://monids.com/alerts/alert-events/?format=json

Filter Events

curl -H "Authorization: Token <YOUR_TOKEN>" \
  'https://monids.com/alerts/alert-events/?alert_id=<ALERT_ID>&format=json'

View Preferences

curl -H "Authorization: Token <YOUR_TOKEN>" \
  https://monids.com/alerts/api/preferences/

Update Preferences

curl -X PUT \
  -H "Authorization: Token <YOUR_TOKEN>" \
  -H "Content-Type: application/json" \
  -d '{"want_email":true,
       "destination_email":"me@example.com",
       "want_slack":true,
       "slack_webhook_url":"https://hooks.slack.com/services/ABC/DEF/GHI"}' \
  https://monids.com/alerts/api/preferences/