✅Check ressource

The Check endpoint allows you to check if an IP or domain is malicious.

Check IP

Returns if a specific IP address is malicious, with optional report.

Request

GET https://ismalicious.com/api/check?ip=43.207.85.189

Try this endpoint in your browser 🔗

Request

Query Parameters

Parameter	Type	Description
ip	string	The IP address to check.
report	bool	(Optional) If true, a detailed report will be included in the response.

Response

Response

{
  "malicious": true,
  "sources": [
    {
      "name": "FireHOL blocklist-ipsets",
      "type": "ip",
      "category": "malware",
      "url": "https://raw.githubusercontent.com/firehol/blocklist-ipsets/master/firehol_anonymous.netset"
    },
    {
      "name": "FireHOL blocklist-ipsets",
      "type": "ip",
      "category": "malware",
      "url": "https://raw.githubusercontent.com/firehol/blocklist-ipsets/master/firehol_proxies.netset"
    }
  ],
}

Description

Integrating more open-source cyber threat intelligence feeds into the isMalicious API database improves overall threat detection capabilities by providing more robust and up-to-date information on malicious IPs.

Why is this useful?

• Enhanced Threat Detection: Increases the coverage of potential threats by incorporating a wider range of sources.

• Improved Accuracy: Cross-references multiple sources to validate threats and reduce false positives.

• Timely Updates: Ensures the database is continuously updated with the latest threat intelligence.

• Comprehensive Protection: Provides a broader view of the threat landscape, enabling better protection measures.

Check Domain

Returns if a specific domain is malicious, with optional report.

Request

GET https://ismalicious.com/api/check?domain=anyalias.com

Try this endpoint in your browser 🔗

Request

Query Parameters

Parameter	Type	Description
domain	string	The domain to check.
report	bool	(Optional) If true, a detailed report will be included in the response.

Response

Response

{
  "malicious": true,
  "sources": [
    {
      "category": "disposable",
      "name": "Disposable Emails Domains List",
      "type": "domain",
      "url": "https://raw.githubusercontent.com/disposable-email-domains/disposable-email-domains/master/disposable_email_blocklist.conf"
    }
  ],
}

Description

Integrating more open-source cyber threat intelligence feeds into the isMalicious API database improves overall threat detection capabilities by providing more robust and up-to-date information on malicious domains.

Why is this useful?

• Enhanced Threat Detection: Increases the coverage of potential threats by incorporating a wider range of sources.

• Improved Accuracy: Cross-references multiple sources to validate threats and reduce false positives.

• Timely Updates: Ensures the database is continuously updated with the latest threat intelligence.

• Comprehensive Protection: Provides a broader view of the threat landscape, enabling better protection measures.