isMalicious
Check IPs, domains, URLs and wallets against threat feeds
Sep 28 – Oct 4, 2026 · 34th of 77
isMalicious is a threat intelligence service. You look up an IP, domain, URL, email, phone number, crypto wallet, file hash, CVE, ASN or password, and it returns a verdict along with the sources behind it. Results come from more than 800 intelligence feeds, each weighted by reliability, and include WHOIS, DNS history, SSL certificates, geolocation and abuse contacts.
It's built for security teams and developers. You can run lookups on the website, call a REST API (with SDKs and an OpenAPI spec), pull STIX/TAXII feeds into OpenCTI, MISP, a SIEM or a firewall, or connect its MCP server so an AI assistant can check indicators and scan untrusted content for prompt injection. The free tools include IP lookup, URL scanner, reverse IP, subdomain finder, domain age and bulk check.
The free plan gives 500 reputation checks a month and an instant API key. Pro costs €99/month and adds STIX/TAXII feeds, 10,000 checks, webhooks and bulk requests. Enterprise is priced on request and adds higher volumes and on-premise deployment.
