Server-Sent Events
Standard HTTP; no WebSocket handshake.
GET /check/stream sends each analysis phase as a Server-Sent Event while one IP, domain, URL or hash is checked.
No credit card required · Free API key
curl -N -H "X-API-KEY: YOUR_BASE64_CREDENTIALS" \
"https://api.ismalicious.com/check/stream?query=example.com"data: {"type":"reputation","data":{ … }}
data: {"type":"done","data":{ … }}Standard HTTP; no WebSocket handshake.
Same pipeline shape as the live report stream UI.
Server runs full enrichment path for streamed phases.
Show partial results before the full check finishes.
Consume phases in scripts with SSE parsers.
See which phase produced which payload.
The free plan includes website lookups with no monthly cap and 250 API requests a month. Check the sources and limits, then connect the API.
No credit card required · Free API key