High-volume batch processing
POST JSON batches of domains, IPs, and URLs to https://api.ismalicious.com/bulk/check. One synchronous response with per-entity verdicts, confidence, and categories.
What you're checking against when you call the bulk API.
No credit card required. Instant access to full datasets.
10–100
Entities/Request
JSON
In / Out
0 call
Synchronous
Plans
Scaled limits
Everything you need to protect your infrastructure and users
One request returns all entity results plus processingTimeMs.
{ entities: string[], enrichment?: string } — simple integration.
Domains, IPs, and URLs in the same entities array.
GET /bulk/check returns your max batch size and usage.
isMalicious, confidence, sources, categories per row.
X-API-KEY (Base64 apiKey:apiSecret) like /check.
How security teams use this tool
Enrich SIEM logs with threat data in batch.
Validate blocklists and IOC lists against our intel.
Check all URLs and domains from email batches.
Analyze large sets of IOCs during investigations.
POST https://api.ismalicious.com/bulk/check with { "entities": [...], "enrichment": "full" }. The API responds with success, total, processed, results[] (entity, type, isMalicious, confidence, sources, categories), optional errors[], and processingTimeMs. Authentication uses X-API-KEY with Base64(apiKey:apiSecret).
Maximum entities per request scales with subscription (10 on Free and 100 on Pro). Use GET /bulk/check to retrieve documentation and limit metadata for your key.
Use bulk for dashboards, CSV validation, or moderate-sized lists. For deep per-entity reports or streaming progress, use GET /check or SSE /check/stream.
For lists longer than your plan allows, chunk requests client-side and respect rate limits. See /api/rate-limits and your dashboard usage.
Learn more from our security research blog
Rejoignez des milliers d'équipes de sécurité qui utilisent isMalicious pour protéger leur infrastructure.