ISismalicious
blocklist

Download Blocklist

Changed on

Download a specific blocklist file.

Plan Access:

  • FREE: 10% sample (lite version)
  • BASIC+: Full blocklist

Filename pattern (not an exhaustive list — combinations are generated):

  • blocklist-{type}-{variant}[-{format}].txt
    • type: ips | domains | urls | hashes
    • variant: a severity level (critical, high, medium, low, all) or a category (malware, phishing, spam, scam, fraud, botnet, ransomware, c2, ads, tracking, abuse, attack, proxy, suspicious, malicious, cryptomining, crypto, adware, privacy, bruteforce, exploit, tor, vpn)
    • format (optional): hosts | dnsmasq | adguard (plain text when omitted)
  • blocklist-family-{slug}-{type}[-{format}].txt for malware-family lists (e.g. blocklist-family-emotet-hashes.txt)

GET /blocklist/stats lists the level/category files currently generated.

get/blocklist/download/{filename}

Request

  • Base URL
    https://api.ismalicious.com
  • Auth
    • API key in header X-API-KEY
    • or HTTP bearer
    • or HTTP basic

Path parameters

filenamestring required

Blocklist filename — see the operation description for the accepted pattern

Response

Blocklist file download (text/plain)

Changes

  • 9d9ef31d83e5Revision changes
    • breaking

      the response property became nullable for the status

    • breaking

      the response property became nullable for the status

    • breaking

      the response property became nullable for the status

    • breaking

      the response property became nullable for the status

    • breaking

      the response property became optional for the status

    • breaking

      the response property became optional for the status

    • breaking

      the response property became optional for the status

    • breaking

      the response property became optional for the status

    • info

      added the non-success response with the status

    • info

      added the non-success response with the status

  • 521d3d45fadbRevision changes
    • breaking

      removed the enum value blocklist-domains-all.txt from the path request parameter filename

    • breaking

      removed the enum value blocklist-domains-malware.txt from the path request parameter filename

    • breaking

      removed the enum value blocklist-domains-phishing.txt from the path request parameter filename

    • breaking

      removed the enum value blocklist-domains-ransomware.txt from the path request parameter filename

    • breaking

      removed the enum value blocklist-ips-all.txt from the path request parameter filename

    • breaking

      removed the enum value blocklist-ips-botnet.txt from the path request parameter filename

    • breaking

      removed the enum value blocklist-ips-c2.txt from the path request parameter filename

    • breaking

      removed the enum value blocklist-ips-critical.txt from the path request parameter filename

    • breaking

      removed the media type text/plain for the response with the status

    • warning

      the optional response header Content-Disposition removed for the status 200

    • warning

      the optional response header X-Blocklist-Plan removed for the status 200

    • warning

      the optional response header X-Blocklist-Version removed for the status 200

    • info

      the response property became required for the status

    • info

      the response property became required for the status

    • info

      the response property became required for the status

    • info

      the response property became required for the status

    • info

      the response property became required for the status

    • info

      the response property became required for the status

    • info

      the response property became required for the status

    • info

      the response property became required for the status