ISismalicious
check

Check Reputation

Changed on

Get the cached entity document with its reputation counters. The document's raw fields are flattened at the top level next to reputation; both halves are raw dataset payloads whose shape follows the ingesting feeds. Supports IPs, domains, and MD5/SHA1/SHA256 file hashes through query. Hash documents include normalized verdict fields and lookupStatus. This endpoint reads the cache only: an absent record returns a null reputation. Use /check for an upstream lookup on a cache miss.

get/check/reputation

Request

  • Base URL
    https://api.ismalicious.com
  • Auth
    • API key in header X-API-KEY
    • or HTTP bearer
    • or HTTP basic

Query parameters

querystring

IP address or domain to check. /check/reputation also accepts a hexadecimal MD5, SHA1, or SHA256 file hash.

Response

Reputation data response

reputationobject nullable

Changes

  • 9d9ef31d83e5Revision changes
    • breaking

      the response's body type changed from object to no type for status

    • breaking

      the response property became nullable for the status

    • breaking

      the response property became nullable for the status

    • breaking

      the response property became nullable for the status

    • breaking

      the response property became optional for the status

    • breaking

      the response property became optional for the status

    • breaking

      the response property became optional for the status

    • breaking

      removed the required property from the response with the status

    • warning

      deleted the path request parameter enrichment

    • warning

      deleted the path request parameter query

    • info

      added the new optional query request parameter query

    • info

      added subschema #1 subschema #2 to the response body allOf list for the response status

  • aa5294fdc8d8Revision changes
    • warning

      deleted the path request parameter track_reports