Sign in
check

Bulk entity check

Check up to N entities per request (N depends on subscription plan). Each entity may be a domain, IP, URL, or file hash string. With format: "csv" the 200 response is text/csv instead of JSON. Validation failures (empty list, over the plan limit) answer 400 with the same BulkCheckResponse shape (success: false + errors).

post/bulk/check

Request body

enrichmentstring nullable
entitiesstring[] required
formatstring nullable

Example request

{
  "enrichment": "full",
  "entities": [
    "example.com",
    "8.8.8.8",
    "https://malicious.site",
    "44d88612fea8a8f36de82e1278abb02f"
  ],
  "format": "json"
}

Response

Batch results (JSON, or CSV when format: "csv")

errorsstring[] nullable
processedinteger required
processingTimeMsinteger required
successboolean required
totalinteger required

Example response

{
  "processed": 3,
  "processingTimeMs": 150,
  "results": [
    {
      "analystStatus": "new",
      "categories": [
        "phishing",
        "malware"
      ],
      "confidence": 95,
      "entity": "example.com",
      "infrastructure": {
        "attributes": [
          "cloud",
          "saas"
        ],
        "sources": [
          {
            "category": "infrastructure",
            "id": "azure-ip-ranges",
            "name": "Azure - Published IP Ranges",
            "threatClass": "infrastructure"
          }
        ]
      },
      "isMalicious": true,
      "lookupStatus": "unknown",
      "observedAt": "2026-05-09T00:00:00Z",
      "recommendedAction": "review",
      "riskLevel": "high",
      "riskScore": 82,
      "sources": 12,
      "type": "domain"
    }
  ],
  "success": true,
  "total": 3
}

Changes