Validin provides a community platform for threat intelligence teams to research and share security information.
isMalicious
isMalicious checks IP addresses, domains, URLs, emails, phone numbers, and cryptocurrency wallets against threat intelligence data.

About isMalicious
isMalicious is a web-based threat intelligence lookup service for checking IPs, domains, URLs, emails, phone numbers, crypto wallets, and other indicators such as file hashes, CVEs, ASNs, and passwords. It shows reputation information with source evidence from blocklists, observations, and network data.
You can start an investigation on the website, use the HTTP GET /api/check endpoint with an API key, bring feeds into OpenCTI, SIEMs, or firewalls via STIX 2.1/TAXII 2.1, or connect to an AI assistant through an MCP server with 9 tools. The free API key includes 50 reputation checks per month, and STIX/TAXII access requires Pro or Enterprise.
It suits security teams, network operators, and developers who need to review why an indicator was flagged and use that data in existing workflows.
Key features
- Check IPs, domains, URLs, emails, phones and wallets
- View reputation verdicts with source evidence
- Use API endpoint for reputation checks
- Import threat feeds via STIX 2.1 and TAXII 2.1
- Connect AI assistants via MCP server
- Check file hashes, CVEs, ASNs and passwords
- Shows sources behind verdicts
- Supports API, STIX/TAXII and MCP access
- Free plan includes 50 checks per month
- Covers multiple indicator types
- Free API allowance limited to 50 checks per month
- STIX/TAXII access requires Pro or Enterprise
isMalicious at a glance
- Website
- ismalicious.com
- Category
- Privacy & Security › Website & URL Scanners
- Type
- Website
- Pricing
- Freemium
- Platforms
- Web
- Open source
- Not stated
- Language
- English
- Last checked
- Oct 5, 2026 · Online when checked
- Listed
- Oct 5, 2026
isMalicious alternatives
Tools and sites you could use instead, ranked by how closely they match.
URLVoid checks a website's online reputation using multiple reputation and blocklist services to identify potential risks.
openSquat detects look-alike domains that resemble an organization’s legitimate domains, helping identify possible impersonation.
DNSTwist detects lookalike domains used in homograph phishing, typosquatting, and brand impersonation.
DNSai provides DNS lookups and analysis tools for records, WHOIS, blacklists, email authentication, and domains.
DomainRecon looks up DNS records, WHOIS details, SSL certificates, and IP addresses for a domain.
Popular in Website & URL Scanners
Well-known listings from the same topic.
isMalicious FAQ
What can I check with isMalicious?
Is isMalicious free?
How can I integrate isMalicious data?
Tell us and an editor will check it.
Claim the listing and suggest updates yourself. An editor checks every claim first.












