Skip to content

isMalicious#

isMalicious_GetReport#

Author: isMalicious
License: AGPL-v3
Version: 1.0
Supported observables types:
- ip
- domain
- fqdn
Registration required: True
Subscription required: True
Free subscription: True
Third party service: https://ismalicious.com

Description#

Check if an IP address or domain is malicious using isMalicious.com threat intelligence. Returns risk score, threat categories, reputation data, and detection sources.

Configuration#

api_key isMalicious API key (get one at https://ismalicious.com)
Default value if not configured N/A
Type of the configuration item string
The configuration item can contain multiple values False
Is required True
api_url isMalicious API URL
Default value if not configured https://ismalicious.com
Type of the configuration item string
The configuration item can contain multiple values False
Is required False

Templates samples for TheHive#