Blacklist Checker API for real-time threat screening
Check IPs, domains, and full URLs against a verified active coverage matrix with structured source-by-source results, a synchronous API, and a clean dashboard for teams.
A minimal checker interface backed by a wide coverage matrix
Use it for abuse desk triage, signup screening, threat investigation, or automated infrastructure validation.
One schema across every active source
Standardized result objects make it easy to power dashboards, automations, and internal tooling without source-specific parsing.
Synchronous checks only
The API returns a final request/response payload directly. No job orchestration, no webhook dependency, no client-side polling loop.
Same engine across UI and API
Test manually on the landing page, monitor in the user dashboard, or integrate through GET /api/v1/check with the same result model.
36 active blacklists covered
Rendered directly from the verified active registry so the UI and API stay aligned.
| Source ID | Formal Name | Adapter | Target Handling | Reference |
|---|---|---|---|---|
| antispam_cleantalk | AntiSpam by CleanTalk | vendor_api_or_feed_cached | ip,domain->resolved_ip | Open source |
| backscatterer | Backscatterer | dnsbl_live | ip,domain->resolved_ip | Open source |
| barracuda | Barracuda | dnsbl_live | ip,domain->resolved_ip | Open source |
| blocklist_de | BlockList.de | feed_ip_cached | ip,domain->resolved_ip | Open source |
| blocked_servers | Blocked Servers | dnsbl_live | ip,domain->resolved_ip | Open source |
| blocklist_net_ua | Blocklist.net.ua | feed_ip_cached | ip,domain->resolved_ip | Open source |
| brute_force_blocker | Brute Force Blocker | feed_ip_cached | ip,domain->resolved_ip | Open source |
| ci_army_list | CI Army List | feed_ip_cached | ip,domain->resolved_ip | Open source |
| cruzit | CruzIT Blocklist | feed_ip_cached | ip,domain->resolved_ip | Open source |
| cybercrime_tracker | Cybercrime Tracker | feed_ip_cached | ip,domain->resolved_ip | Open source |
| darklist_de | Darklist.de | feed_ip_cached | ip,domain->resolved_ip | Open source |
| efnet_rbl | EFnet RBL | dnsbl_live | ip,domain->resolved_ip | Open source |
| feodo_tracker | Feodo Tracker | feed_ip_cached | ip,domain->resolved_ip | Open source |
| gpf_dns | GPF DNS Block List | dnsbl_live | ip,domain->resolved_ip | Open source |
| greensnow | GreenSnow Blocklist | feed_ip_cached | ip,domain->resolved_ip | Open source |
| ipsum | IPsum | github_raw_cached | ip,domain->resolved_ip | Open source |
| isx_fr | ISX.fr DNSBL | dnsbl_live | ip,domain->resolved_ip | Open source |
| interserver | InterServer IP List | dnsbl_live | ip,domain->resolved_ip | Open source |
| justspam | JustSpam | dnsbl_live | ip,domain->resolved_ip | Open source |
| myip_ms | Myip.ms Blacklist | html_or_feed_cached | ip,domain->resolved_ip | Open source |
| nginx_bad_bot | Nginx Bad Bot Blocker | github_raw_cached | ip,domain->resolved_ip | Open source |
| nordspam | NordSpam | dnsbl_live | ip,domain->resolved_ip | Open source |
| openphish | OpenPhish | url_domain_feed_cached | domain,url-host,domain->resolved_ip | Open source |
| psbl | Passive Spam Block List | dnsbl_live | ip,domain->resolved_ip | Open source |
| phishtank | PhishTank | url_domain_feed_cached | domain,url-host,domain->resolved_ip | Open source |
| plonkatronix | Plonkatronix | dnsbl_live | ip,domain->resolved_ip | Open source |
| ssshia | S.S.S.H.I.A | github_raw_cached | ip,domain->resolved_ip | Open source |
| spamhaus_authbl | Spamhaus AuthBL | dnsbl_live | ip,domain->resolved_ip | Open source |
| spamhaus_dbl | Spamhaus DBL (Domain Blocklist) | dnsbl_domain_live | domain | Open source |
| spamhaus_zen | Spamhaus ZEN (SBL+XBL+PBL) | dnsbl_live | ip,domain->resolved_ip | Open source |
| spamhaus_zrd | Spamhaus ZRD (Zero Reputation) | dnsbl_domain_live | domain | Open source |
| threatfox | ThreatFox IOC Database | vendor_api_or_feed_cached | ip,domain,url-host | Open source |
| url_haus | URLhaus | url_domain_feed_cached | domain,url-host,domain->resolved_ip | Open source |
| ustc_ip_bl | USTC IP BL | dnsbl_live | ip,domain->resolved_ip | Open source |
| vx_vault | VXVault | feed_ip_cached | ip,domain->resolved_ip | Open source |
| zerodot_one_bad_ips | ZeroDot1 Bad IPs | git_or_feed_cached | ip,domain->resolved_ip | Open source |
Keep the contract simple
Programmatic access stays on GET /api/v1/check. UI traffic uses a separate session-aware endpoint so you do not need to expose API keys in the browser.
Accepted target types
ip checks raw IPs. domain and url both accept host values, and url is the safest option when callers may send full URLs like https://proweblook.com/faq.
Billing defaults
1 blacklist credit is deducted only for a successful structured response.
No deduction on invalid API key, invalid input, or hard system failure.
Request example
GET https://proweblook.com/api/v1/check?api_key=YOUR_API_KEY&target=8.8.8.8&target_type=ip&sources=spamhaus,url_haus GET https://proweblook.com/api/v1/check?api_key=YOUR_API_KEY&target=proweblook.com&target_type=url&sources=spamhaus,url_haus GET https://proweblook.com/api/v1/check?api_key=YOUR_API_KEY&target=https://proweblook.com/faq&target_type=url&sources=url_haus,phishtank
Response example
{
"status": true,
"target": "example.com",
"target_type": "domain",
"listed": true,
"risk_score": 50,
"listed_count": 2,
"not_listed_count": 2,
"error_count": 0,
"checked_at": "2026-04-09T06:32:07+00:00",
"latency_ms": 814,
"sources": {
"spamhaus": {
"state": "listed",
"source_name": "Spamhaus",
"source_url": "https://www.spamhaus.org/",
"matched_value": "93.184.216.34",
"checked_value": "93.184.216.34",
"latency_ms": 41,
"data_age_sec": null,
"error": ""
},
"url_haus": {
"state": "listed",
"source_name": "URLhaus",
"source_url": "https://urlhaus.abuse.ch/",
"matched_value": "example.com",
"checked_value": "example.com",
"latency_ms": 4,
"data_age_sec": 248,
"error": ""
},
"ipsum": {
"state": "not_listed",
"source_name": "IPsum",
"source_url": "https://github.com/stamparm/ipsum",
"matched_value": "",
"checked_value": "93.184.216.34",
"latency_ms": 3,
"data_age_sec": 252,
"error": ""
},
"openphish": {
"state": "not_listed",
"source_name": "OpenPhish",
"source_url": "https://www.openphish.com/",
"matched_value": "",
"checked_value": "example.com",
"latency_ms": 2,
"data_age_sec": 310,
"error": ""
}
}
}
Simple blacklist credit packs
Pay as you go through Lemon Squeezy. No forced polling architecture, no subscription lock-in for v1.
Starter
- 100 blacklist credits
- 62-source blacklist coverage
- IP and domain lookups
- API and dashboard access
Growth
- 500 blacklist credits
- Priority queue-free request flow
- 62-source coverage with source-level results
- Best for active API usage
Business
- 2000 blacklist credits
- High-volume synchronous checks
- Full dashboard reporting
- Support for team workflows
What teams usually ask first
Does the API return every active source ID every time?
Yes. Unless you pass a source filter, the checker returns the full active registry with an explicit state for each source.
How are domain checks handled?
IP-based sources evaluate resolved A/AAAA records. URL and domain feeds evaluate the normalized host value, so inputs like proweblook.com and https://proweblook.com/faq are handled correctly.
What happens when a source is unavailable?
Only currently verified sources are exposed by default. If a source becomes unhealthy later, the response still completes and that source is marked as temporarily_unavailable or error instead of breaking the entire check.
Can I monitor checks after I sign in?
Yes. The dashboard keeps recent checks, source-level drill-down, balance visibility, and API examples in one place.
Move from ad-hoc checks to a usable blacklist workflow
Run live checks here, then switch to the dashboard for reporting and buy credits only when your traffic actually needs it.
Get FREE Credits to Start Today
Discover an extensive array of API calls across all ProWebLook APIs. No credit card required — start building in minutes.