36 active sources Synchronous request/response IP, domain, and URL input

Blacklist Checker API for real-time threat screening

Check IPs, domains, and full URLs against a verified active coverage matrix with structured source-by-source results, a synchronous API, and a clean dashboard for teams.

3 free checks left today Create Free Account Try Live Checker
Live Demo

Run a blacklist check right here

No background jobs. Each valid request returns a structured response immediately.

Anonymous demo limit: 3 / 3 remaining today

Optional source filter: comma-separated active IDs such as spamhaus,url_haus,ipsum. Full URLs are normalized to the host automatically.

Querying live DNSBLs and cached intelligence feeds...

Why this flow works
Clean output for both humans and machines

Every result is normalized into the same shape, even when a source is stale, unavailable, or running a different adapter strategy.

  • Explicit per-source states: listed, not_listed, error, temporarily_unavailable
  • Domain and URL checks evaluate resolved IPs plus URL/domain-based feeds where relevant
  • Use the same engine in the dashboard and the external API
  • Buy credits only when you need them via Lemon Squeezy
Built for security operations

A minimal checker interface backed by a wide coverage matrix

Use it for abuse desk triage, signup screening, threat investigation, or automated infrastructure validation.

Structured output
One schema across every active source

Standardized result objects make it easy to power dashboards, automations, and internal tooling without source-specific parsing.

No polling
Synchronous checks only

The API returns a final request/response payload directly. No job orchestration, no webhook dependency, no client-side polling loop.

Multiple surfaces
Same engine across UI and API

Test manually on the landing page, monitor in the user dashboard, or integrate through GET /api/v1/check with the same result model.

Coverage

36 active blacklists covered

Rendered directly from the verified active registry so the UI and API stay aligned.

Source ID Formal Name Adapter Target Handling Reference
antispam_cleantalk AntiSpam by CleanTalk vendor_api_or_feed_cached ip,domain->resolved_ip Open source
backscatterer Backscatterer dnsbl_live ip,domain->resolved_ip Open source
barracuda Barracuda dnsbl_live ip,domain->resolved_ip Open source
blocklist_de BlockList.de feed_ip_cached ip,domain->resolved_ip Open source
blocked_servers Blocked Servers dnsbl_live ip,domain->resolved_ip Open source
blocklist_net_ua Blocklist.net.ua feed_ip_cached ip,domain->resolved_ip Open source
brute_force_blocker Brute Force Blocker feed_ip_cached ip,domain->resolved_ip Open source
ci_army_list CI Army List feed_ip_cached ip,domain->resolved_ip Open source
cruzit CruzIT Blocklist feed_ip_cached ip,domain->resolved_ip Open source
cybercrime_tracker Cybercrime Tracker feed_ip_cached ip,domain->resolved_ip Open source
darklist_de Darklist.de feed_ip_cached ip,domain->resolved_ip Open source
efnet_rbl EFnet RBL dnsbl_live ip,domain->resolved_ip Open source
feodo_tracker Feodo Tracker feed_ip_cached ip,domain->resolved_ip Open source
gpf_dns GPF DNS Block List dnsbl_live ip,domain->resolved_ip Open source
greensnow GreenSnow Blocklist feed_ip_cached ip,domain->resolved_ip Open source
ipsum IPsum github_raw_cached ip,domain->resolved_ip Open source
isx_fr ISX.fr DNSBL dnsbl_live ip,domain->resolved_ip Open source
interserver InterServer IP List dnsbl_live ip,domain->resolved_ip Open source
justspam JustSpam dnsbl_live ip,domain->resolved_ip Open source
myip_ms Myip.ms Blacklist html_or_feed_cached ip,domain->resolved_ip Open source
nginx_bad_bot Nginx Bad Bot Blocker github_raw_cached ip,domain->resolved_ip Open source
nordspam NordSpam dnsbl_live ip,domain->resolved_ip Open source
openphish OpenPhish url_domain_feed_cached domain,url-host,domain->resolved_ip Open source
psbl Passive Spam Block List dnsbl_live ip,domain->resolved_ip Open source
phishtank PhishTank url_domain_feed_cached domain,url-host,domain->resolved_ip Open source
plonkatronix Plonkatronix dnsbl_live ip,domain->resolved_ip Open source
ssshia S.S.S.H.I.A github_raw_cached ip,domain->resolved_ip Open source
spamhaus_authbl Spamhaus AuthBL dnsbl_live ip,domain->resolved_ip Open source
spamhaus_dbl Spamhaus DBL (Domain Blocklist) dnsbl_domain_live domain Open source
spamhaus_zen Spamhaus ZEN (SBL+XBL+PBL) dnsbl_live ip,domain->resolved_ip Open source
spamhaus_zrd Spamhaus ZRD (Zero Reputation) dnsbl_domain_live domain Open source
threatfox ThreatFox IOC Database vendor_api_or_feed_cached ip,domain,url-host Open source
url_haus URLhaus url_domain_feed_cached domain,url-host,domain->resolved_ip Open source
ustc_ip_bl USTC IP BL dnsbl_live ip,domain->resolved_ip Open source
vx_vault VXVault feed_ip_cached ip,domain->resolved_ip Open source
zerodot_one_bad_ips ZeroDot1 Bad IPs git_or_feed_cached ip,domain->resolved_ip Open source
API Sample

Keep the contract simple

Programmatic access stays on GET /api/v1/check. UI traffic uses a separate session-aware endpoint so you do not need to expose API keys in the browser.

Accepted target types

ip checks raw IPs. domain and url both accept host values, and url is the safest option when callers may send full URLs like https://proweblook.com/faq.

Billing defaults

1 blacklist credit is deducted only for a successful structured response.

No deduction on invalid API key, invalid input, or hard system failure.

Request example
GET https://proweblook.com/api/v1/check?api_key=YOUR_API_KEY&target=8.8.8.8&target_type=ip&sources=spamhaus,url_haus
GET https://proweblook.com/api/v1/check?api_key=YOUR_API_KEY&target=proweblook.com&target_type=url&sources=spamhaus,url_haus
GET https://proweblook.com/api/v1/check?api_key=YOUR_API_KEY&target=https://proweblook.com/faq&target_type=url&sources=url_haus,phishtank
Response example
{
    "status": true,
    "target": "example.com",
    "target_type": "domain",
    "listed": true,
    "risk_score": 50,
    "listed_count": 2,
    "not_listed_count": 2,
    "error_count": 0,
    "checked_at": "2026-04-09T06:32:07+00:00",
    "latency_ms": 814,
    "sources": {
        "spamhaus": {
            "state": "listed",
            "source_name": "Spamhaus",
            "source_url": "https://www.spamhaus.org/",
            "matched_value": "93.184.216.34",
            "checked_value": "93.184.216.34",
            "latency_ms": 41,
            "data_age_sec": null,
            "error": ""
        },
        "url_haus": {
            "state": "listed",
            "source_name": "URLhaus",
            "source_url": "https://urlhaus.abuse.ch/",
            "matched_value": "example.com",
            "checked_value": "example.com",
            "latency_ms": 4,
            "data_age_sec": 248,
            "error": ""
        },
        "ipsum": {
            "state": "not_listed",
            "source_name": "IPsum",
            "source_url": "https://github.com/stamparm/ipsum",
            "matched_value": "",
            "checked_value": "93.184.216.34",
            "latency_ms": 3,
            "data_age_sec": 252,
            "error": ""
        },
        "openphish": {
            "state": "not_listed",
            "source_name": "OpenPhish",
            "source_url": "https://www.openphish.com/",
            "matched_value": "",
            "checked_value": "example.com",
            "latency_ms": 2,
            "data_age_sec": 310,
            "error": ""
        }
    }
}
Pricing

Simple blacklist credit packs

Pay as you go through Lemon Squeezy. No forced polling architecture, no subscription lock-in for v1.

Starter
100 blacklist credits
$5
  • 100 blacklist credits
  • 62-source blacklist coverage
  • IP and domain lookups
  • API and dashboard access
Create Account to Buy
Business
2000 blacklist credits
$49
  • 2000 blacklist credits
  • High-volume synchronous checks
  • Full dashboard reporting
  • Support for team workflows
Create Account to Buy
FAQ

What teams usually ask first

Does the API return every active source ID every time?

Yes. Unless you pass a source filter, the checker returns the full active registry with an explicit state for each source.

How are domain checks handled?

IP-based sources evaluate resolved A/AAAA records. URL and domain feeds evaluate the normalized host value, so inputs like proweblook.com and https://proweblook.com/faq are handled correctly.

What happens when a source is unavailable?

Only currently verified sources are exposed by default. If a source becomes unhealthy later, the response still completes and that source is marked as temporarily_unavailable or error instead of breaking the entire check.

Can I monitor checks after I sign in?

Yes. The dashboard keeps recent checks, source-level drill-down, balance visibility, and API examples in one place.

Next step

Move from ad-hoc checks to a usable blacklist workflow

Run live checks here, then switch to the dashboard for reporting and buy credits only when your traffic actually needs it.

Free Credits Included

Get FREE Credits to Start Today

Discover an extensive array of API calls across all ProWebLook APIs. No credit card required — start building in minutes.