Blocklists API

Blocklist signals appear in IP intelligence, domain intelligence, fraud assessments, and rules. They are treated as one signal among others, not as the only decision source.

IP Blocklist Signals

Use the IP intelligence docs for DNSBL and abuse-list checks:

GET /ip/{ip}
GET /ip/{ip}/reputation

IP responses can include individual blocklist results, a blacklistCount, and risk factors such as ip_blocklist_match.

See IP Intelligence.

Domain Blocklist Signals

Use domain intelligence for malware resolver comparison and locally imported feed matches:

GET /domain/{domain}

RequestGuard does not query restricted hosted domain URI blocklist services from the public domain intelligence endpoint. Feed-based matching should be enabled through local imports after reviewing each feed’s license and fair-use rules.

See Domain Intelligence.

Bulk Check

POST /blocklists/check

{
  "targets": ["8.8.8.8", "example.com"]
}

Bulk blocklist checks accept a single target or up to 20 targets.

Rule Conditions

Rules can use IP allow/block lists, email domains, domains, countries, ASNs, hosting network flags, and risk score thresholds.

See Rules.